Artifacts¶
One tag, vX.Y.Z, stamps every artifact of this repository. The tables are generated from the release configuration.
Release assets (the GitHub release of tag vX.Y.Z):
| Product | Asset | Contents |
|---|---|---|
| sluis | sluisctl_<version>_<os>_<arch>.tar.gz |
sluisctl |
| sluis | sluis_<version>_<os>_<arch>.tar.gz |
sluis, resource-proxy, acceptance |
| sluis | sluis-issuer_<version>_<os>_<arch>.zip |
sluis-issuer |
| sluis | sluis-cloudflare_<version>_<os>_<arch>.zip |
sluis-cloudflare |
| sluis | sluis-backup_<version>_<os>_<arch>.zip |
sluis-backup |
| sluis | sluis-github_<version>_<os>_<arch>.zip |
sluis-github |
| sluis | sluis-slack_<version>_<os>_<arch>.zip |
sluis-slack |
| sluis | sluis-outline_<version>_<os>_<arch>.zip |
sluis-outline |
| sluis | sluis-google_<version>_<os>_<arch>.zip |
sluis-google |
| sluis | sluis-config-schemas_<version>.tar.gz |
config-schemas (bundled files) |
| sluis | sluis-audit-catalogue_<version>.tar.gz |
audit-catalogue (bundled files) |
| audit | audit_<version>_<os>_<arch>.tar.gz |
audit |
| audit | audit-writer-lambda_<version>_<os>_<arch>.zip |
audit-writer-lambda |
| audit | audit-notary-lambda_<version>_<os>_<arch>.zip |
audit-notary-lambda |
Container images:
| Product | Image |
|---|---|
| sluis | ghcr.io/truvity/sluis/sluis |
| sluis | ghcr.io/truvity/sluis/resource-proxy |
| sluis | ghcr.io/truvity/sluis/sluis-issuer |
| sluis | ghcr.io/truvity/sluis/sluis-github |
| sluis | ghcr.io/truvity/sluis/sluis-slack |
| sluis | ghcr.io/truvity/sluis/sluis-google |
| sluis | ghcr.io/truvity/sluis/sluis-cloudflare |
| sluis | ghcr.io/truvity/sluis/sluis-backup |
| sluis | ghcr.io/truvity/sluis/sluis-outline |
| audit | ghcr.io/truvity/audit/audit-writer |
| audit | ghcr.io/truvity/audit/audit-query |
| audit | ghcr.io/truvity/audit/audit-notary |
| audit | ghcr.io/truvity/audit/audit-observe |
| audit | ghcr.io/truvity/audit/audit |
Helm charts and Nix flakes:
| Kind | Published at |
|---|---|
| chart | oci://ghcr.io/truvity/charts/sluis |
| chart | oci://ghcr.io/truvity/charts/audit |
| Nix flake | sluisctl_<version>_nix-flake.tar.gz |
| Nix flake | audit_<version>_nix-flake.tar.gz |
Go modules, each tagged <dir>/vX.Y.Z beside the root tag vX.Y.Z:
| Directory | Import path |
|---|---|
. |
github.com/truvity/sluis |
audit/sdk |
github.com/truvity/sluis/audit/sdk |
storage |
github.com/truvity/sluis/storage |
audit |
github.com/truvity/sluis/audit |
audit/deploy/pulumi |
github.com/truvity/sluis/audit/deploy/pulumi |
deploy/pulumi |
github.com/truvity/sluis/deploy/pulumi |
deploy/pulumi/edge/cloudflare |
github.com/truvity/sluis/deploy/pulumi/edge/cloudflare |
Packages and actions published by the release workflow:
| Kind | Name | Where |
|---|---|---|
| npm package | @truvity/sluis |
GitHub Packages |
| npm package | @truvity/audit |
GitHub Packages |
| npm package | @truvity/audit-react |
GitHub Packages |
| GitHub Action | truvity/sluis@<commit> |
the repository root, action.yml |
Each release also carries these. Verify a release checks them.
| Asset | Contents |
|---|---|
checksums.txt |
SHA-256 of every archive, sluis and audit combined |
checksums.txt.sigstore.json |
the keyless cosign bundle over checksums.txt |
<archive>.sbom.spdx.json |
the SPDX SBOM of each archive |