fix(sbom, vex, build): keep artifacts with the image in every repository - #282

Merged

reyreavman merged 17 commits into

mainfrom

test/cleanup/final-repo-sbom-lifecycle

Sep 30, 2026

Commits on Sep 30, 2026

test(sbom, cleanup): cover SBOM retention across cleanup
reyreavman
committed
02fc019
test(sbom): cover dependent images and multi-platform placement with final repo
reyreavman
committed
a24f89b
test(sbom): make dependent final-repo entries falsify the base SBOM lookup
reyreavman
committed
68bf002
fix(sbom, vex, build): keep artifacts with the image in every repository
reyreavman
committed
3957ecf
fix(build, sbom): stop artifact propagation from failing builds and losing compose refs
reyreavman
committed
3fd21c3
test(sbom): rebuild the final repo specs on the current suite API
reyreavman
committed
e700893
test(build, oci, bundles): pin the artifact propagation contract in unit tests
reyreavman
committed
1898fa6
test(e2e): cover SBOM and VEX across every repository of a build
reyreavman
committed
9f58ed3
test(e2e): give the cleanup spec the git remote werf cleanup requires
reyreavman
committed
24db25a
test(build, oci, storage): pin the repair, digest-compare and cache paths of propagation
reyreavman
committed
8a7668f
chore(build, oci, storage): trim propagation comments
reyreavman
committed
03622ab
fix(sbom): stop a stage copy failing on a registry that needs credentials
reyreavman
committed
d826631
fix(sbom): carry artifacts of index children that declare no platform
reyreavman
committed
62d9472
fix(sbom): keep copying artifacts past an index child the source lost
reyreavman
committed
143799a
test(sbom): reuse the basic auth helper in the credentials spec
reyreavman
committed
263bc3a
fix(build, stages): stop a diagnostic lookup discarding a copied stage
reyreavman
committed
e337af6
test(sbom): build the final repo specs from the pinned builder image
reyreavman
committed
57454f7

Navigation Menu

fix(sbom, vex, build): keep artifacts with the image in every repository - #282

fix(sbom, vex, build): keep artifacts with the image in every repository#282
reyreavman merged 17 commits into
mainfrom
test/cleanup/final-repo-sbom-lifecycle

Commits on Sep 30, 2026

test(sbom, cleanup): cover SBOM retention across cleanup

test(sbom): cover dependent images and multi-platform placement with final repo

test(sbom): make dependent final-repo entries falsify the base SBOM lookup

fix(sbom, vex, build): keep artifacts with the image in every repository

fix(build, sbom): stop artifact propagation from failing builds and losing compose refs

test(sbom): rebuild the final repo specs on the current suite API

test(build, oci, bundles): pin the artifact propagation contract in unit tests

test(e2e): cover SBOM and VEX across every repository of a build

test(e2e): give the cleanup spec the git remote werf cleanup requires

test(build, oci, storage): pin the repair, digest-compare and cache paths of propagation

chore(build, oci, storage): trim propagation comments

fix(sbom): stop a stage copy failing on a registry that needs credentials

fix(sbom): carry artifacts of index children that declare no platform

fix(sbom): keep copying artifacts past an index child the source lost

test(sbom): reuse the basic auth helper in the credentials spec

fix(build, stages): stop a diagnostic lookup discarding a copied stage

test(sbom): build the final repo specs from the pinned builder image