Skip to content

Latest commit

 

History

History
39 lines (29 loc) · 1.69 KB

IMAGE.md

File metadata and controls

39 lines (29 loc) · 1.69 KB

Quick reference

This image is maintained by the Cloud Native Buildpacks project. The maintainers can be contacted via the Cloud Native Buildpacks Slack, or by opening an issue on the buildpacks/lifecycle GitHub repo.

Supported tags

Supported tags are semver-versioned manifest lists - e.g., 0.12.0 or 0.12.0-rc.1, pointing to one of the following os/architectures:

  • linux/amd64
  • linux/arm64
  • windows/amd64

About this image

Images are built in GitHub actions and signed with cosign. To verify:

  • Locate the public key lifecycle-v<tag>-cosign.pub on the releases page
  • Run:
cosign verify -key lifecycle-v<tag>-cosign.pub buildpacksio/lifecycle:<tag>

A CycloneDX SBOM is "attached" to the image and signed with cosign. To verify:

  • Locate the public key lifecycle-v<tag>-cosign.pub on the releases page
  • Run:
cosign version # must be at least 1.2.0
cosign verify -key cosign.pub -a tag=<tag> -attachment sbom buildpacksio/lifecycle:<tag>
cosign download sbom buildpacksio/lifecycle:<tag>

Using this image

With pack:

  • pack build <target> --lifecycle-image buildpacksio/lifecycle:<tag>

With tekton:

  • Provide as param LIFECYCLE_IMAGE in taskrun

Source for this page