Skip to content

DevGuard Scanner 0.16.1-test.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Sep 10:12
· 2278 commits to main since this release
0.16.1-test.1
b520291
This commit was signed with the committer’s verified signature.
timbastin Tim Bastin
SSH Key Fingerprint: 2O6OxIHCqDNsw3RwrzteTRYMMQnVg3MdD5pSdustIcA
Verified
Learn about vigilant mode.

DevGuard Release 0.16.1-test.1

🛡️ Secure software supply chain scanning and security analysis toolkit

📦 Release Assets

📱 Binaries

  • devguard-scanner-linux-amd64.tar.gz - Linux x64 binary
  • devguard-scanner-linux-arm64.tar.gz - Linux ARM64 binary
  • devguard-scanner-darwin-amd64.tar.gz - macOS x64 binary
  • devguard-scanner-darwin-arm64.tar.gz - macOS ARM64 (Apple Silicon) binary
  • devguard-scanner-windows-amd64.zip - Windows x64 binary
  • devguard-scanner-windows-arm64.zip - Windows ARM64 binary

🐳 Container Images

  • Registry:
    • ghcr.io/l3montree-dev/devguard:0.16.1-test.1 (Main platform)
    • ghcr.io/l3montree-dev/devguard/scanner:0.16.1-test.1 (Scanner tool)

🔐 Security Artifacts

  • checksums.txt - SHA256 checksums for all artifacts
  • *.sig - Digital signatures for all artifacts
  • *.link - in-toto attestation links
  • *.provenance.json - SLSA Level 3 provenance attestation
  • devguard-scanner-0.16.1-test.1-sbom.json - Software Bill of Materials

🚀 Quick Start

Download and Install

# Linux/macOS - Download and extract
curl -L https://github.com/l3montree-dev/devguard/releases/download/0.16.1-test.1/devguard-scanner-linux-amd64.tar.gz | tar -xz
chmod +x devguard-scanner-linux-amd64
sudo mv devguard-scanner-linux-amd64 /usr/local/bin/devguard-scanner

# Verify installation
devguard-scanner --version

Docker Usage

# Pull DevGuard Scanner from registry
docker pull ghcr.io/l3montree-dev/devguard/scanner:0.16.1-test.1

# Pull DevGuard Platform from registry
docker pull ghcr.io/l3montree-dev/devguard:0.16.1-test.1

Go Install

go install github.com/l3montree-dev/devguard/cmd/devguard-scanner@0.16.1-test.1

🔒 Security Verification

All release artifacts are cryptographically signed and include complete supply chain attestation.

Verify Checksums

# Download checksums
curl -L https://github.com/l3montree-dev/devguard/releases/download/0.16.1-test.1/checksums.txt

# Verify a binary
sha256sum -c checksums.txt --ignore-missing

Verify Supply Chain

# Verify in-toto attestation and SLSA provenance
devguard-scanner intoto verify --help

📖 Documentation: DevGuard Documentation
🐛 Report Issues: GitHub Issues
💬 Community: Discussions

Assets 9
Loading