Skip to content

opendevops v0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 Jul 06:37
v0.1.0
e3090c7

The first public release of opendevops packages the policy-gated operations agent as prebuilt,
versioned artifacts. Users no longer need to clone the repository or compile the TypeScript
dashboard.

Install the CLI

uv tool install \
  'opendevops[checkpoint,ssh] @ https://github.com/skundu42/opendevops/releases/download/v0.1.0/opendevops-0.1.0-py3-none-any.whl'
opendevops init opendevops-workspace

The universal wheel contains the compiled dashboard, starter configuration, policy packs, and
Kubernetes bootstrap files. PyPI trusted publishing is prepared but intentionally disabled until
the project’s one-time PyPI publisher registration is completed.

Run the service

curl -fLO \
  https://github.com/skundu42/opendevops/releases/download/v0.1.0/opendevops-deploy-0.1.0.tar.gz
tar -xzf opendevops-deploy-0.1.0.tar.gz
cd opendevops-0.1.0
cp .env.example .env
# Fill every required blank in .env.
docker compose pull
docker compose up -d

The deployment bundle pins ghcr.io/skundu42/opendevops:0.1.0, published for linux/amd64 and
linux/arm64.

Image digest:

sha256:d6c08044fdfb922e80bec0eedfaeae533a709e8cc7d6e51cbf2573038e7e2155

Highlights

  • Default-deny, argv-only execution with credential separation and output scrubbing.
  • Kubernetes, GitHub, AWS, Google Cloud, Azure, and structured SSH policy families.
  • OIDC authentication, viewer/operator/approver/admin RBAC, requester/approver separation, and
    server-side session revocation.
  • Expiring capability grants, dry-run enforcement, repeat/failure limits, and bounded dangerous
    actions.
  • Authenticated dashboard chat, live run telemetry, approvals, cancellations, costs, policy
    decisions, audit integrity, and OpenTelemetry signals.
  • CLI, HTTP, Slack, scheduler, Alertmanager, and GitHub webhook interfaces.
  • Hash-chained audit logs, release checksums, artifact provenance, container SBOMs, and signed OCI
    provenance.

Verify

Download SHA256SUMS with the release artifacts, then run:

sha256sum -c SHA256SUMS
gh attestation verify opendevops-0.1.0-py3-none-any.whl \
  --repo skundu42/opendevops
docker buildx imagetools inspect ghcr.io/skundu42/opendevops:0.1.0

See the getting-started guide,
deployment guide, and
security model
before connecting real infrastructure.

Assets 6
Loading