Skip to content

v0.1.3-rc.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Aug 13:51
v0.1.3-rc.1
4cae072
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Verifiable artifacts

npm publication was not enabled for this release.

shasum -a 256 -c SHA256SUMS
gh attestation verify decionis-agent-safe-pipeline-0.1.3-rc.1.tgz \
  --repo decionis/agent-safe-pipeline \
  --bundle agent-safe-pipeline-0.1.3-rc.1.provenance.sigstore.json \
  --custom-trusted-root trusted_root.jsonl

The CycloneDX SBOM was generated from the extracted npm tarball and contains at least five dependency components. Raw in-toto statements and their signed Sigstore bundles are attached for mirrors and offline verification.

What's Changed

  • Improve OpenSSF Scorecard controls by @decionis-bot[bot] in #39
  • Add protected npm bootstrap workflow by @decionis-bot[bot] in #42
  • Prepare npm OIDC prerelease by @decionis-bot[bot] in #43

Full Changelog: v0.1.2...v0.1.3-rc.1

Assets 12
Loading