• 0.8.0 e012d39f15

    0.8.0
    All checks were successful
    published / fetched (push) Successful in 0s
    published / source-is-tested (push) Successful in 4s
    published / projectfile-is-valid (push) Successful in 4s
    published / signing-is-ready (push) Successful in 5s
    published / source-is-compliant (push) Successful in 7s
    published / projectfile-is-ok (push) Successful in 4s
    published / source-is-secure (push) Successful in 14s
    published / source-is-ok (push) Successful in 0s
    published / documentation-passes-lint (push) Successful in 52s
    published / documentation-is-ok (push) Successful in 0s
    published / source-passes-lint (push) Successful in 44s
    published / inputs-are-ok (push) Successful in 0s
    published / binaries-are-built (arm64, linux) (push) Successful in 5s
    published / binaries-are-built (amd64, linux) (push) Successful in 5s
    published / binaries-are-built (riscv64, linux) (push) Successful in 5s
    published / gsa (amd64, linux) (push) Successful in 17s
    published / gsa (riscv64, linux) (push) Successful in 17s
    published / gsa (arm64, linux) (push) Successful in 17s
    published / binaries-are-ok (push) Successful in 0s
    published / binaries-are-signed (push) Successful in 8s
    published / binaries-are-torrented (push) Successful in 12s
    published / image-is-built (amd64) (push) Successful in 1m4s
    published / secrets-ready (push) Successful in 0s
    published / images-are-ok (push) Successful in 0s
    published / container-is-ok (push) Successful in 0s
    published / container-ready-to-test (push) Successful in 0s
    published / image-has-sbom (amd64) (push) Successful in 6s
    published / image-is-secure (amd64) (push) Successful in 7s
    published / container-is-diagnosed (push) Successful in 0s
    published / container-is-verified (amd64) (push) Successful in 36s
    published / image-is-ready (push) Successful in 0s
    published / artifacts-are-ok (push) Successful in 0s
    published / ready-to-publish (push) Successful in 0s
    published / publish-image (push) Successful in 0s
    published / image-is-signed (push) Successful in 0s
    published / image-is-attested (amd64, kiota) (push) Successful in 8s
    published / image-is-attested (amd64, dockerhub) (push) Successful in 35s
    published / binaries-are-released (amd64, linux) (push) Successful in 2s
    published / binaries-are-released (riscv64, linux) (push) Successful in 2s
    published / binaries-are-released (arm64, linux) (push) Successful in 2s
    published / release-notes-are-published (push) Successful in 5s
    published / published (push) Successful in 0s
    Stable

    damian-buho released this 2026-10-08 05:05:40 +00:00 | 49 commits to dev since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    7 commits, 1 contributor, 1 day since 0.7.0.

    Features

    • release: sign the release binaries and publish from the signed tag message (54d84b2)

    Bug fixes

    • build: name binaries -<uname -m> through asset-name.sh (25c09e7)
    • assert on a here-string, not a grep -q pipeline (a6db255)

    Installation

    Container image

    Pull the published container image:

    Pull from DockerHub — linux/amd64

    docker pull damianbuho/report-relay:0.8.0
    

    This release also publishes the 0.8 and 0 tags — pull the precision you want to pin.

    If the registries above are unreachable, pull from the origin instead:

    Pull from Kiota — linux/amd64

    docker pull kiota.ch/damian-buho/report-relay:0.8.0
    

    Prebuilt binary

    Download the prebuilt binary for your platform from this release:

    mkdir -p ~/.local/bin
    curl --fail --location --output ~/.local/bin/report-relay https://kiota.ch/damian-buho/report-relay/releases/download/0.8.0/report-relay-linux-$(uname -m)
    chmod +x ~/.local/bin/report-relay
    ~/.local/bin/report-relay --help
    

    Published for: linux/amd64, linux/arm64, linux/riscv64

    Usage

    Run the service in the background, publishing its ports:

    docker run --detach --publish 8080:8080/tcp --publish 8081:8081/tcp damianbuho/report-relay:0.8.0
    

    Then check that it answers:

    curl http://localhost:8081/healthz
    

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull docker.io/damianbuho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0
    docker pull kiota.ch/damian-buho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0
    
    Platform Digest Size
    linux/amd64 sha256:b9bc6ae1c887f5dc936eb78077ab82dfa33288dfebfcbc8d764bb4bc339425ab 95.8 MB

    Sizes are compressed layer bytes as stored in the registry.

    Packages since the previous release: 1 updated, 0 added, 0 removed.

    • kiota.ch/damian-buho/report-relay v0.7.0 → v0.8.0

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/damian-buho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/damian-buho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0
    

    Prebuilt binary

    The signature proves the binary is the one the maintainer’s release key signed.

    gpg --keyserver hkps://keys.openpgp.org --recv-keys 8F89CBF7C8D51F8BEC7533C00925F8F79EBD3257
    curl --fail --location --output report-relay.asc https://kiota.ch/damian-buho/report-relay/releases/download/0.8.0/report-relay-linux-$(uname -m).asc
    gpg --verify report-relay.asc report-relay
    

    Download via BitTorrent

    Fetch this release over BitTorrent with a magnet link, or with the attached .torrent file:

    Full changes: https://kiota.ch/damian-buho/report-relay/compare/0.7.0...0.8.0

    Downloads