-
0.8.0
StableAll checks were successfulpublished / fetched (push) Successful in 0spublished / source-is-tested (push) Successful in 4spublished / projectfile-is-valid (push) Successful in 4spublished / signing-is-ready (push) Successful in 5spublished / source-is-compliant (push) Successful in 7spublished / projectfile-is-ok (push) Successful in 4spublished / source-is-secure (push) Successful in 14spublished / source-is-ok (push) Successful in 0spublished / documentation-passes-lint (push) Successful in 52spublished / documentation-is-ok (push) Successful in 0spublished / source-passes-lint (push) Successful in 44spublished / inputs-are-ok (push) Successful in 0spublished / binaries-are-built (arm64, linux) (push) Successful in 5spublished / binaries-are-built (amd64, linux) (push) Successful in 5spublished / binaries-are-built (riscv64, linux) (push) Successful in 5spublished / gsa (amd64, linux) (push) Successful in 17spublished / gsa (riscv64, linux) (push) Successful in 17spublished / gsa (arm64, linux) (push) Successful in 17spublished / binaries-are-ok (push) Successful in 0spublished / binaries-are-signed (push) Successful in 8spublished / binaries-are-torrented (push) Successful in 12spublished / image-is-built (amd64) (push) Successful in 1m4spublished / secrets-ready (push) Successful in 0spublished / images-are-ok (push) Successful in 0spublished / container-is-ok (push) Successful in 0spublished / container-ready-to-test (push) Successful in 0spublished / image-has-sbom (amd64) (push) Successful in 6spublished / image-is-secure (amd64) (push) Successful in 7spublished / container-is-diagnosed (push) Successful in 0spublished / container-is-verified (amd64) (push) Successful in 36spublished / image-is-ready (push) Successful in 0spublished / artifacts-are-ok (push) Successful in 0spublished / ready-to-publish (push) Successful in 0spublished / publish-image (push) Successful in 0spublished / image-is-signed (push) Successful in 0spublished / image-is-attested (amd64, kiota) (push) Successful in 8spublished / image-is-attested (amd64, dockerhub) (push) Successful in 35spublished / binaries-are-released (amd64, linux) (push) Successful in 2spublished / binaries-are-released (riscv64, linux) (push) Successful in 2spublished / binaries-are-released (arm64, linux) (push) Successful in 2spublished / release-notes-are-published (push) Successful in 5spublished / published (push) Successful in 0sreleased this
2026-10-08 05:05:40 +00:00 | 49 commits to dev since this release7 commits, 1 contributor, 1 day since 0.7.0.
Features
- release: sign the release binaries and publish from the signed tag message (
54d84b2)
Bug fixes
- build: name binaries -<uname -m> through asset-name.sh (
25c09e7) - assert on a here-string, not a grep -q pipeline (
a6db255)
Installation
Container image
Pull the published container image:
Pull from DockerHub — linux/amd64
docker pull damianbuho/report-relay:0.8.0This release also publishes the
0.8and0tags — pull the precision you want to pin.If the registries above are unreachable, pull from the origin instead:
Pull from Kiota — linux/amd64
docker pull kiota.ch/damian-buho/report-relay:0.8.0Prebuilt binary
Download the prebuilt binary for your platform from this release:
mkdir -p ~/.local/bin curl --fail --location --output ~/.local/bin/report-relay https://kiota.ch/damian-buho/report-relay/releases/download/0.8.0/report-relay-linux-$(uname -m) chmod +x ~/.local/bin/report-relay ~/.local/bin/report-relay --helpPublished for:
linux/amd64,linux/arm64,linux/riscv64Usage
Run the service in the background, publishing its ports:
docker run --detach --publish 8080:8080/tcp --publish 8081:8081/tcp damianbuho/report-relay:0.8.0Then check that it answers:
curl http://localhost:8081/healthzImage digests
A tag can move; a digest cannot. Pull this exact build:
docker pull docker.io/damianbuho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0 docker pull kiota.ch/damian-buho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0Platform Digest Size linux/amd64 sha256:b9bc6ae1c887f5dc936eb78077ab82dfa33288dfebfcbc8d764bb4bc339425ab95.8 MB Sizes are compressed layer bytes as stored in the registry.
Packages since the previous release: 1 updated, 0 added, 0 removed.
- kiota.ch/damian-buho/report-relay v0.7.0 → v0.8.0
Verify
Check that what you downloaded is what this project published.
Container image
The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.
COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0 cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/damian-buho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0 cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0 cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/damian-buho/report-relay@sha256:cdcbe442018861aa01e4a9e76e0f73cd7149a2d82965ed7853d9f43b60a969b0Prebuilt binary
The signature proves the binary is the one the maintainer’s release key signed.
gpg --keyserver hkps://keys.openpgp.org --recv-keys 8F89CBF7C8D51F8BEC7533C00925F8F79EBD3257 curl --fail --location --output report-relay.asc https://kiota.ch/damian-buho/report-relay/releases/download/0.8.0/report-relay-linux-$(uname -m).asc gpg --verify report-relay.asc report-relayDownload via BitTorrent
Fetch this release over BitTorrent with a magnet link, or with the attached
.torrentfile:Full changes: https://kiota.ch/damian-buho/report-relay/compare/0.7.0...0.8.0
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- release: sign the release binaries and publish from the signed tag message (