Repository navigation
v0.3.2
Same product code as v0.3.1. This release exists to validate and ship the CI supply-chain fix (#849): tag runs now complete the full chain — image publish → Trivy scan → SBOM attached to this release → Grype scan → Cosign signature. The v0.3.0 and v0.3.1 images on GHCR are unsigned (their tag runs died at the SBOM step before signing); operators should pin v0.3.2+.