Skip to content

Decionis CDI 0.1.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Aug 15:43
· 105 commits to master since this release
v0.1.2
aa6f097
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Artifacts

File What it is
decionis-cdi-0.1.2.tar.gz Deployable Next.js standalone bundle
decionis-cdi-0.1.2.cdx.json CycloneDX SBOM of the resolved production tree
decionis-cdi-0.1.2.sigstore.json Sigstore bundle for the provenance attestation

SHA-256 of the tarball:

00429837b25e2bb8802ff3d5cafa93d508937681874e97d7804103be53d1d65d

Verifying provenance

This build carries a signed SLSA provenance attestation. Verify it against
this repository before deploying:

gh attestation verify decionis-cdi-0.1.2.tar.gz --repo decionis/cdi

That confirms the artifact was produced by this workflow from this commit,
not rebuilt elsewhere.

The attestation is also attached here, so it can be verified from the
downloaded files alone without reaching GitHub's attestation API:

gh attestation verify decionis-cdi-0.1.2.tar.gz \
  --bundle decionis-cdi-0.1.2.sigstore.json --repo decionis/cdi

Licensing

Apache-2.0. Third-party components are inventoried in ThirdPartyLicenses.md;
the SBOM attached here is the deployment-accurate equivalent, generated on
the Linux build platform.

Assets 5
Loading