Skip to content

Releases: treetop-policy-engine/treetop-bundle-action

Release list

v2.0.0

v2.0.0 Latest
Latest

Choose a tag to compare

View all tags
@terjekv terjekv released this 06 Sep 16:37
v2.0.0
This tag was signed with the committer’s verified signature. The key has expired.
terjekv Terje Kvernes
GPG key ID: F369EBACAF3BE717
Expired
Verified
Learn about vigilant mode.
a2d4ad3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Bundle Action v2 uses Bundle CLI 0.1.0 and the declared label-target contract.

Breaking migration:

  • Replace rule-level kind and output with target: {resource_type, attribute}. Each exact resource-type/attribute tuple has one owner.
  • Update bundle/module manifests to format 2, rebuild archives, and re-sign them. Format 1 and old label syntax are rejected.
  • Checksum manifests require exact flat asset names; path-prefixed aliases are rejected.
  • Constrain resource types before trusting derived labels, because sanitization follows the declared scope.

The action downloads and checksum-verifies published CLI 0.1.0 assets on Linux x86-64/ARM64, macOS ARM64, and Windows x86-64. Native validation, source-archive installation, published downloads, and cache reuse pass on all four platforms.

Use @v2.0.0 for this version or pin its reviewed full commit SHA in protected workflows. The @v2 major tag points to this release. See MIGRATION.md for the complete migration.

Assets 2
Loading

Treetop Bundle Action v1.0.0

Treetop Bundle Action v1.0.0

Choose a tag to compare

View all tags
@terjekv terjekv released this 16 Aug 19:56
v1.0.0
This tag was signed with the committer’s verified signature. The key has expired.
terjekv Terje Kvernes
GPG key ID: F369EBACAF3BE717
Expired
Verified
Learn about vigilant mode.
e759357
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Treetop Bundle Action v1.0.0

Validate Cedar permissions, schemas, labels, module manifests, and complete Treetop bundles directly in GitHub Actions.

Highlights

  • Checks bundles, modules, and standalone policies with GitHub annotations and job summaries.
  • Optionally builds deterministic unsigned bundle archives for later deployment jobs.
  • Downloads an exact treetop-bundle release, enforces a 128 MiB limit, and verifies the archive against SHA256SUMS before execution.
  • Supports Linux x86-64, Linux ARM64, Apple-silicon macOS, and Windows x86-64 runners.
  • Defaults to treetop-bundle 0.0.4.

Usage

- uses: treetop-policy-engine/treetop-bundle-action@v1
  with:
    manifest: treetop-bundle.toml
    deny-warnings: true

For an immutable workflow reference, pin the action to commit e7593574b96b33d6aea9b52fd5d0005afa0f4d64.

This release passed unit and metadata checks plus native and real-release-download scenarios on all four supported runner platforms.

Loading