GKE Allow Runner Action
Version updated for https://github.com/1xor3us/gke-allow-runner-action to version 1.0.2.
- This action is used across all versions by ? repositories.
Go to the GitHub Marketplace to find the latest changes.
Release notes
🚀 GKE Allow Runner Action — v1.0.2 ✨ New Features & Improvements
🔏 Automatic Image Signing (OIDC + Sigstore)
- Docker images published to GHCR are now automatically signed using GitHub OIDC with Sigstore Cosign.
- No private key management required — the signature is linked to your verified GitHub workflow.
Fully verifiable via:
- 🔗 search.sigstore.dev
🧪 Reproducible Build Verification
- Added a detailed “Reproducible Build Verification” section in the README.
- Lets anyone verify that the binary inside the GHCR image is bit-for-bit identical to what can be built locally from this repository.
- Ensures full supply-chain transparency and verifiable integrity.
🐳 Automatic README & Action.yml Updates Automatically updates:
- All version tags (v1.0.x)
- The image digest (SHA-256)
- Commits and pushes those updates to the main branch.
- Guarantees that all documentation always matches the latest published image.
⚙️ Internal Enhancements
- Updated to Cosign v4.0.0 (modern keyless signing support).
- Improved Dockerfile for fully reproducible builds.
- Added Windows / Linux / macOS instructions for local binary verification.
- Cleaner and more maintainable release pipeline.