v0.3.3

News

• RISCV64 support
• Release artifacts signed with cosign
• Containers signed with cosign

Here's how to verify the container:

docker pull 'ghcr.io/cimnine/shelly-openmetrics-exporter:v0.3.3'
cosign verify 'ghcr.io/cimnine/shelly-openmetrics-exporter:v0.3.3' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --certificate-identity 'https://github.com/cimnine/shelly-openmetrics-exporter/.github/workflows/goreleaser.yml@refs/tags/v0.3.3'

Changelog

• 3fba972 Disable docker_sign cosign output
• ebaa62b Revert "Don't upload signature"
• f488694 Don't upload signature
• 18afe2d Pass digest to docker_sign
• bfdc39f Export signing certificate for Container builds
• 8b205bc Still build on push
• 9b458d9 Use gh-action to download syft
• 5887ef6 RISCV64 & cosign