v1.0.0

The first release of heyvaldemar/os-shell: a Debian shell for the init containers Helm charts run, laid out like bitnami/os-shell, rebuilt every week and signed.

bitnami/os-shell has published only latest since August 2025, now on Photon OS, and its last versioned Debian image, 12-debian-12-r51, is frozen. On 2026-10-30 Trivy found 19 critical and 171 high findings in it, 119 of them with a fix it will never get. This image carries none with a fix: a build that does is not published.

• Tags 12 (Debian 12) and 13 (Debian 13), and latest on 13, for linux/amd64 and linux/arm64.
• Checked on every build against bitnamilegacy/os-shell:12-debian-12-r51: the same user, command, HOME, PATH and build SHELL, every executable on its PATH or a reason, and the calls init containers make, run on both.
• Bitnami's own PostgreSQL and Redis charts run their init containers on it, on kind, before anything is published.
• The five helpers built from source at pinned commits with Go 1.27.3.
• Every digest signed with cosign, keyless, with SBOM, SLSA provenance and a GitHub build attestation.

The CVE table and how each claim is tested are in the README.