Release v0.10.1

ClearCutt Hardened Fleet Release v0.10.1

This release publishes the configured clearcutt.fleet.yaml fleet under ghcr.io/northcutted/clearcutt with Sigstore keyless signatures, SPDX SBOM attestations, SLSA Build L3 provenance, test-result attestations, and catalog-ready release assets.

The public catalog may show newly disclosed, unfixed, dev-tier, or base-layer findings after release because catalog scans run against the latest vulnerability database.

OCI Images

Language Target	Dev	Slim	Distroless
coreLTS	ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-corelts:v0.10.1-distroless
java21	ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-java21:v0.10.1-distroless
java25	ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-java25:v0.10.1-distroless
node22	ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-node22:v0.10.1-distroless
node24	ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-node24:v0.10.1-distroless
python3.15	ghcr.io/northcutted/clearcutt/clearcutt-python3.15:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-python3.15:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-python3.15:v0.10.1-distroless
go1.25	ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-go1.25:v0.10.1-distroless
go1.26	ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-go1.26:v0.10.1-distroless
dotnet8	ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-dotnet8:v0.10.1-distroless
dotnet10	ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-dotnet10:v0.10.1-distroless
rust1.95	ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-rust1.95:v0.10.1-distroless
cc15	ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.1-dev	ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.1-slim	ghcr.io/northcutted/clearcutt/clearcutt-cc15:v0.10.1-distroless

Versioned tags follow ghcr.io/northcutted/clearcutt/<clearcutt>-<language>:v0.10.1-<tier>. Rolling tier tags point at the latest release.

Nix Flake Integration

inputs.fleet.url = "github:northcutted/clearcutt/v0.10.1";

Changelog

What's Changed

• fix: enrich service catalog signatures by @northcutted in #4

Full Changelog: v0.10.0...v0.10.1