Skip to content
Documentation
Container Image

Container Image

Images are published to ghcr.io/qjoly/kpil.

Tags

TagUpdated on
latestRelease tag (v*)
v1.2.3Release tag — immutable
edgeEvery commit to main
sha-<7chars>Every commit to main — immutable

Platforms

The image is built for linux/amd64 and linux/arm64.

Contents

  • kubectl (latest stable at build time)
  • gh CLI (latest stable at build time)
  • copilot binary (from github/copilot-cli)

Signature verification

Every image is signed with cosign keyless signing via GitHub Actions OIDC. The CLI verifies the signature automatically before starting the container.

# Verification is automatic when cosign is in PATH
kpil

# Skip verification for unsigned or locally-built images
kpil --insecure-image

Verify manually:

cosign verify \
  --certificate-identity-regexp "https://github.com/qjoly/kpil/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  ghcr.io/qjoly/kpil:latest

Build locally 

docker build -t kpil:local .
GH_TOKEN=$GH_TOKEN kpil --build --insecure-image
GitHub Token