Skip to content

Commit c41acbc

Browse files
authored
Merge branch 'stackabletech:main' into CI-Hardening
2 parents 2d781ac + d3a5897 commit c41acbc

4 files changed

Lines changed: 1 addition & 64 deletions

File tree

modules/concepts/pages/artifact-registries/container-images.adoc

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -32,9 +32,6 @@ Since Stackable release 24.3, {stackable-sboms}[SBOMs{external-link-icon}^] for
3232
Since release 26.7, SBOMs are available in both the CycloneDX and SPDX formats.
3333
Have a look at the xref:guides:viewing-and-verifying-sboms.adoc[] guide to learn how to use SBOMs.
3434

35-
Additionally, since release 26.7, all images carry SLSA build provenance attestations at SLSA Level 3.
36-
See the xref:guides:verifying-image-provenance.adoc[] guide for details.
37-
3835
[#multi-platform-support]
3936
== Multi-platform support
4037

modules/guides/nav.adoc

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,5 @@
55
** xref:running-stackable-in-an-airgapped-environment.adoc[]
66
** xref:viewing-and-verifying-sboms.adoc[]
77
** xref:enabling-verification-of-image-signatures.adoc[]
8-
** xref:verifying-image-provenance.adoc[]
98
** xref:kubernetes-cluster-domain.adoc[]
109
** xref:deploy-operators-and-csi-drivers-separately.adoc[]

modules/guides/pages/verifying-image-provenance.adoc

Lines changed: 0 additions & 59 deletions
This file was deleted.

modules/guides/pages/viewing-and-verifying-sboms.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ With release 24.3 of SDP, we started providing SBOMs (Software Bill of Materials
66

77
NOTE: Starting with SDP 25.7, we now embed the exact source code used to build each product directly into our images. You can find the source code in files ending with `-src.tar.gz` within the `/stackable` directory of each image.
88

9-
Starting with SDP 26.7, every image additionally carries an SBOM in the https://spdx.dev/[SPDX{external-link-icon}^] format (SPDX JSON), attested alongside the CycloneDX SBOM. The SPDX SBOM is derived from the CycloneDX SBOM, so both formats describe the same component inventory. Container images also come with xref:guides:verifying-image-provenance.adoc[SLSA build provenance] since SDP 26.7.
9+
Starting with SDP 26.7, every image additionally carries an SBOM in the https://spdx.dev/[SPDX{external-link-icon}^] format (SPDX JSON), attested alongside the CycloneDX SBOM. The SPDX SBOM is derived from the CycloneDX SBOM, so both formats describe the same component inventory.
1010

1111
You can browse through our SBOMs at https://sboms.stackable.tech/[https://sboms.stackable.tech/{external-link-icon}^].
1212

0 commit comments

Comments
 (0)