hanthor/Container Image Changelog

Generates a changelog between two container image versions using SBOM attestations via Cosign

Trust Signals

name	description	required	default
family	Known image family (e.g. bluefin, aurora). Provides registry, cosign-key, and images automatically. Not needed when registry + cosign-key + images are all set.	no	—
registry	Container registry prefix (e.g. ghcr.io/tuna-os/). Required when family is not set.	no	—
cosign-key	URL or path to cosign public key. Required when family is not set.	no	—
images	Space-separated list of image names to compare (e.g. "yellowfin albacore"). Overrides the family default.	no	—
stream	Release stream for auto-discovery (e.g. stable, latest, gnome). Finds the two most recent {stream}-YYYYMMDD tags.	no	—
tag-pattern	Override regex for tag discovery (e.g. "^\d{8}$" for bare date tags). Only used when stream is set.	no	—
prev_tag	Previous release tag (ignored if stream is set)	no	—
curr_tag	Current release tag (ignored if stream is set)	no	—
handwritten	Optional introductory text for the changelog	no	—
output	Output file path	no	changelog.md
output-env	Output environment file path (writes TITLE=... and TAG=...)	no	—
json	Output JSON instead of Markdown	no	false
verbose	Enable debug logging	no	false

no outputs