Skip to content

ERP-AI-Pro v0.1.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 31 Oct 18:29
· 19 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.1.3
826f1b8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ERP-AI-Pro v0.1.3, built and attested by .github/workflows/release.yml from commit 826f1b8d22d17cfa53a00c373435dadf3ac4e468.

Corresponding source

The corresponding source of this release is the tag v0.1.3, commit 826f1b8d22d17cfa53a00c373435dadf3ac4e468.

Images

  • ghcr.io/dewiride-open-source/erp-ai-pro/api:0.1.3@sha256:9e984d3c076bc0cb1d56d897bfd5d05510ea2ae0c51a293892b3b14451ae114e
  • ghcr.io/dewiride-open-source/erp-ai-pro/web:0.1.3@sha256:6e0f0406019d5d7d98bcb801e0c01129a462d7b5f85e175d7b66c41c486e70ea
  • ghcr.io/dewiride-open-source/erp-ai-pro/proxy:0.1.3@sha256:d4c77033cb3dbbfcddfd611e8f6def6eb7daf90d58bd1a1463adeccef2bca5b2

Every image carries a SLSA build provenance attestation and an SPDX 2.3 SBOM attestation, signed for .github/workflows/release.yml at refs/tags/v0.1.3.

Deploying

On the server, scripts/deploy/deploy.sh v0.1.3 verifies the six attestations of these digests before it changes anything; the deployment runbook describes the deployment, its dry run and the rollback.

Licence and notices

ERP-AI-Pro is licensed under the GNU Lesser General Public License version 3 only (COPYING, COPYING.LESSER). Every image holds COPYING, COPYING.LESSER and THIRD-PARTY-NOTICES.txt in /usr/share/doc/erp-ai-pro/, and the notices of the three images are in infra/docker/notices at this tag.

Assets

  • release-images.env: the image tag and the three digests, the four values deploy.sh writes into .env.
  • <image>.provenance.sigstore.json and <image>.sbom.sigstore.json: the Sigstore bundles of the provenance and SBOM attestations of each image.
  • <image>.spdx.json: the SPDX 2.3 SBOM of each image.
Assets 13
Loading