Release v0.0.1

Changelog

• 2a5c768 --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel dependency-type: direct:production update-type: version-update:semver-minor ...
• f85a3de --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ...
• 8550908 Accept --arch=all only if it's the only element
• a3ed4eb Add --keyring-append option
• 29d9f79 Add --sbom flag to publish matching build cli
• b6cd0d9 Add --stage-tags flag to apko publish
• be64a6b Add --use-oci-mediatypes option to use OCI mediatypes
• 4068d56 Add 4MiB bufio for pgzip
• e2ec616 Add CI test harness
• 759aa99 Add GenerateIndex method to sbom interface
• 1e2d308 Add GenerateIndex to sbom oject
• 3b007f9 Add Go Tests workflow
• 16d05e4 Add Harden Runner audit configs
• 1043d73 Add Index Info to sbom options
• efe5664 Add Index SBOM generation to build context
• 5e42629 Add Lima config and instructions for mac
• 53ac805 Add LockImageConfigurationWithPackages to return package metadata (chainguard-dev#2061)
• 3fe9d83 Add LoongArch architecture definition (chainguard-dev#1275)
• c08f137 Add OCI Annotations to image configuration
• a646548 Add PostAttachSBOM function
• a39a008 Add ReadReleaseData method
• b4cb776 Add SBOM Generator interface
• 37ae555 Add SBOM object and implementation
• e2ea8a2 Add SBOM quality CI test
• a613052 Add SPDX File support
• b64b70c Add StopSignal support.
• 98af90c Add SubFS implementation for Melange (chainguard-dev#1560)
• 3358e32 Add VCS URL to CycloneDX sbom
• da7a6b2 Add VCS URL to SPDX SBOMs
• fee7d7c Add MergeInto for combining ImageConfigurations (chainguard-dev#1206)
• 40dac3b Add a few more apk unit tests
• 7935488 Add a no-op test for PublishCmd
• 646dc44 Add a test case for /etc/ld.so.cache permissions (chainguard-dev#1761)
• bb43366 Add a test that important files come early in extracted images (chainguard-dev#1964)
• 1a52740 Add a test to catch SBOM changes
• 93e1c62 Add a test to verify no output changes
• 672e5b1 Add a unit test for the sort ordering change. (chainguard-dev#1444)
• 2e4a981 Add ability to get stemmed version tags
• c2679fe Add additional error info when trying to run as a root user.
• 914a574 Add an OperatingSystem package to our image SBOMs (chainguard-dev#1690)
• 00e43dd Add an explicit sort to squash diffs. (chainguard-dev#1443)
• 9e347c8 Add an internal tarfs implementation
• 3365d8e Add and populate ImageDigest field
• 09ddb54 Add apko SBOM composition documentation
• d3fbb9f Add apko dot command
• 88e6194 Add binary to generate json schema.
• ad524c9 Add bit on Docker dependency.
• c4376a0 Add build package logical paths test
• b9a50bf Add build.MultiArch.BuildPackageLists (chainguard-dev#1201)
• 57c684d Add codeowners
• 9880109 Add commit hash to VCS URL
• 9d4b52d Add contents.runtime_keyring for runtime APK trust (chainguard-dev#2297)
• 04b8d4c Add deveenv shell script and apko configuration
• 148c839 Add docker cli to devenv.
• a24da91 Add docs for work-dir.
• d57424e Add docs on stop-signal.
• 35dcb7e Add erofs support to apko. (chainguard-dev#2249)
• d598806 Add example for building on top of base
• 2b34d49 Add examples for single and dual archs
• 2eb3a2f Add exec unit and integration tests
• 2566ff8 Add expandapk.Split and use it
• 4c96f71 Add first iteration of SPDX generator
• 849c0c0 Add format date is expected in.
• 7123474 Add git, jq to devenv
• 494bf50 Add golden tests
• 50a81cc Add goreleaser and ko build
• df88e4d Add gosec, move publish
• 4f7775d Add highlighting.
• d5f2e36 Add include-paths to build and lock
• 9285d3b Add initial CONTRIBUTING.md doc
• 6dd6085 Add installation instructions before quickstart
• 99a9f08 Add integration and final unit tests
• db9be70 Add java truststore support to additional certificates (chainguard-dev#1996)
• cb5bb22 Add json tags to ImageConfiguration types.
• 2be3903 Add limit readers for readers that consume data from external sources. (chainguard-dev#2042)
• 757f869 Add link to apko image.
• 4c5c1e0 Add link to docs.
• 4fe25b1 Add logic to publish attached SBOMs when writing images and indices.
• 06f4bff Add logic to read layer to sbom pkg
• 51e1a20 Add mac targets for goreleaser
• c6e2c4d Add make to devtools.
• 013be86 Add more spans around potentially slow ops
• 029e66c Add note about --repository-append
• 0d9c562 Add org.opencontainers.image.source image annotation
• b8fada4 Add otel spans
• 5efb1ca Add package version tag to list of tags
• fbb7bc7 Add packageVersionTag flag and refactor arguments to take in all options
• f3963b3 Add placeholder GenerateIndex to cyclonedx and idb generators
• dc64cf9 Add purl qualifier encoder unit test
• c50e401 Add purls to VCS source package
• 53957f9 Add support for SPDX SBOMs without shortcut fields. (chainguard-dev#1988)
• 033101d Add support for apko publish --local
• 238cd7b Add support for custom certificate packages (chainguard-dev#2105)
• 46ce0d8 Add support for extras in build-cpio (chainguard-dev#1394)
• 6f58188 Add support for gzip-compressed CPIO output (chainguard-dev#2253)
• a6802ac Add support for runtime-only repositories (chainguard-dev#1786)
• d6f3361 Add support for runtime-only repositories (chainguard-dev#1790)
• 0ffacea Add support for setting cmd.
• 62510f2 Add support for tagged repositories (chainguard-dev#1868)
• 6c23b26 Add support for the =~ constraint (chainguard-dev#1681)
• c5addee Add support.
• 3bd4d6a Add synthetic relationships from DocumentDescribes
• 037c2f6 Add task to support running apko builds via Tekton.
• 37eae4b Add test and trailing new line to apko.lock.json files.
• a898188 Add test of determinism (chainguard-dev#668)
• 75c793f Add testdata for apko on top of base image
• 8050913 Add the ability to specify additional certs to be added to the image (chainguard-dev#1977)
• ed51f76 Add the extra flags to build-minirootfs (chainguard-dev#1467)
• d190aee Add vscode and tmp directories to .gitignore
• 79e0d76 Add walk-dir option to PathMutation to traverse directory and modify perms
• 4601584 Added missing bits.
• 97e7e5e Added s6 link.
• 5d3b034 Address code review comments
• e46d36a Address go vulnerabilities
• 26a7b6a Address part of the comments from review round 1
• 0fc2ca4 Again we were not doing post-actions.
• b62f4d2 Align go version when linting code with all other actions (chainguard-dev#1998)
• e391590 Allow GitHub verified signatures in source policy (chainguard-dev#2332)
• b8c0...