v0.1.0-alpha.1

mikebom-operator v0.1.0-alpha.1

Artifacts

Operator image (multi-arch: linux/amd64, linux/arm64):

ghcr.io/kusari-oss/mikebom-operator:v0.1.0-alpha.1

Helm chart (OCI artifact):

oci://ghcr.io/kusari-oss/charts/mikebom-operator:0.1.0-alpha.1

Verify (cosign keyless OIDC)

# Image signature
cosign verify \
  --certificate-identity-regexp '^https://github.com/kusari-oss/mikebom-operator/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  ghcr.io/kusari-oss/mikebom-operator:v0.1.0-alpha.1

# SBOM attestation (CycloneDX)
cosign verify-attestation --type cyclonedx \
  --certificate-identity-regexp '.*' \
  --certificate-oidc-issuer-regexp '.*' \
  ghcr.io/kusari-oss/mikebom-operator:v0.1.0-alpha.1

# Chart signature
cosign verify \
  --certificate-identity-regexp '.*' \
  --certificate-oidc-issuer-regexp '.*' \
  ghcr.io/kusari-oss/charts/mikebom-operator:0.1.0-alpha.1

Install

helm install mikebom-operator \
  oci://ghcr.io/kusari-oss/charts/mikebom-operator \
  --version 0.1.0-alpha.1 \
  -n kusari-operator --create-namespace --wait

See docs/release-runbook.md for the full verification + smoke-test checklist.