v0.30.0

Infisical/agent-vaultv0.30.0Jun 7, 2026by github-actions[bot]

AI Summary

Enhances security and transparency by adding build provenance attestations and signing published Docker images.

Key Highlights

Build provenance attestations added
Docker images signed with Cosign

New Features

Build provenance attestations
Cosign-sign published Docker images

Full Release Notes

## Changelog
* 10af8539a5e802f9f8cfc05fa8475f30bada0720 feat(release): add build provenance attestations after goreleaser (#138)
* b3eb4038dc654197e320c532e0db773d471d96b7 feat(release): cosign-sign published docker images (#139)

## Verify

```bash
# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.30.0 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
```