sean/pipelines
Watch
1
0
Fork
You've already forked pipelines
 0
Code Issues Pull requests 12 Projects Releases 294 Packages Wiki Activity
294 releases 294 tags
  • v0.1.137 869e3474ae

    v0.1.137 Stable

    pipeline-bot released this 2026-07-12 06:57:20 +00:00 | 665 commits to main since this release

    Changed

    • Kernel-path steps stop fetching tools at run time (Phase 2a). The kernel-build
      verify step (crane from GitHub) and the deploy verify-sig step (cosign from
      GitHub) now run on pipeline-tools:v4 (which bakes crane + cosign + kubectl) with
      the runtime curl … releases/download lines deleted. These fired on every kernel
      roll — the same runtime-fetch SPOF class as the dl.min.io outage, now removed from
      the security spine. Also dropped a redundant apt-get install jq in
      pipeline-promote-image (jq is already baked). Seanfarm-side kernel-stager +
      cosign-key-extractor get the same treatment in a companion seanfarm change.

    Included changes (v0.1.136 -> v0.1.137)

    • 6ba13b855fac feat(kernel): verify/deploy steps use baked pipeline-tools:v4 (no runtime crane/cosign fetch)
    Downloads