abahmed/kwatch v1.1.0-rc.4

on GitHub

v1.1.0-rc.4

• e2e: keep rewritten kwatch manifest out of scanned artifacts (#575) (97bc8f2)

See the full diff since v1.1.0-rc.3.

Release integrity

• Source tag: v1.1.0-rc.4
• Source commit: 8e023cd5da8c203385ef63949503efb427838995
• Image: ghcr.io/abahmed/kwatch@sha256:6e3cd452a1e12540fb04472e4ace4b1e6283b4858a7fa9e984e7259cdf7c8972
• Verification files: checksums, signed checksums, manifest, installer checksums (signed)
• SBOMs: kwatch-v1.1.0-rc.4-source-sbom.cdx.json and kwatch-v1.1.0-rc.4-image-sbom.cdx.json

Verify the image with:

cosign verify \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  --certificate-identity-regexp='^https://github.com/abahmed/kwatch/.github/workflows/publish.yml@' \
  ghcr.io/abahmed/kwatch@sha256:6e3cd452a1e12540fb04472e4ace4b1e6283b4858a7fa9e984e7259cdf7c8972