Cédric VerstraetenandClaude Opus 5.5 3949cb4bac feat(hub): default Admin to signed, hardened ghcr.io/uug-ai/admin v1.4.5 ...

Only ghcr.io/uug-ai images are trusted, so Admin now defaults to the
signed GHCR release with the hardened runtime production already uses
(8080, 65532 non-root, read-only root, memory /tmp, /healthz probes).
A legacy image can be restored with the documented opt-out values.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-11 20:52:01 +00:00

..

check-admin-runtime.sh

feat(hub): default Admin to signed, hardened ghcr.io/uug-ai/admin v1.4.5

2026-11-11 20:52:01 +00:00

check-frontend-runtime.sh

feat(hub): default Admin to signed, hardened ghcr.io/uug-ai/admin v1.4.5

2026-11-11 20:52:01 +00:00

check-hardened-workers.sh

feat(hub): default Admin to signed, hardened ghcr.io/uug-ai/admin v1.4.5

2026-11-11 20:52:01 +00:00

check-http-port-migration.sh

Add safe recovery for hardened HTTP port upgrades (#217)

2026-11-04 10:19:05 +01:00

check-hub-api-runtime.sh

Add hardened Hub API security contexts and writable scratch (0.170.1)

2026-11-04 14:05:22 +00:00

check-hub-mcp.sh

Add configurable Hub API MCP endpoint (0.177.0)

2026-11-08 20:15:29 +01:00

check-hub-passkeys.sh

feat(hub): set FEATURE_PASSKEYS_ENABLED from passkeys.enabled (0.168.0)

2026-10-30 11:01:05 +00:00

check-pipeline-deployment-annotations.sh

feat(hub): make the dominant color stage opt-in (#193)

2026-10-14 14:52:23 +02:00

migrate-http-port.sh

Add safe recovery for hardened HTTP port upgrades (#217)

2026-11-04 10:19:05 +01:00