SeeBOM 0.3.2

Container Images

All images are signed with cosign (keyless) and attested with SLSA provenance.

docker pull ghcr.io/seebom-labs/seebom/api-gateway:0.3.2
docker pull ghcr.io/seebom-labs/seebom/parsing-worker:0.3.2
docker pull ghcr.io/seebom-labs/seebom/ingestion-watcher:0.3.2
docker pull ghcr.io/seebom-labs/seebom/cve-refresher:0.3.2
docker pull ghcr.io/seebom-labs/seebom/ui:0.3.2

Verify signatures:

cosign verify --certificate-identity-regexp="https://github.com/seebom-labs/seebom" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com" \
  ghcr.io/seebom-labs/seebom/api-gateway:0.3.2

Helm Chart

helm install seebom oci://ghcr.io/seebom-labs/seebom/charts/seebom --version 0.3.2

SBOM

An SPDX SBOM for this release is attached as seebom-0.3.2.spdx.json.

What's Changed

📖 Documentation

• security: attach provenance bundle, fix remaining CVEs, add pre-release scan docs by @mfahlandt in #109

🔧 Maintenance

• deps(actions): bump github/codeql-action from 3.28.16 to 4.35.3 by @dependabot[bot] in #97

Full Changelog: v0.3.1...v0.3.2