-
2.2.7
StableAll checks were successfulpublished / fetched (push) Successful in 0spublished / projectfile-is-valid (push) Successful in 13spublished / signing-is-ready (push) Successful in 13spublished / source-is-compliant (push) Successful in 7spublished / source-is-tested (push) Successful in 5spublished / source-is-secure (push) Successful in 22spublished / documentation-passes-lint (push) Successful in 1m5spublished / source-passes-lint (push) Successful in 1m15spublished / projectfile-is-ok (push) Successful in 5spublished / documentation-is-ok (push) Successful in 0spublished / source-is-ok (push) Successful in 0spublished / inputs-are-ok (push) Successful in 0spublished / binaries-are-built (riscv64, linux) (push) Successful in 7spublished / binaries-are-built (amd64, linux) (push) Successful in 9spublished / binaries-are-built (arm64, darwin) (push) Successful in 9spublished / binaries-are-built (arm64, linux) (push) Successful in 9spublished / binaries-are-built (amd64, darwin) (push) Successful in 9spublished / gsa (amd64, darwin) (push) Successful in 7spublished / gsa (amd64, linux) (push) Successful in 6spublished / gsa (arm64, darwin) (push) Successful in 4spublished / image-is-built (amd64) (push) Successful in 3m29spublished / gsa (arm64, linux) (push) Successful in 12spublished / gsa (riscv64, linux) (push) Successful in 12spublished / binaries-are-ok (push) Successful in 0spublished / secrets-ready (push) Successful in 0spublished / image-has-sbom (amd64) (push) Successful in 11spublished / image-is-secure (amd64) (push) Successful in 14spublished / binaries-are-signed (amd64, darwin) (push) Successful in 5spublished / binaries-are-signed (amd64, linux) (push) Successful in 5spublished / binaries-are-signed (riscv64, linux) (push) Successful in 5spublished / binaries-are-signed (arm64, linux) (push) Successful in 5spublished / binaries-are-signed (arm64, darwin) (push) Successful in 5spublished / images-are-ok (push) Successful in 0spublished / container-is-ok (push) Successful in 0spublished / container-ready-to-test (push) Successful in 0spublished / container-is-diagnosed (push) Successful in 0spublished / container-is-verified (amd64) (push) Successful in 1m9spublished / image-is-ready (push) Successful in 0spublished / artifacts-are-ok (push) Successful in 0spublished / ready-to-publish (push) Successful in 0spublished / publish-image (push) Successful in 0spublished / image-is-signed (push) Successful in 0spublished / image-is-attested (kiota) (push) Successful in 1m12spublished / image-is-attested (dockerhub) (push) Successful in 1m33spublished / release-is-published (push) Successful in 4spublished / release-notes-are-published (push) Successful in 7spublished / published (push) Successful in 1sreleased this
2026-10-08 23:54:14 +00:00 | 131 commits to dev since this release9 commits, 1 contributor, 18 hours since 2.2.6.
Performance
- render: restore and save each named cache once per job (
8338d86) - container: declare M6E_VERSION next to the user stage (
4555523)
Installation
Container image
Pull the published container image:
Pull from DockerHub — linux/amd64
docker pull damianbuho/projectfile-ci:2.2.7This release also publishes the
2.2and2tags — pull the precision you want to pin.If the registries above are unreachable, pull from the origin instead:
Pull from Kiota — linux/amd64
docker pull kiota.ch/projectfile/ci:2.2.7Prebuilt binary
Download the prebuilt binary for your platform from this release:
mkdir -p ~/.local/bin curl --fail --location --output ~/.local/bin/pf-ci https://kiota.ch/projectfile/ci/releases/download/2.2.7/pf-ci-$(uname -s | tr A-Z a-z)-$(uname -m) chmod +x ~/.local/bin/pf-ci ~/.local/bin/pf-ci --helpPublished for:
linux/amd64,linux/arm64,linux/riscv64,darwin/amd64,darwin/arm64Usage
Lower the CI DAG to a forge’s workflow files:
pf-ci resolve pf-ci generate -target forgejo pf-ci generate -target gha -checkImage digests
A tag can move; a digest cannot. Pull this exact build:
docker pull docker.io/damianbuho/projectfile-ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44a docker pull kiota.ch/projectfile/ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44aPlatform Digest Size linux/amd64 sha256:491d936f773b35d73c3f211f479b16794c1cf1ad119cc48a7a3ebac07a3dfc2594.2 MB Sizes are compressed layer bytes as stored in the registry.
Verify
Check that what you downloaded is what this project published.
Container image
The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.
COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/projectfile-ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44a cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/projectfile/ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44a cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/projectfile-ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44a cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/projectfile/ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44aFull changes: https://kiota.ch/projectfile/ci/compare/2.2.6...2.2.7
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- render: restore and save each named cache once per job (