Installation one-liner
kubectl apply -f https://infra.tekton.dev/tekton-releases/results/previous/v0.18.0/release.yamlAttestation
The Rekor UUID for this release is 108e9186e8c5677a10268b4a7ac74efdd0da76e60a934fbb3ae72e3615c6c8ac7dda7bf007179ca7
Obtain the attestation:
REKOR_UUID=108e9186e8c5677a10268b4a7ac74efdd0da76e60a934fbb3ae72e3615c6c8ac7dda7bf007179ca7
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://infra.tekton.dev/tekton-releases/results/previous/v0.18.0/release.yaml
REKOR_UUID=108e9186e8c5677a10268b4a7ac74efdd0da76e60a934fbb3ae72e3615c6c8ac7dda7bf007179ca7
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.18.0@sha256:" + .digest.sha256')
# Download the release file
curl -L "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
doneChanges
Features
- ✨ Add explicit TLS configuration support (#1187)
Fixes
Misc
-
🔨 Update GolangCI lint to 2.8.0 (#1196)
-
🔨 Fix golangci-lint errors and warnings (#1193)
-
🔨 temp pull the git history when using golangci-lint (#1191)
-
🔨 Fix link to latest Tekton Pipeline release (#1186)
-
🔨 Move adambkaplan to Alumni (#1183)
-
🔨 Bump github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0 (#1195)
-
🔨 Bump google.golang.org/api from 0.255.0 to 0.264.0 (#1190)
-
🔨 Bump github.com/tektoncd/pipeline from 1.6.0 to 1.9.0 (#1188)
-
🔨 Bump gocloud.dev from 0.40.0 to 0.44.0 (#1175)
-
🔨 Bump k8s.io/apiserver from 0.32.9 to 0.32.11 (#1173)
-
🔨 Bump github.com/jackc/pgx/v5 from 5.7.5 to 5.7.6 (#1160)
-
🔨 Fix release pipeline for oracle cloud (#1159)
Docs
- 📖 docs(retention): clarify that TTL applies to DB records and not Run age (#1182)
Thanks
Thanks to these contributors who contributed to v0.18.0!
- ❤️ @aThorp96
- ❤️ @adambkaplan
- ❤️ @dependabot[bot]
- ❤️ @enarha
- ❤️ @khrm
Extra shout-out for awesome release notes: