Skip to content

JagHelm 2.3.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Oct 15:20
· 444 commits to main since this release
v2.3.0
5527960

2026-10-18 · v2.3.0 · ghcr.io/jagbhandal/jaghelm:2.3.0

A weekly Arcane vulnerability digest by mobile push, sent only when there is something new.

Added

  • A weekly Arcane vulnerability digest by mobile push. For the environments listed in ARCANE_VULN_DIGEST_ENVS (empty by default, which leaves it off), once a week (Sunday 14:00 UTC by default; ARCANE_VULN_DIGEST_DAY and ARCANE_VULN_DIGEST_HOUR) JagHelm reads the scan results Arcane has stored and pushes only when something is new: critical or high findings with a fix in the images your containers use, known-exploited (KEV) entries, or an image scan that has newly gone stale or failed. Each digest is recorded as a run of the arcane-vuln-digest scheduled job, which goes overdue when digests stop. It needs scanning turned on in Arcane and the vulnerabilities:read grant on JagHelm's Arcane key (a global grant in Arcane v2.16.1, so the list decides what is read); preview it with node scripts/arcane-poll-once.js --vuln-digest. See docs/arcane/SETUP.md.
docker pull ghcr.io/jagbhandal/jaghelm:2.3.0

Image signed with cosign (keyless). Full changelog: v2.2.0...v2.3.0

Assets 2
Loading