Packer v1.16.0 Adds SLSA Provenance Verification and HCL2 Features
Packer v1.16.0 introduces native SLSA provenance generation and verification capabilities for machine images. This enhancement significantly boosts supply chain security by ensuring the authenticity and integrity of built images. Additionally, the release brings new HCL2 features specifically for provisioners and variables, offering greater flexibility and expressiveness in Packer configurations. These updates are crucial for engineers and architects leveraging Packer to automate their machine image creation workflows.
- →SLSA Provenance for Machine Images
- →New HCL2 Features for Provisioners and Variables
Features (2) ›
- SLSA Provenance for Machine Images
Packer v1.16.0 now includes native support for generating and verifying SLSA provenance for machine images. This capability helps ensure the trustworthiness and integrity of machine images throughout the software supply chain.
- New HCL2 Features for Provisioners and Variables
The release adds new HCL2 language features, specifically enhancing how provisioners and variables can be defined and used within Packer configurations. These additions provide more advanced customization and control over image build processes.
https://www.hashicorp.com/blog/packer-v1160-brings-verifiable-provenance-to-machine-images
Related releases
- HashiCorp Terraform v1.16.4 Patch Release Addresses Key Bugs Terraform Core Releases ·
- Terraform Provider for Google Cloud 8.0 Generally Available HashiCorp Blog ·
- Secure AI agents with HashiCorp Boundary HashiCorp Blog ·
- HCP Terraform adds native pre-written policies for compliance guardrails HashiCorp Blog ·
- HCP Vagrant Deprecation Scheduled for 2026 HashiCorp Blog ·
- Terraform v1.16.3 Released, Addressing Several Core Bug Fixes Terraform Core Releases ·