Skip to content

v0.1.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Oct 06:29
· 18 commits to main since this release
v0.1.1
This tag was signed with the committer’s verified signature.
mrrobertkent Robert Kent Jr
SSH Key Fingerprint: k5gUv1hTShGCFOoPWul+AI9wUzYGAYMk2VTwWsIbdTY
Verified
Learn about vigilant mode.
7a4150d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release signing. hookgate itself is unchanged from 0.1.0.

  • checksums.txt is signed with cosign (checksums.txt.sigstore.json), and the image is signed by digest; both signatures are keyless and issued to the release workflow.
  • The release workflow attaches the archives' SLSA build provenance as hookgate_0.1.1.intoto.jsonl.
  • The README's "Verify a release" section lists the gh attestation verify and cosign verify commands.

Container image: ghcr.io/mrrobertkent/hookgate:0.1.1

Digest: sha256:e4169366c91182963595b759cafd74a9c7f8f03365121e3d4b97e834cbfed59e

What's Changed

Full Changelog: v0.1.0...v0.1.1

Contributors

mrrobertkent
Assets 9
Loading