Skip to content

v1.0.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 11 Sep 17:01
· 51 commits to main since this release
v1.0.1
1baaaf2

Praxis 1.0.1 release index

Container images

Image Digest Tags
ghcr.io/cytechlabs/praxis-backend sha256:ac044d73cf131044e49a3a3c7efd7aa5181f2c6452563625c0b0c5efd008bb43 1.0.1, 1.0, latest
ghcr.io/cytechlabs/praxis-frontend sha256:a1f4d01ce4afb0bdf03a160a1a891f49a206f44aba13e04d44255700524c23be 1.0.1, 1.0, latest

Tags move between releases; digests do not. Deploy the digest:

docker pull ghcr.io/cytechlabs/praxis-backend@sha256:ac044d73cf131044e49a3a3c7efd7aa5181f2c6452563625c0b0c5efd008bb43
docker pull ghcr.io/cytechlabs/praxis-frontend@sha256:a1f4d01ce4afb0bdf03a160a1a891f49a206f44aba13e04d44255700524c23be

Image SBOMs

  • sbom-backend-1.0.1.cdx.json (CycloneDX 1.6) for praxis-backend
  • sbom-frontend-1.0.1.cdx.json (CycloneDX 1.6) for praxis-frontend

Verifying an image

gh attestation verify oci://ghcr.io/cytechlabs/praxis-backend@sha256:ac044d73cf131044e49a3a3c7efd7aa5181f2c6452563625c0b0c5efd008bb43 \
    --repo cytechlabs/praxis

The same command verifies each image above. It checks the build
provenance and the SBOM attestation, both issued to this repository's
release workflow through GitHub OIDC. There is no long lived signing
key to distribute or rotate.

Fleet agent

Published under agent-v1.0.1: https://github.com/cytechlabs/praxis/releases/tag/agent-v1.0.1

Artifact SHA-256
praxis-agent-v1.0.1-linux-amd64-sbom.cdx.json 3d62851e912d1807acdf8b2ce1b62fe041e37d54eb79e71cc8cb17c6035ec20a
praxis-agent-v1.0.1-linux-amd64.tar.gz 85eed213e075c3df4955b7e254c78142ea379b484a7a28653f5b02f5e8c3d7fe
praxis-agent-v1.0.1-linux-arm64-sbom.cdx.json df7d8635fb35d7965c30b767c142d2e355fc6fbd0fef156fe26cb382838e2e87
praxis-agent-v1.0.1-linux-arm64.tar.gz af5c280981b185324e23e6906361b8b75e48713d824b6094da062fdbe8027a26

checksums.txt is signed with keyless Sigstore. Verify it with checksums.txt.sig and checksums.txt.pem from that release before trusting the checksums above.

Security gates

Gate Status Detail
source verification passed Backend migrations and tests plus frontend lint and type check ran against this commit.
release readiness passed Package metadata across the repository matches the release version.
container vulnerability scan passed Trivy found no unaccepted CRITICAL findings in the archived images that were promoted.
image sbom binding passed Each SBOM was generated from, and checked against, the published image digest.

Reports

What's Changed

  • Release Praxis 1.0.1 by @cfreeman29 in #40
  • Backport Wave 9 onboarding and SSH fixes to 1.0.1 by @cfreeman29 in #46
  • Backport SSH policy defaults, command audit outcomes, and dependency fixes to 1.0.1 by @cfreeman29 in #49
  • Finalize the 1.0.1 security and qualification record by @cfreeman29 in #50

Full Changelog: v1.0.0...v1.0.1

Contributors

cfreeman29
Assets 5
Loading