v0.1.0

Changelog

• ab723a3: Initial commit (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• adfb687: build(deps): Bump actions/checkout from 6.0.2 to 7.0.1 (#8) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 248f205: build(deps): Bump actions/setup-go from 6.3.0 to 7.0.0 (#6) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• fb545d6: build(deps): Bump actions/stale from 10.4.0 to 11.0.0 (#2) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 1891949: build(deps): Bump dependabot/fetch-metadata from 2.5.0 to 3.1.0 (#5) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• a806569: build(deps): Bump github.com/onsi/ginkgo/v2 from 2.27.4 to 2.32.1 (#4) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 4584728: build(deps): Bump github.com/onsi/ginkgo/v2 from 2.32.1 to 2.32.2 (#36) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 02a9963: build(deps): Bump github.com/onsi/gomega from 1.39.0 to 1.43.0 (#3) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 5bc4dbd: build(deps): Bump github.com/prometheus/client_golang from 1.24.0 to 1.24.1 (#22) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 695e0d8: build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.44.0 to 1.45.0 (#34) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• bff0ea7: build(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.44.0 to 1.45.0 (#35) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• b9ae42f: build(deps): Bump google.golang.org/grpc from 1.82.1 to 1.83.2 (#9) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 3b2b5b2: build(deps): Bump sigs.k8s.io/controller-runtime from 0.25.0 to 0.25.1 (#37) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 32665cc: build(deps): Bump sigstore/cosign-installer from 4.1.0 to 4.1.2 (#7) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 27272d3: feat: CI/CD hardening, release automation, and OSS repo scaffolding (Bertie 21040807+teerakarna@users.noreply.github.com)
• bcd544c: feat: LLM enrichment via Anthropic, gated by fingerprint (slice 4) (#13) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• b4a38bc: feat: ProposePullRequest action with per-namespace pull request cap (#42) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 23f7abb: feat: SignalPolicy + Finding CRDs, Trivy provider (slice 2) (#11) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 87a2b42: feat: Suppression CRD (#15) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• adfaa19: feat: budget ceiling, degraded mode, self-metrics, K8s Events (#14) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 2be713a: feat: content-addressed fingerprinting (slice 3) (#12) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 99c4b3b: feat: features-first README, expandable architecture diagram (#24) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 342dcc5: feat: findings-status dashboard, candor_findings_current live gauge (#26) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• e5ad7ad: feat: generic webhook sink + periodic digest (#17) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 5ab207f: feat: governance and supply-chain credibility signals (#10) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 2c63116: feat: link-check CI (lychee) (#21) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 7fa6217: feat: public docs/marketing site, published via mkdocs-publisher (#20) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 1b1a42f: feat: scaffold Candor - accountable LLM-assisted k8s operator (Bertie 21040807+teerakarna@users.noreply.github.com)
• 2a52e2f: feat: verification loop, published accuracy metrics, Grafana dashboard (#16) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 46021fa: feat: verify and preview the Grafana dashboard for real (#18) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 5b74daf: fix(hack): make fake dashboard metrics causally connected (#28) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 2217b64: fix: correct CRD API group from candor.candor.dev to candor.dev (Bertie 21040807+teerakarna@users.noreply.github.com)
• 4a9404a: fix: release would have failed on its first run (#43) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 9c4a631: fix: render icon shortcodes for real, soften competitive framing (#23) (Albert Asawaroengchai 21040807+teerakarna@users.noreply.github.com)
• 133d284: fix: trivy-action drops severity filter in SARIF mode (Bertie 21040807+teerakarna@users.noreply.github.com)

Container image and Helm chart

ghcr.io/teerakarna/candor:v0.1.0

Signed with cosign (keyless, GitHub Actions OIDC) and carries a CycloneDX SBOM attestation.
Verify with:

cosign verify --certificate-identity-regexp "^https://github.com/teerakarna/candor/" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ghcr.io/teerakarna/candor:v0.1.0

Helm chart: oci://ghcr.io/teerakarna/charts/candor --version 0.1.0