abahmed/kwatch v1.0.0-rc.6

🎉 v1.0.0-rc.6

on GitHub

What's Changed

• 🔧 fix releasing by @abahmed in #479
• ♻️ improve dockerfile by @abahmed in #480
• 🚀 Refactor & fixing bugs by @abahmed in #485
• 🚀 Refactor & fixing bugs by @abahmed in #488
• 🛡️ Harden monitoring, configuration, providers, and release workflows by @abahmed in #489
• 🐛 fix: update release integrity notes endpoint by @abahmed in #494
• 🧭 feat: make provider choices catalog-driven by @abahmed in #495
• 🧭 Fix iLert priority in the provider catalog by @abahmed in #496
• 🐛 fix deploy by @abahmed in #497
• 🚀 Refactor architecture by @abahmed in #500
• 🛡️ fix: use GHCR for Scorecard action by @abahmed in #501
• 🛠️ fix: repair release SBOM generation by @abahmed in #504
• 🔐 fix: verify release provenance with GitHub token by @abahmed in #505
• ✅ fix: verify release checksums from asset directory by @abahmed in #506
• 🐛 Fix disabled control-plane startup panic by @abahmed in #507

Full Changelog: v0.11.0-rc.4...v1.0.0-rc.6

Release integrity

• Source tag: v1.0.0-rc.6
• Source commit: aa80dee9eda12b81d27500893f305562951034b6
• Image: ghcr.io/abahmed/kwatch@sha256:6cdfb14007ce0a5738f370a46c014ae6a5fb659841fdb3a66ed8d59c7bd75159
• Verification files: checksums, signed checksums, manifest
• SBOMs: kwatch-v1.0.0-rc.6-source-sbom.cdx.json and kwatch-v1.0.0-rc.6-image-sbom.cdx.json

Verify the image with:

cosign verify \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-identity-regexp='^https://github.com/abahmed/kwatch/.github/workflows/publish.yml@' \
  ghcr.io/abahmed/kwatch@sha256:6cdfb14007ce0a5738f370a46c014ae6a5fb659841fdb3a66ed8d59c7bd75159