v1.1.1

Install

npx zengate@1.1.1
# or
docker run -d --name zengate -p 127.0.0.1:8083:8083 -v zengate:/data developingchet/zengate:1.1.1

Image digest: sha256:2d684d9b05dabaada0c60b5193d7e3c5944c0531fcd5247b2c9f2b390adad46f

Verify the image signature

cosign verify developingchet/zengate:1.1.1 \
  --certificate-identity-regexp '^https://github.com/developingchet/zengate/.github/workflows/release.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Verify the release files

checksums.txt and the package tarball are signed with cosign (*.sigstore.json):

cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp '^https://github.com/developingchet/zengate/.github/workflows/release.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c checksums.txt

The npm package carries provenance: npm audit signatures.

What's Changed

• docs: note that token limits are now enforced in the 1.1.0 changelog by @developingchet in #18
• fix: upgrade Debian packages in the image to clear Trivy findings by @developingchet in #21

Full Changelog: v1.1.0...v1.1.1