Repository navigation
v1.0.2
1.0.2 (2026-10-10)
Bug fixes
Container image
Deploy by digest — a tag can be moved, a digest cannot:
ghcr.io/mforce/cluckwork@sha256:f3d32b9376780efefa2b26b50dd280ab2c472cd25c1514d84800d58d7e0f769a
Machine-readable: the image.json asset on this release.
Verify the bytes came from this repo's CI before deploying:
# requires a prior `docker login ghcr.io` — an oci:// subject
# needs registry credentials. Full recipe: README, "Deploying".
gh attestation verify oci://ghcr.io/mforce/cluckwork@sha256:f3d32b9376780efefa2b26b50dd280ab2c472cd25c1514d84800d58d7e0f769a \
--repo mforce/cluckwork \
--signer-workflow mforce/cluckwork/.github/workflows/ci.yml \
--source-ref refs/heads/release/v1.0.x \
--bundle-from-oci