Skip to content

v0.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Aug 16:25
· 30 commits to master since this release
v0.2.0
This tag was signed with the committer’s verified signature. The key has expired.
franzos Franz Geffke
GPG key ID: 1B3418BA53820C4C
Expired
Verified
Learn about vigilant mode.
f3c221e
This commit was signed with the committer’s verified signature. The key has expired.
franzos Franz Geffke
GPG key ID: 1B3418BA53820C4C
Expired
Verified
Learn about vigilant mode.

Added

  • MCP clients connect via CIMD (URL client IDs), no registration step
  • Resource registry with admin UI replaces the audience config allow-list
  • Forseti can front Hydra's issuer: augmented discovery plus a /hydra proxy
  • Consent shows a CIMD client's host as its primary identity

Changed

  • Client audiences are trusted only from admin-created records

Removed

  • Dynamic Client Registration (RFC 7591) and initial access tokens

Fixed

  • Client metadata rows failed to load on Postgres deployments

Container image: ghcr.io/franzos/forseti:0.2.0

Verify a download:

sha256sum -c forseti-x86_64-unknown-linux-gnu.tar.gz.sha256
slsa-verifier verify-artifact forseti-x86_64-unknown-linux-gnu.tar.gz \
  --provenance-path multiple.intoto.jsonl \
  --source-uri github.com/franzos/forseti --source-tag v0.2.0

Install steps: README quickstart

Changes since v0.1.23: compare

Assets 7
Loading