v1.0.0

1.0.0 (2026-08-21)

Features

• add generic release-please flow (#5) (ec5d370)
• complete the template - self-validating CI, security defaults, rehearsed adoption (#6) (55cdd57)

Documentation

• update contributors (ee8bd78)

Verifying this release

ghcr.io/container-registry/oss-project-template@sha256:e3b21037bc72520cc43b1647f04b8e8d23532b2aa0d924bf6a76692a823d1ded

Signature:

cosign verify ghcr.io/container-registry/oss-project-template@sha256:e3b21037bc72520cc43b1647f04b8e8d23532b2aa0d924bf6a76692a823d1ded \
  --certificate-identity-regexp '^https://github\.com/container-registry/oss-project-template/\.github/workflows/publish-image\.yml@' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

SBOM attestation:

cosign verify-attestation --type spdxjson ghcr.io/container-registry/oss-project-template@sha256:e3b21037bc72520cc43b1647f04b8e8d23532b2aa0d924bf6a76692a823d1ded \
  --certificate-identity-regexp '^https://github\.com/container-registry/oss-project-template/\.github/workflows/publish-image\.yml@' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Binary provenance and checksums:

gh attestation verify app-linux-amd64 --repo container-registry/oss-project-template
sha256sum -c checksums.txt