MKurator 0.15.2

0.15.2 - 2026-08-28

Bug Fixes

• security: Bump Go to 1.26.7 and record toolchain policy 50ef84d

• security: Clear Scorecard OSV and pin image digests (#192) 6ce4ec4

Refactoring

• validation: Drop dead ValidateQueueManagerConnectionDelete duplicate 384c6ea

---

Container image

ghcr.io/platformrelay/mkurator:0.15.2

Multi-arch (linux/amd64, linux/arm64), distroless nonroot base.

OCI attestations (SBOM + SLSA provenance) are attached in GHCR. Verify the signature:

cosign verify \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp '^https://github.com/PlatformRelay/MKurator/.+' \
  ghcr.io/platformrelay/mkurator@sha256:d49ea2680837822b13f40f916caea1e5ff24761d31b914a8d78ea3f9004d6e8a

Install (Kustomize)

kubectl apply -f install-crds.yaml
kubectl apply -f install.yaml

Install (Helm — OCI)

helm upgrade --install mkurator oci://ghcr.io/platformrelay/mkurator \
  --version 0.15.2 \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/platformrelay/mkurator \
  --set image.tag=0.15.2

Install (Helm — GitHub Release tarball)

helm upgrade --install mkurator mkurator-0.15.2.tgz \
  --namespace mkurator-system \
  --create-namespace \
  --set image.repository=ghcr.io/platformrelay/mkurator \
  --set image.tag=0.15.2

Verify checksums with sha256sum -c checksums.txt.