This Dashboard release supports Pipelines v0.44.x LTS, v0.47.x LTS, and v0.38.x, and Triggers v0.24.x.
Attestation
The Rekor UUID for this release is 24296fb24b8ad77aa26b83a488dd8c1744f0ccf4373fbf0161ff9191b6b4157306e7cd9db9c258d9
Verify that all container images in the release file are in the attestation:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.36.1/release.yaml
REKOR_UUID=24296fb24b8ad77aa26b83a488dd8c1744f0ccf4373fbf0161ff9191b6b4157306e7cd9db9c258d9
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.36.1@sha256:" + .digest.sha256')
# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml
# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
echo " ===> ok"
else
echo " ===> no match"
fi
Fixes
- 🐛 Fix processing of stepTemplate volumeMounts #2939
- Fix display of volumeMounts in the step details tab to ensure only relevant entries from the step definition and template are shown.
Thanks
Thanks to these contributors who contributed to v0.36.1!
- ❤️ @AlanGreene