v1.3.1

Install

npx zengate@1.3.1
# or
docker run -d --name zengate -p 127.0.0.1:8083:8083 -v zengate:/data developingchet/zengate:1.3.1

The image is also on GitHub: ghcr.io/developingchet/zengate:1.3.1, with the same digest.

Image digest: sha256:8ea4485199a116110cf535af355497259794af27f869bf089b7fe9a6f4a20042

Verify the image signature

cosign verify developingchet/zengate:1.3.1 \
  --certificate-identity-regexp '^https://github.com/developingchet/zengate/.github/workflows/release.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Verify the release files

checksums.txt and the package tarball are signed with cosign (*.sigstore.json):

cosign verify-blob checksums.txt --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp '^https://github.com/developingchet/zengate/.github/workflows/release.yml@refs/tags/v' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum -c checksums.txt

The npm package carries provenance: npm audit signatures.

What's Changed

• ci: publish releases to GHCR and GitHub Packages by @developingchet in #34

Full Changelog: v1.3.0...v1.3.1