Skip to content

v0.7.0 - Docker Content Trust in Dockerfiles, compose, k8s, scripts

Choose a tag to compare

View all tags
@cosmichackerx cosmichackerx released this 03 Oct 10:39
· 8 commits to main since this release
v0.7.0
9db272c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.7.0 - 2026-10-03

  • Docker Content Trust outside .github (issue #27): the docker-content-trust rule now also reads Dockerfiles/Containerfiles, Compose files, Kubernetes manifests (env as name:/value: pairs or flow maps) and other YAML, *.sh, Makefiles, .env* files, and recognises --disable-content-trust=false and the old ENV DOCKER_CONTENT_TRUST 1 form. An explicit Dockerfile path works and is no longer read as a workflow. --no-deadlines skips all of it.
Assets 2
Loading