95 releases 129 tags

RSS feed

• v1.15.0 7453ea9edd

  Compare

  v1.15.0 Stable

  gitchegumi released this 2026-09-19 22:24:40 -05:00 | 217 commits to main since this release

  ClamAV is pissing me off

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v1.14.0 ec06458f6c

  Compare

  v1.14.0 Stable

  gitchegumi released this 2026-09-19 17:24:56 -05:00 | 221 commits to main since this release

  ClamAV shared scans and Publishing now happens during the build job rather than passing artifacts.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v1.13.0 826e7a0bfb

  Compare

  v1.13.0 Stable

  gitchegumi released this 2026-09-18 22:26:21 -05:00 | 226 commits to main since this release

  Add false positive mitigations

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v1.12.0 79105068a3

  Compare

  v1.12.0 Stable

  gitchegumi released this 2026-09-18 16:59:04 -05:00 | 229 commits to main since this release

  optimized ClamAV and Trivy scans

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v1.11.0 47c33cfa9e

  Compare

  v1.11.0 Stable

  gitchegumi released this 2026-09-18 15:08:51 -05:00 | 231 commits to main since this release

  Removed full filesystem scan copies.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v1.10.0 23138de88d

  Compare

  v1.10.0 Stable

  gitchegumi released this 2026-09-18 10:59:31 -05:00 | 233 commits to main since this release

  added container networking

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v1.9.0 64f262dd43

  Compare

  v1.9.0 Stable

  gitchegumi released this 2026-09-12 10:49:58 -05:00 | 235 commits to main since this release

  Add platform-managed application onboarding and automatic deployment credentials.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v1.8.0 665e1c54bd

  Compare

  v1.8.0 Stable

  gitchegumi released this 2026-09-11 22:34:29 -05:00 | 239 commits to main since this release

  Adds periodic progress reporting across the shared workflows.

  • Long operations log their current stage, elapsed time every 30 seconds, and completion or failure.
  • Covers tool installation, security scans, builds, artifact transfers, signing, deployment, rollout checks, and cleanup.
  • Image scans identify the current image and total count.
  • Improves step names and live output in validation and runner probes.
  • Preserves failure gates, timeouts, cancellation, and private scanner output.
  • Refreshes five existing Semgrep mitigation fingerprints for shifted source lines; controls and expiry dates remain unchanged.

  Validated with 125 tests and passing hosted library, security, and acceptance checks. Periodic messages were verified in live logs.

  Adoption: Update both uses and library_ref to this release. No application bundle rebuild is required.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v1.7.0 0ad75a9949

  Compare

  v1.7.0 Stable

  gitchegumi released this 2026-09-09 18:29:35 -05:00 | 244 commits to main since this release

  Add guarded Kubernetes runner credential validation and dev deployment.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads
• v1.6.0 941d22987e

  Compare

  v1.6.0 Stable

  gitchegumi released this 2026-09-09 10:30:05 -05:00 | 253 commits to main since this release

  Disposable DEV Namespace

  Automate disposable dev namespace recreation and remove dev’s availability as a prerequisite for production deployment.

  Features

  • Recreate the approved dev namespace and its deployment RoleBinding through Actions.
  • Check common permissions plus those for the selected environment, while retaining all forbidden-permission checks.
  • Allow production deployment when the dev namespace has been deleted.
  • Keep credential validation read-only.

  Reliability

  • Validate existing namespaces and bindings before use.
  • Stop deployment on conflicting bindings, terminating namespaces, denied access, or bootstrap failures.
  • Add independent permission inventories and end-to-end credential-path regression tests.
  • Verify credential cleanup when bootstrap or authorization fails.

  Upgrade requirements

  Install the platform bootstrap policies and permissions from Homelab/platform #31, then validate admission enforcement before updating caller pins to v1.6.0.

  No new OpenBao role or stored deployment credentials are required. Disposable namespace recreation remains subject to live acceptance testing.

  Includes Homelab/workflows #31.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads