Skip to content

OpenCyber 1.0.0-beta.1 — amd64 public beta

Pre-release
Pre-release

Choose a tag to compare

View all tags
@mitkox mitkox released this 09 Nov 11:18
· 10 commits to main since this release
v1.0.0-beta.1
7fea269
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

OpenCyber 1.0.0-beta.1 is the first public beta of the amd64-only harness.

Image: ghcr.io/mitkox/opencyber:1.0.0-beta.1
Digest: sha256:cd119409d0884b1c7bde10f6a21bc17aad1a69309387b8a303eb7c58fbccbf0d
Architecture: linux/amd64 only. arm64 is no longer supported.

Security status:

  • Trivy 0.76.2, comprehensive detection, unfixed included: 0 CRITICAL, 107 HIGH.
  • Grype 0.121.2: 0 CRITICAL, 58 HIGH.
  • HIGH findings remain and are accepted for this beta release.
  • Oracle Instant Client, Microsoft DIA, Metasploit, oscanner and pyxdia were removed because no redistribution agreement was recorded.

License status: the final amd64 SBOM was rescanned; the 1,852 unknown-license components are recorded with their exact list and hash in compliance/license-policy.json and are attached here.

Review: mitkox-ai approved pull request #4; the approval is recorded in docs/BETA_SECURITY_REVIEW.md.

Build provenance: this image was built and scanned on the maintainer devbox, not by the canonical CI candidate workflow, and it is not accompanied by CI attestations. The attached evidence records the exact image digest and scanner outputs.

Source and compliance evidence are attached as checksummed release assets.

Assets 10
Loading