RELEASE VERIFICATION

NetIntel v1.0.0 Release Provenance

Source metadata, artifact hashes, and current signing and publication status.

← NetIntel v1.0.0 release page

Build and source metadata

Product Version
1.0.0
Release Type
Final
Source Tag
v1.0.0
Production Public-Key SHA-256
7bc9a02f94ead738cb7d2a38f7203c3e4471e2887f62158fe9b1c9968c0a3366
Git Commit
e193bdc6fbfba135fca359a7619a9b1fd1e817c3
Git Short Commit
e193bdc
Git Subject
Finalize NetIntel v1.0.0 changelog
Git Branch
main
Working Tree
CLEAN
Debian Package
netintel_1.0.0-1_amd64.deb
Debian Package Version
1.0.0-1
Debian Package SHA-256
37e963af16a44de6894b1f9fa1ef989bfc8335d2128d33f400c4043e10323f0e
RPM Package
netintel-1.0.0-1.el9.x86_64.rpm
RPM Package SHA-256
833476759ff8224b4977f7c7f46fc20241ea0020e63620b8c8775ba1722fc17f
RPM Specification Version
1.0.0
RPM Specification Release
1%{?dist}
Debian Build
PASS
RPM Build
PASS
Artifact Validation
PASS
Source Tag Status
v1.0.0 — present in the release preparation environment
Release Signing
VERIFIED — checksum manifest and provenance detached signatures
Final Release Approval
MANUAL

Full provenance record

NetIntel Final Release Provenance
        Product Version: 1.0.0
        Release Type: final
        Source Tag: v1.0.0
        Production Public-Key SHA-256: 7bc9a02f94ead738cb7d2a38f7203c3e4471e2887f62158fe9b1c9968c0a3366
        Git Commit: e193bdc6fbfba135fca359a7619a9b1fd1e817c3
        Git Short Commit: e193bdc
        Git Subject: Finalize NetIntel v1.0.0 changelog
        Git Branch: main
        Working Tree: CLEAN

        Debian Package: netintel_1.0.0-1_amd64.deb
        Debian Package Version: 1.0.0-1
        Debian Package SHA-256: 37e963af16a44de6894b1f9fa1ef989bfc8335d2128d33f400c4043e10323f0e

        RPM Package: netintel-1.0.0-1.el9.x86_64.rpm
        RPM Package SHA-256: 833476759ff8224b4977f7c7f46fc20241ea0020e63620b8c8775ba1722fc17f

        RPM Specification Version: 1.0.0
        RPM Specification Release: 1%{?dist}

        Debian Build: PASS
        RPM Build: PASS
        Artifact Validation: PASS
        Release Signing: VERIFIED (manifest and provenance detached signatures)
        Final Release Approval: MANUAL
    

Release verification: The checksum manifest and provenance record were signed and verified during release preparation. Download the published SHA256SUMS manifest and its detached signature from the release page to verify package integrity and authenticity.

Before trusting the release signature, verify the release-signing public key fingerprint through an independent, trusted channel. Downloading a public key from the same location as the release artifacts does not independently establish its identity.

Only the Debian and RPM binary packages are included in the public distribution. Source archives and the source RPM are retained privately and are not part of the public release.

REST API Reference · Webhook Notifications · Release v1.0.0