• 2.2.7 fac77b5af4

    2.2.7
    All checks were successful
    published / fetched (push) Successful in 0s
    published / projectfile-is-valid (push) Successful in 13s
    published / signing-is-ready (push) Successful in 13s
    published / source-is-compliant (push) Successful in 7s
    published / source-is-tested (push) Successful in 5s
    published / source-is-secure (push) Successful in 22s
    published / documentation-passes-lint (push) Successful in 1m5s
    published / source-passes-lint (push) Successful in 1m15s
    published / projectfile-is-ok (push) Successful in 5s
    published / documentation-is-ok (push) Successful in 0s
    published / source-is-ok (push) Successful in 0s
    published / inputs-are-ok (push) Successful in 0s
    published / binaries-are-built (riscv64, linux) (push) Successful in 7s
    published / binaries-are-built (amd64, linux) (push) Successful in 9s
    published / binaries-are-built (arm64, darwin) (push) Successful in 9s
    published / binaries-are-built (arm64, linux) (push) Successful in 9s
    published / binaries-are-built (amd64, darwin) (push) Successful in 9s
    published / gsa (amd64, darwin) (push) Successful in 7s
    published / gsa (amd64, linux) (push) Successful in 6s
    published / gsa (arm64, darwin) (push) Successful in 4s
    published / image-is-built (amd64) (push) Successful in 3m29s
    published / gsa (arm64, linux) (push) Successful in 12s
    published / gsa (riscv64, linux) (push) Successful in 12s
    published / binaries-are-ok (push) Successful in 0s
    published / secrets-ready (push) Successful in 0s
    published / image-has-sbom (amd64) (push) Successful in 11s
    published / image-is-secure (amd64) (push) Successful in 14s
    published / binaries-are-signed (amd64, darwin) (push) Successful in 5s
    published / binaries-are-signed (amd64, linux) (push) Successful in 5s
    published / binaries-are-signed (riscv64, linux) (push) Successful in 5s
    published / binaries-are-signed (arm64, linux) (push) Successful in 5s
    published / binaries-are-signed (arm64, darwin) (push) Successful in 5s
    published / images-are-ok (push) Successful in 0s
    published / container-is-ok (push) Successful in 0s
    published / container-ready-to-test (push) Successful in 0s
    published / container-is-diagnosed (push) Successful in 0s
    published / container-is-verified (amd64) (push) Successful in 1m9s
    published / image-is-ready (push) Successful in 0s
    published / artifacts-are-ok (push) Successful in 0s
    published / ready-to-publish (push) Successful in 0s
    published / publish-image (push) Successful in 0s
    published / image-is-signed (push) Successful in 0s
    published / image-is-attested (kiota) (push) Successful in 1m12s
    published / image-is-attested (dockerhub) (push) Successful in 1m33s
    published / release-is-published (push) Successful in 4s
    published / release-notes-are-published (push) Successful in 7s
    published / published (push) Successful in 1s
    Stable

    damian-buho released this 2026-10-08 23:54:14 +00:00 | 131 commits to dev since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    9 commits, 1 contributor, 18 hours since 2.2.6.

    Performance

    • render: restore and save each named cache once per job (8338d86)
    • container: declare M6E_VERSION next to the user stage (4555523)

    Installation

    Container image

    Pull the published container image:

    Pull from DockerHub — linux/amd64

    docker pull damianbuho/projectfile-ci:2.2.7
    

    This release also publishes the 2.2 and 2 tags — pull the precision you want to pin.

    If the registries above are unreachable, pull from the origin instead:

    Pull from Kiota — linux/amd64

    docker pull kiota.ch/projectfile/ci:2.2.7
    

    Prebuilt binary

    Download the prebuilt binary for your platform from this release:

    mkdir -p ~/.local/bin
    curl --fail --location --output ~/.local/bin/pf-ci https://kiota.ch/projectfile/ci/releases/download/2.2.7/pf-ci-$(uname -s | tr A-Z a-z)-$(uname -m)
    chmod +x ~/.local/bin/pf-ci
    ~/.local/bin/pf-ci --help
    

    Published for: linux/amd64, linux/arm64, linux/riscv64, darwin/amd64, darwin/arm64

    Usage

    Lower the CI DAG to a forge’s workflow files:

    pf-ci resolve
    pf-ci generate -target forgejo
    pf-ci generate -target gha -check
    

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull docker.io/damianbuho/projectfile-ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44a
    docker pull kiota.ch/projectfile/ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44a
    
    Platform Digest Size
    linux/amd64 sha256:491d936f773b35d73c3f211f479b16794c1cf1ad119cc48a7a3ebac07a3dfc25 94.2 MB

    Sizes are compressed layer bytes as stored in the registry.

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image; the attestation carries its software bill of materials.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/projectfile-ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44a
    cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/projectfile/ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44a
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx docker.io/damianbuho/projectfile-ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44a
    cosign verify-attestation --key "$COSIGN_KEY" --insecure-ignore-tlog=true --type cyclonedx kiota.ch/projectfile/ci@sha256:d9c9323e117008d9cca27be24efd627c57a239db430bce8fadfb1e26c0bce44a
    

    Full changes: https://kiota.ch/projectfile/ci/compare/2.2.6...2.2.7

    Downloads