Release Feed
Your release feed is an Atom feed of new versions your licenses let you pull. Add it to a feed reader, a Slack or Teams channel (through their RSS apps), or your own automation, and you'll see each release as your vendor pushes it.
Turning It On
The feed is off until an admin on your team turns it on. On the Licenses page, the Release feed panel has a Turn on release feed button for admins. Once it's on, everyone on your team sees the feed URL there, with a button to copy it.
The URL itself is the only credential, because feed readers can't sign in. Anyone who has it can read the feed, so share it only with people who should see your vendor's releases. The feed shows release details (repository, tags, pull commands and changelog links), never credentials: you still need a pull token to pull anything.
The URL isn't tied to the person who turned the feed on, so it keeps working when people leave your team.
Resetting or Turning It Off
If the URL ends up somewhere it shouldn't, an admin can click Reset URL. The old URL stops working at once, and anyone using the feed needs the new one. Turn off deletes the URL; turning the feed on again makes a new one.
What's in the Feed
Each entry is a new image in a repository your licenses cover:
- One entry per image, not per tag. A release pushed as
1.4.2,1.4,1andlatestis one entry, titled by its most specific tag (1.4.2), with the others listed as "also tagged". - Only what your licenses allow, judged the same way the registry judges a pull. The feed is checked against your licenses each time it's read, so a renewal or a change to your license applies straight away. An image that stops being available to you (say your license lapses, or every tag you could pull moves to another image) drops out of the feed.
- A pull command for the tag and one by digest, which always fetches exactly that image.
- A changelog link, when your vendor has set one for the product.
A tag that moves onto an image the feed already announced (for example latest catching up to 1.4.2) doesn't create a new entry. Signatures, SBOMs and attestations aren't releases, so they never appear on their own.
The feed shows the 50 most recent releases, starting from when your vendor's registry began recording them. Releases from before that aren't in the feed, but you can still browse their tags on the repository pages.