ERP-AI-Pro v0.1.1

ERP-AI-Pro v0.1.1, built and attested by .github/workflows/release.yml from commit cc57de8e5ed9f6f0864cf69bd94c20dabeae74eb.

Corresponding source

The corresponding source of this release is the tag v0.1.1, commit cc57de8e5ed9f6f0864cf69bd94c20dabeae74eb.

Images

• ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.1@sha256:327e76cd754ab59a2e13e5d657879f108c3b023b20a0f723aa763cab090fac4a
• ghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.1@sha256:a2f94aeebb12ffc5221af8c9884627bb2a1a57c3e5855ec1cc51569ac812951d
• ghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.1@sha256:2aef3b4bba409ccc3af4ebb7d55661f7a09b307696999f6c422c273f49a9f359

Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.1.

Deploying

On the server, scripts/deploy/deploy.sh v0.1.1 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.

Licence and notices

ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.

Assets

• release-images.env: the image tag and the three digests, the four values deploy.sh writes into .env.
• <image>.provenance.sigstore.json and <image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.
• <image>.spdx.json: the SPDX 2.3 SBOM of each image.