Skip to content

Go envelope v1.182

Choose a tag to compare

View all tags
@markus-barta markus-barta released this 18 Aug 09:49
go-envelope-v1.182
187d76a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security rebuild of the Go envelope from protected main for JANUS-439.

  • builds with Go 1.26.6, fixing GO-2026-6218 in net/url and GO-2026-6091 in html/template
  • retains the in-product Knowledge section delivered in v1.181
  • keeps govulncheck on both pull requests and pushes to main
  • signed image, SBOM, provenance, scanner summary, and production admission receipt are produced by the release workflow

Production promotion is pending the exact released digest and the reviewed nixcfg pin/deploy path.

Assets 8
Loading