• 0.9.0 c68466e264

    0.9.0
    All checks were successful
    published / fetched (push) Successful in 0s
    published / signing-is-ready (push) Successful in 40s
    published / projectfile-is-valid (push) Successful in 40s
    published / source-is-compliant (push) Successful in 43s
    published / source-is-tested (push) Successful in 7s
    published / projectfile-is-ok (push) Successful in 4s
    published / source-is-secure (push) Successful in 58s
    published / documentation-passes-lint (push) Successful in 1m19s
    published / documentation-is-ok (push) Successful in 0s
    published / source-passes-lint (push) Successful in 1m11s
    published / source-is-ok (push) Successful in 0s
    published / inputs-are-ok (push) Successful in 0s
    published / binaries-are-built (arm64, linux) (push) Successful in 15s
    published / binaries-are-built (riscv64, linux) (push) Successful in 15s
    published / binaries-are-built (amd64, linux) (push) Successful in 15s
    published / gsa (amd64, linux) (push) Successful in 8s
    published / gsa (arm64, linux) (push) Successful in 8s
    published / gsa (riscv64, linux) (push) Successful in 10s
    published / binaries-are-ok (push) Successful in 0s
    published / binaries-are-signed (push) Successful in 5s
    published / image-is-built (amd64) (push) Successful in 2m26s
    published / secrets-ready (push) Successful in 0s
    published / images-are-ok (push) Successful in 0s
    published / container-is-ok (push) Successful in 1s
    published / container-ready-to-test (push) Successful in 0s
    published / container-is-diagnosed (push) Successful in 0s
    published / image-has-sbom (amd64) (push) Successful in 13s
    published / container-is-verified (amd64) (push) Successful in 38s
    published / image-is-secure (amd64) (push) Successful in 1m47s
    published / image-is-ready (push) Successful in 0s
    published / artifacts-are-ok (push) Successful in 0s
    published / ready-to-publish (push) Successful in 0s
    published / publish-image (push) Successful in 0s
    published / image-is-signed (push) Successful in 0s
    published / image-is-attested (kiota) (push) Successful in 11s
    published / image-is-attested (dockerhub) (push) Successful in 38s
    published / release-is-published (push) Successful in 2s
    published / release-notes-are-published (push) Successful in 23s
    published / published (push) Successful in 0s
    Stable

    damian-buho released this 2026-10-10 05:11:57 +00:00 | 105 commits to dev since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    27 commits, 1 contributor, 2 days since 0.8.0.

    Features

    • ci: sign images and binaries (08ce50e)
    • ci: attest images (162c180)
    • ci: scan source with clamav (4c778e5)

    Bug fixes

    • deps: bump github.com/prometheus/client_golang to v1.25.0 (ed90d3f)
    • container: restore M6E_VERSION in final image for version test (9184e1e)
    • log level follows B19_VERBOSITY, warn by default (82ea696)

    Performance

    • container: declare M6E_VERSION next to the user stage (494ba9b)

    Installation

    Container image

    Pull the published container image:

    Pull from DockerHub — linux/amd64

    docker pull damianbuho/doomsday-clock-exporter:0.9.0
    

    This release also publishes the 0.9 and 0 tags — pull the precision you want to pin.

    If the registries above are unreachable, pull from the origin instead:

    Pull from Kiota — linux/amd64

    docker pull kiota.ch/damian-buho/doomsday-clock-exporter:0.9.0
    

    Prebuilt binary

    Download the prebuilt binary for your platform from this release:

    mkdir -p ~/.local/bin
    curl --fail --location --output ~/.local/bin/doomsday-clock-exporter https://kiota.ch/damian-buho/doomsday-clock-exporter/releases/download/0.9.0/doomsday-clock-exporter-linux-$(uname -m)
    chmod +x ~/.local/bin/doomsday-clock-exporter
    ~/.local/bin/doomsday-clock-exporter --help
    

    Published for: linux/amd64, linux/arm64, linux/riscv64

    Usage

    Run the service in the background, publishing its ports:

    docker run --detach --publish 8080:8080/tcp damianbuho/doomsday-clock-exporter:0.9.0
    

    Then check that it answers:

    curl http://localhost:8080/metrics
    

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull docker.io/damianbuho/doomsday-clock-exporter@sha256:d56e61441ccfde45442b3ebe41ae5bbb59abe162e033764ccfba8877cc2637c5
    docker pull kiota.ch/damian-buho/doomsday-clock-exporter@sha256:d56e61441ccfde45442b3ebe41ae5bbb59abe162e033764ccfba8877cc2637c5
    
    Platform Digest Size
    linux/amd64 sha256:34d31fea18ae5de9133d9eef0dc1c22faffbac970cdc1ff1cccac8cf2a587f19 93.6 MB

    Sizes are compressed layer bytes as stored in the registry.

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/doomsday-clock-exporter@sha256:d56e61441ccfde45442b3ebe41ae5bbb59abe162e033764ccfba8877cc2637c5
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/damian-buho/doomsday-clock-exporter@sha256:d56e61441ccfde45442b3ebe41ae5bbb59abe162e033764ccfba8877cc2637c5
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/doomsday-clock-exporter@sha256:d56e61441ccfde45442b3ebe41ae5bbb59abe162e033764ccfba8877cc2637c5
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/damian-buho/doomsday-clock-exporter@sha256:d56e61441ccfde45442b3ebe41ae5bbb59abe162e033764ccfba8877cc2637c5
    

    Full changes: https://kiota.ch/damian-buho/doomsday-clock-exporter/compare/0.8.0...0.9.0

    Downloads