Skip to content

ERP-AI-Pro v0.1.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 31 Oct 11:48
· 5 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.1.2
c30ee24
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ERP-AI-Pro v0.1.2, built and attested by .github/workflows/release.yml from commit c30ee24cef290345835f15a8b1107a6568c2103b.

Corresponding source

The corresponding source of this release is the tag v0.1.2, commit c30ee24cef290345835f15a8b1107a6568c2103b.

Images

  • ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.2@sha256:5d673f5389502283909c39d51ba889bcd21ebbec33ff829d058cab9c4fb5d9af
  • ghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.2@sha256:94bccb4db7da1146963b05e19170237c6d24b3f4b1fcae9bb5a26862af32a556
  • ghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.2@sha256:383935395c8cdaf61932714681a00f9471773a210f8c98f4edf1ab30344149b8

Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.2.

Deploying

On the server, scripts/deploy/deploy.sh v0.1.2 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.

Licence and notices

ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.

Assets

  • release-images.env: the image tag and the three digests, the four values deploy.sh writes into .env.
  • <image>.provenance.sigstore.json and <image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.
  • <image>.spdx.json: the SPDX 2.3 SBOM of each image.
Assets 13
Loading