• 0.9.0 4a80080e3e

    0.9.0
    All checks were successful
    published / fetched (push) Successful in 0s
    published / projectfile-is-valid (push) Successful in 4s
    published / signing-is-ready (push) Successful in 5s
    published / source-is-compliant (push) Successful in 7s
    published / source-is-tested (push) Successful in 5s
    published / projectfile-is-ok (push) Successful in 19s
    published / source-is-secure (push) Successful in 48s
    published / documentation-passes-lint (push) Successful in 1m0s
    published / documentation-is-ok (push) Successful in 0s
    published / source-passes-lint (push) Successful in 1m58s
    published / source-is-ok (push) Successful in 0s
    published / inputs-are-ok (push) Successful in 0s
    published / binaries-are-built (riscv64, linux) (push) Successful in 9s
    published / binaries-are-built (arm64, linux) (push) Successful in 9s
    published / binaries-are-built (amd64, linux) (push) Successful in 9s
    published / gsa (riscv64, linux) (push) Successful in 10s
    published / gsa (arm64, linux) (push) Successful in 10s
    published / gsa (amd64, linux) (push) Successful in 13s
    published / binaries-are-ok (push) Successful in 0s
    published / binaries-are-signed (push) Successful in 21s
    published / binaries-are-torrented (push) Successful in 24s
    published / image-is-built (amd64) (push) Successful in 1m55s
    published / secrets-ready (push) Successful in 0s
    published / image-is-seeded (amd64) (push) Successful in 7s
    published / images-are-ok (push) Successful in 0s
    published / image-has-sbom (amd64) (push) Successful in 9s
    published / container-is-ok (push) Successful in 0s
    published / container-ready-to-test (push) Successful in 0s
    published / container-is-diagnosed (push) Successful in 0s
    published / container-is-verified (amd64) (push) Successful in 48s
    published / image-is-secure (amd64) (push) Successful in 1m34s
    published / image-is-ready (push) Successful in 0s
    published / artifacts-are-ok (push) Successful in 0s
    published / ready-to-publish (push) Successful in 0s
    published / publish-image (push) Successful in 0s
    published / image-is-signed (push) Successful in 0s
    published / image-is-attested (kiota) (push) Successful in 1m3s
    published / image-is-attested (dockerhub) (push) Successful in 1m16s
    published / release-is-published (push) Successful in 4s
    published / release-notes-are-published (push) Successful in 5s
    published / published (push) Successful in 0s
    Stable

    damian-buho released this 2026-10-10 05:11:45 +00:00 | 30 commits to dev since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    18 commits, 1 contributor, 1 day since 0.8.0.

    Features

    • ci: scan source with clamav (e529e96)

    Bug fixes

    • deps: bump golang.org/x/net to v0.60.0 (60dd3ab)
    • deps: bump go.opentelemetry.io/otel to v1.47.0 (91126c3)
    • container: restore M6E_VERSION in final image for version test (5d16e7a)

    Performance

    • container: declare M6E_VERSION next to the user stage (19e618c)

    Installation

    If the registries above are unreachable, pull from the origin instead:

    Pull from Kiota — linux/amd64

    docker pull kiota.ch/damian-buho/report-relay:0.9.0
    

    Download the prebuilt binary for your platform from this release:

    mkdir -p ~/.local/bin
    curl --fail --location --output ~/.local/bin/report-relay https://kiota.ch/damian-buho/report-relay/releases/download/0.9.0/report-relay-linux-$(uname -m)
    chmod +x ~/.local/bin/report-relay
    ~/.local/bin/report-relay --help
    

    Published for: linux/amd64, linux/arm64, linux/riscv64

    Usage

    Run the service in the background, publishing its ports:

    docker run --detach --publish 8080:8080/tcp --publish 8081:8081/tcp damianbuho/report-relay:0.9.0
    

    Then check that it answers:

    curl http://localhost:8081/healthz
    

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull docker.io/damianbuho/report-relay@sha256:543aaf4a86fd75b3705d4ba8719ebbd452ebb9577fa1b2cbcd36d17631963941
    docker pull kiota.ch/damian-buho/report-relay@sha256:543aaf4a86fd75b3705d4ba8719ebbd452ebb9577fa1b2cbcd36d17631963941
    
    Platform Digest Size
    linux/amd64 sha256:7d035bd86b732eb11e8b3ac1bff15d3f111184e60e28df436d63db3142862254 95.9 MB (+0.1 MB)

    Sizes are compressed layer bytes as stored in the registry.

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/report-relay@sha256:543aaf4a86fd75b3705d4ba8719ebbd452ebb9577fa1b2cbcd36d17631963941
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/damian-buho/report-relay@sha256:543aaf4a86fd75b3705d4ba8719ebbd452ebb9577fa1b2cbcd36d17631963941
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/report-relay@sha256:543aaf4a86fd75b3705d4ba8719ebbd452ebb9577fa1b2cbcd36d17631963941
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/damian-buho/report-relay@sha256:543aaf4a86fd75b3705d4ba8719ebbd452ebb9577fa1b2cbcd36d17631963941
    

    Prebuilt binary

    The signature proves the binary is the one the maintainer’s release key signed.

    gpg --keyserver hkps://keys.openpgp.org --recv-keys 8F89CBF7C8D51F8BEC7533C00925F8F79EBD3257
    curl --fail --location --output report-relay.asc https://kiota.ch/damian-buho/report-relay/releases/download/0.9.0/report-relay-linux-$(uname -m).asc
    gpg --verify report-relay.asc report-relay
    

    Download via BitTorrent

    Fetch this release over BitTorrent with a magnet link, or with the attached .torrent file:

    Full changes: https://kiota.ch/damian-buho/report-relay/compare/0.8.0...0.9.0

    Downloads