abahmed/kwatch v1.0.0-rc.5

on GitHub

v1.0.0-rc.5

• fix: use valid Syft image in release evidence (#504) (a8490bf)

See the full diff since v1.0.0-rc.4.

Release integrity

• Source tag: v1.0.0-rc.5
• Source commit: e4c84288d7f5e75643976f0582ab817e33b7e5b9
• Image: ghcr.io/abahmed/kwatch@sha256:2bb581dd7754f5c527015a1e74a7856733cb392f1f1a4d04f5a0956627b4d7fb
• Verification files: checksums, signed checksums, manifest
• SBOMs: kwatch-v1.0.0-rc.5-source-sbom.cdx.json and kwatch-v1.0.0-rc.5-image-sbom.cdx.json

Verify the image with:

cosign verify \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-identity-regexp='^https://github.com/abahmed/kwatch/.github/workflows/publish.yml@' \
  ghcr.io/abahmed/kwatch@sha256:2bb581dd7754f5c527015a1e74a7856733cb392f1f1a4d04f5a0956627b4d7fb