This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+9 more
Summary
AI summaryUpdates 🐛 Bug Fixes, ⚙️ Miscellaneous Tasks, and https://github.com/anchore/grype across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Adds build provenance attestation for the Docker image. Adds build provenance attestation for the Docker image. Source: granite4.1:30b@2026-06-09-audit Confidence: low |
— |
| Security | Medium |
Includes Software Bill of Materials (SBOM) in the release. Includes Software Bill of Materials (SBOM) in the release. Source: granite4.1:30b@2026-06-09-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes incorrect scenario setup state for completed scenarios. Fixes incorrect scenario setup state for completed scenarios. Source: llm_adapter@2026-06-09 Confidence: high |
— |
| Bugfix | Medium |
Replaces quoted command with base64 encoding in `kubectl cp` setup. Replaces quoted command with base64 encoding in `kubectl cp` setup. Source: llm_adapter@2026-06-09 Confidence: high |
— |
| Bugfix | Low |
Fixes a broken service selector setup and hints issue. Fixes a broken service selector setup and hints issue. Source: granite4.1:30b@2026-06-09-audit Confidence: low |
— |
Full changelog
Docker image
docker pull zeborg/kubekosh:v0.1.2
Supply chain security
This release includes:
- Build provenance attestation — verifiable record of how and where the image was built
- SBOM (Software Bill of Materials) — full inventory of packages inside the image
Verify with the GitHub CLI:
gh attestation verify oci://docker.io/zeborg/kubekosh:v0.1.2 \
--repo zeborg/kubekosh
Or scan for vulnerabilities using Grype:
grype zeborg/kubekosh:v0.1.2
[0.1.2] - 2026-06-09
🐛 Bug Fixes
Fix a Broken Service SelectorSetup & Hints- Incorrect Scenario Setup State For Completed Scenarios
- Replace quoted cmd with base64 in
kubectl cpsetup
⚙️ Miscellaneous Tasks
- Add screenshots in
README.md
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About zeborg/kubekosh
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]