ERP-AI-Pro v0.1.0

ERP-AI-Pro v0.1.0, built and attested by .github/workflows/release.yml from commit 7c268cda658abb7fe308c4b159ab67bef1a19fcc.

Corresponding source

The corresponding source of this release is the tag v0.1.0, commit 7c268cda658abb7fe308c4b159ab67bef1a19fcc.

Images

• ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.0@sha256:afee23fd35837fc2d3ec2a2de463f19fda85c381883c0a6e56934f3ebf8411bc
• ghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.0@sha256:0c30cff584311ae8a2c6a49f1e34c8ae138ed0206278d8f2a651b378654987ef
• ghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.0@sha256:7ea822164a7b55eb89e586c9acf89295fc4e22c727c9b45bb2cd16c0ed275bc2

Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.0.

Deploying

On the server, scripts/deploy/deploy.sh v0.1.0 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.

Licence and notices

ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.

Assets

• release-images.env: the image tag and the three digests, the four values deploy.sh writes into .env.
• <image>.provenance.sigstore.json and <image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.
• <image>.spdx.json: the SPDX 2.3 SBOM of each image.