Repository navigation
Releases: Dewiride-Open-Source/ERP-AI-Pro
Release list
ERP-AI-Pro v0.1.3
ERP-AI-Pro v0.1.3, built and attested by .github/workflows/release.yml from commit 826f1b8d22d17cfa53a00c373435dadf3ac4e468.
Corresponding source
The corresponding source of this release is the tag v0.1.3, commit 826f1b8d22d17cfa53a00c373435dadf3ac4e468.
Images
ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.3@sha256:9e984d3c076bc0cb1d56d897bfd5d05510ea2ae0c51a293892b3b14451ae114eghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.3@sha256:6e0f0406019d5d7d98bcb801e0c01129a462d7b5f85e175d7b66c41c486e70eaghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.3@sha256:d4c77033cb3dbbfcddfd611e8f6def6eb7daf90d58bd1a1463adeccef2bca5b2
Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.3.
Deploying
On the server, scripts/deploy/deploy.sh v0.1.3 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.
Licence and notices
ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.
Assets
release-images.env: the image tag and the three digests, the four valuesdeploy.shwrites into.env.<image>.provenance.sigstore.jsonand<image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.<image>.spdx.json: the SPDX 2.3 SBOM of each image.
ERP-AI-Pro v0.1.2
ERP-AI-Pro v0.1.2, built and attested by .github/workflows/release.yml from commit c30ee24cef290345835f15a8b1107a6568c2103b.
Corresponding source
The corresponding source of this release is the tag v0.1.2, commit c30ee24cef290345835f15a8b1107a6568c2103b.
Images
ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.2@sha256:5d673f5389502283909c39d51ba889bcd21ebbec33ff829d058cab9c4fb5d9afghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.2@sha256:94bccb4db7da1146963b05e19170237c6d24b3f4b1fcae9bb5a26862af32a556ghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.2@sha256:383935395c8cdaf61932714681a00f9471773a210f8c98f4edf1ab30344149b8
Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.2.
Deploying
On the server, scripts/deploy/deploy.sh v0.1.2 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.
Licence and notices
ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.
Assets
release-images.env: the image tag and the three digests, the four valuesdeploy.shwrites into.env.<image>.provenance.sigstore.jsonand<image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.<image>.spdx.json: the SPDX 2.3 SBOM of each image.
ERP-AI-Pro v0.1.1
ERP-AI-Pro v0.1.1, built and attested by .github/workflows/release.yml from commit cc57de8e5ed9f6f0864cf69bd94c20dabeae74eb.
Corresponding source
The corresponding source of this release is the tag v0.1.1, commit cc57de8e5ed9f6f0864cf69bd94c20dabeae74eb.
Images
ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.1@sha256:327e76cd754ab59a2e13e5d657879f108c3b023b20a0f723aa763cab090fac4aghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.1@sha256:a2f94aeebb12ffc5221af8c9884627bb2a1a57c3e5855ec1cc51569ac812951dghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.1@sha256:2aef3b4bba409ccc3af4ebb7d55661f7a09b307696999f6c422c273f49a9f359
Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.1.
Deploying
On the server, scripts/deploy/deploy.sh v0.1.1 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.
Licence and notices
ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.
Assets
release-images.env: the image tag and the three digests, the four valuesdeploy.shwrites into.env.<image>.provenance.sigstore.jsonand<image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.<image>.spdx.json: the SPDX 2.3 SBOM of each image.
ERP-AI-Pro v0.1.0
ERP-AI-Pro v0.1.0, built and attested by .github/workflows/release.yml from commit 7c268cda658abb7fe308c4b159ab67bef1a19fcc.
Corresponding source
The corresponding source of this release is the tag v0.1.0, commit 7c268cda658abb7fe308c4b159ab67bef1a19fcc.
Images
ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.0@sha256:afee23fd35837fc2d3ec2a2de463f19fda85c381883c0a6e56934f3ebf8411bcghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.0@sha256:0c30cff584311ae8a2c6a49f1e34c8ae138ed0206278d8f2a651b378654987efghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.0@sha256:7ea822164a7b55eb89e586c9acf89295fc4e22c727c9b45bb2cd16c0ed275bc2
Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.0.
Deploying
On the server, scripts/deploy/deploy.sh v0.1.0 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.
Licence and notices
ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.
Assets
release-images.env: the image tag and the three digests, the four valuesdeploy.shwrites into.env.<image>.provenance.sigstore.jsonand<image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.<image>.spdx.json: the SPDX 2.3 SBOM of each image.