v0.38.1

0.38.1 (2026-07-03)

Bug Fixes

• validate layer media types and return structured scan errors (4fd69a4)

Code Refactoring

• rename Go module to github.com/container-registry/harbor-scanner-trivy (#20) (3aecb90)

---

Container Image

Multi-arch image (linux/amd64, linux/arm64) signed with cosign.

Image	Reference
harbor-scanner-trivy	8gears.container-registry.com/8gcr/harbor-scanner-trivy:v0.38.1

Verify the image signature:

cosign verify \
  --certificate-identity "https://github.com/container-registry/harbor-scanner-trivy/.github/workflows/publish-image.yml@refs/heads/main" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  8gears.container-registry.com/8gcr/harbor-scanner-trivy:v0.38.1

Verify the SBOM attestation:

cosign verify-attestation \
  --certificate-identity "https://github.com/container-registry/harbor-scanner-trivy/.github/workflows/publish-image.yml@refs/heads/main" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  --type spdxjson \
  8gears.container-registry.com/8gcr/harbor-scanner-trivy@sha256:f154cfcf09497e48a93656b6ad3392fd1638147ade576d1dd54454fa638ee2a4

Helm Chart

helm install harbor-scanner-trivy \
  oci://8gears.container-registry.com/8gcr/charts/harbor-scanner-trivy \
  --version 0.38.1