zeborg/kubekosh

v0.4.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 17d Containers & Orchestration

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

certification cka ckad cks docker education

+9 more

exam kcna kcsa kubernetes labs learning practice preparation simulator

Affected surfaces

deps

Summary

AI summary

Updates 🐛 Bug Fixes, actions, and 🚀 Features across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds build provenance attestation for Docker image Adds build provenance attestation for Docker image Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds SBOM (Software Bill of Materials) to Docker image Adds SBOM (Software Bill of Materials) to Docker image Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds tracks for categorizing relevant bundles Adds tracks for categorizing relevant bundles Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes SBOM artifact inclusion in releases Fixes SBOM artifact inclusion in releases Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes SBOM generation path issue Fixes SBOM generation path issue Source: llm_adapter@2026-07-16 Confidence: high	—
Refactor	Low	Uses PR/contributor tags instead of URLs in actions Uses PR/contributor tags instead of URLs in actions Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

Docker image

docker pull zeborg/kubekosh:v0.4.0

Supply chain security

This release includes:

Build provenance attestation — verifiable record of how and where the image was built
SBOM (Software Bill of Materials) — full inventory of packages inside the image

Verify with the GitHub CLI:

gh attestation verify oci://docker.io/zeborg/kubekosh:v0.4.0 \
  --repo zeborg/kubekosh

Or scan for vulnerabilities using Grype:

grype zeborg/kubekosh:v0.4.0

[0.4.0] - 2026-07-09

🚀 Features

(tracks) Add tracks for categorizing relevant bundles by @zeborg

🐛 Bug Fixes

(actions) Sbom artifact in release by @zeborg
(actions) Sbom generation path by @zeborg

⚙️ Miscellaneous Tasks

(actions) Use pr/contributor tags instead of urls by @zeborg

Contributors

@zeborg

Full Changelog: https://github.com/zeborg/kubekosh/compare/v0.3.3...v0.4.0

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track zeborg/kubekosh

Get notified when new releases ship.

About zeborg/kubekosh

All releases →