Skip to content

Releases

v0.1.3

Choose a tag to compare

@felixkrusch felixkrusch released this 03 Nov 22:28
75239ad

entrytwo 0.1.3

Signed image: ghcr.io/felixkrusch/entrytwo@sha256:a5a29438d52ba9376de21201323a820f4f1366eb46c2cb0b1e89f308f59cba5f

Set UPDATE_MANIFEST_URL on your instance to the raw manifest.json below
(or pin APP_IMAGE to the digest) to receive this update.

Verification policy

  • Keyless (default): identity https://github.com/felixkrusch/entrytwo/.github/workflows/release.yml@refs/tags/v0.1.3, issuer https://token.actions.githubusercontent.com
  • Manifest: cosign verify-blob --bundle manifest.sigstore.json --certificate-identity 'https://github.com/felixkrusch/entrytwo/.github/workflows/release.yml@refs/tags/v0.1.3' --certificate-oidc-issuer https://token.actions.githubusercontent.com manifest.json
  • BuildKit provenance is attached to the images; the signed SPDX SBOM is stored in GHCR.
  • Both GHCR packages (felixkrusch/entrytwo and felixkrusch/entrytwo-updater) must be public for anonymous installation.

v0.1.2

Choose a tag to compare

@felixkrusch felixkrusch released this 03 Nov 17:40
75239ad

entrytwo 0.1.2

Signed image: ghcr.io/felixkrusch/entrytwo@sha256:fd4bdbc7c4942730666b5e7813ed827051f681e1a649fe606aeadafd3586a2ed

Set UPDATE_MANIFEST_URL on your instance to the raw manifest.json below
(or pin APP_IMAGE to the digest) to receive this update.

Verification policy

  • Keyless (default): identity https://github.com/felixkrusch/entrytwo/.github/workflows/release.yml@refs/tags/v0.1.2, issuer https://token.actions.githubusercontent.com
  • Manifest: cosign verify-blob --bundle manifest.sigstore.json --certificate-identity 'https://github.com/felixkrusch/entrytwo/.github/workflows/release.yml@refs/tags/v0.1.2' --certificate-oidc-issuer https://token.actions.githubusercontent.com manifest.json
  • BuildKit provenance is attached to the images; the signed SPDX SBOM is stored in GHCR.
  • Both GHCR packages (felixkrusch/entrytwo and felixkrusch/entrytwo-updater) must be public for anonymous installation.

v0.1.1

Choose a tag to compare

@felixkrusch felixkrusch released this 03 Nov 16:08
75239ad

entrytwo 0.1.1

Signed image: ghcr.io/felixkrusch/entrytwo@sha256:9c56f3532c088fb0b14bd4b9ec81226325644ff42201de86ed9658b87641fc97

Set UPDATE_MANIFEST_URL on your instance to the raw manifest.json below
(or pin APP_IMAGE to the digest) to receive this update.

Verification policy

  • Keyless (default): identity https://github.com/felixkrusch/entrytwo/.github/workflows/release.yml@refs/tags/v0.1.1, issuer https://token.actions.githubusercontent.com
  • Manifest: cosign verify-blob --bundle manifest.sigstore.json --certificate-identity 'https://github.com/felixkrusch/entrytwo/.github/workflows/release.yml@refs/tags/v0.1.1' --certificate-oidc-issuer https://token.actions.githubusercontent.com manifest.json
  • BuildKit provenance is attached to the images; the signed SPDX SBOM is stored in GHCR.
  • Both GHCR packages (felixkrusch/entrytwo and felixkrusch/entrytwo-updater) must be public for anonymous installation.