tektoncd/triggers v0.36.1 on GitHub

Installation one-liner

kubectl apply -f https://infra.tekton.dev/tekton-releases/triggers/previous/v0.36.1/release.yaml
kubectl apply -f https://infra.tekton.dev/tekton-releases/triggers/previous/v0.36.1/interceptors.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a657a035abaa26626fb70696b986e9a50cab171d2e2fa7047a72e03f050c5f135

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a657a035abaa26626fb70696b986e9a50cab171d2e2fa7047a72e03f050c5f135
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://infra.tekton.dev/tekton-releases/triggers/previous/v0.36.1/release.yaml
INTERCEPTORS_FILE=https://infra.tekton.dev/tekton-releases/triggers/previous/v0.36.1/interceptors.yaml
REKOR_UUID=108e9186e8c5677a657a035abaa26626fb70696b986e9a50cab171d2e2fa7047a72e03f050c5f135

REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.36.1@sha256:" + .digest.sha256')

curl -L "$RELEASE_FILE" > release.yaml
curl "$INTERCEPTORS_FILE" >> release.yaml

for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Patch release on top of v0.36.0.

Fixes

🐛 fix(github): require SecretRef for GitHub interceptor to process requests
Action Required: Users using the GitHub Interceptor must ensure the interceptor uses a secretRef.
🐛 fix: bump pinned ko image to fix go toolchain mismatch
🐛 fix: cp instead of symlink source tarball into kodata

Features

✨ feat: add enterprise host allowlist for GitHub interceptor

Misc

Bump Go dependencies to fix CVEs
Bump golang.org/x/crypto and golang.org/x/net to fix 19 CVEs
Bump golangci-lint from v2.8.0 to v2.12.2
fix: pass --insecure-registry to ko for plain-HTTP KinD registry
fix: replace kodata LICENSE symlinks with actual files

This release was created manually; automated GitHub draft release creation for triggers is being added in #2171.

tektoncd/triggers v0.36.1 Tekton Triggers release v0.36.1 on GitHub