v1.0.0-rc.20
- Publish signed installer checksums with every release (#558) (e728f9e)
- Rewrite the README as a product overview (#557) (d3dcf26)
- Make least-privilege the chart's default RBAC mode (#554) (9d37f27)
- Run the licensetest-tagged tests in make ci (#556) (67c6305)
- Drop the README price row and link editions to kwatch.dev/pro (#555) (4e84ec1)
- Release charts to apps/web/public and use the site favicon as chart icon (#553) (87a13c5)
- chore(deps): bump the github-actions group with 7 updates (#552) (2db548a)
- chore(deps): bump github.com/prometheus/client_golang (#551) (f484ea8)
- docs: use the new Junction logo in the README header (#550) (d0c6afa)
- Point release workflow at the website workspace layout (#549) (4e5caaf)
- Harden in-process edition rebuild: wait for release, retry transient reopen (#548) (dbabe6a)
- Fix release publish, e2e Pro edition and trial wording (#547) (c30b75f)
See the full diff since v1.0.0-rc.19.
Release integrity
- Source tag:
v1.0.0-rc.20 - Source commit:
29a51b590e87f4bc624a4d6334618dcd6b2c1bf0 - Image:
ghcr.io/abahmed/kwatch@sha256:390f2cfbd40722ff1be3ea8f72b99c664a4ee19819e4ab385960c067980c61f3 - Verification files: checksums, signed checksums, manifest, installer checksums (signed)
- SBOMs:
kwatch-v1.0.0-rc.20-source-sbom.cdx.jsonandkwatch-v1.0.0-rc.20-image-sbom.cdx.json
Verify the image with:
cosign verify \
--certificate-oidc-issuer=https://token.actions.githubusercontent.com \
--certificate-identity-regexp='^https://github.com/abahmed/kwatch/.github/workflows/publish.yml@' \
ghcr.io/abahmed/kwatch@sha256:390f2cfbd40722ff1be3ea8f72b99c664a4ee19819e4ab385960c067980c61f3