chartmuseum

mirror of https://github.com/helm/chartmuseum.git synced 2026-02-05 15:45:50 +01:00

Files

Puerco 77d6cea5a9 Generate SPDX SBOM at release time (#538 )

* Add bom generation script

This commit adds a script in scripts/sbom.sh that generates
the SBOM for the release adding three kinds of elements to it:

	1. The source code with full dependencies
	2. The tarball distrubutions written in _dist
	3. The container image

The SBOM is written into the _dist directory.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@chainguard.dev>

* Generate SBOM from build workflow

This commit modifies the build pipeline to generate an SPDX SBOM
describing the release. It uses the new bom-installer action to
install the Kubernetes SBOM Tool into the runner and calls the
scripts/sbom.sh script which handles the generation.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@chainguard.dev>

* Modify release pipeline to properly include SBOM

Signed-off-by: Josh Dolitsky <josh@dolit.ski>

Co-authored-by: Josh Dolitsky <josh@dolit.ski>

2022-01-30 14:05:04 -06:00

acceptance.sh

Various v0.14.0 prep items (#527 )

2022-01-25 08:18:40 -06:00

get-chartmuseum

Support Builds for ARM M1 Macs (#477 )

2021-09-03 01:21:59 +08:00

mirror-k8s-repos.sh

prepare for v0.13.0 release

2021-02-01 23:05:08 -05:00

release-artifacts.sh

Generate SPDX SBOM at release time (#538 )