up

2025-11-29 02:40:21 +02:00
parent 887b0a1c67
commit 7e7be4d2fd
54 changed files with 4907 additions and 3 deletions
--- a/ops/orchestrator/provenance.json
+++ b/ops/orchestrator/provenance.json
@@ -0,0 +1,106 @@
+{
+  "_type": "https://in-toto.io/Statement/v1",
+  "subject": [
+    {
+      "name": "registry.stella-ops.org/stellaops/orchestrator-web",
+      "digest": {
+        "sha256": "<IMAGE_DIGEST_WEB>"
+      }
+    },
+    {
+      "name": "registry.stella-ops.org/stellaops/orchestrator-worker",
+      "digest": {
+        "sha256": "<IMAGE_DIGEST_WORKER>"
+      }
+    }
+  ],
+  "predicateType": "https://slsa.dev/provenance/v1",
+  "predicate": {
+    "buildDefinition": {
+      "buildType": "https://stella-ops.org/OrchestratorBuild/v1",
+      "externalParameters": {
+        "source": {
+          "uri": "git+https://git.stella-ops.org/stella-ops/stellaops.git",
+          "digest": {
+            "gitCommit": "<GIT_SHA>"
+          }
+        },
+        "builderImage": {
+          "uri": "mcr.microsoft.com/dotnet/nightly/sdk:10.0",
+          "digest": {
+            "sha256": "<SDK_DIGEST>"
+          }
+        }
+      },
+      "internalParameters": {
+        "dockerfile": "ops/orchestrator/Dockerfile",
+        "targetStages": ["orchestrator-web", "orchestrator-worker"],
+        "buildArgs": {
+          "VERSION": "<VERSION>",
+          "CHANNEL": "<CHANNEL>",
+          "GIT_SHA": "<GIT_SHA>",
+          "SOURCE_DATE_EPOCH": "<SOURCE_DATE_EPOCH>"
+        }
+      },
+      "resolvedDependencies": [
+        {
+          "uri": "pkg:nuget/Microsoft.Extensions.Hosting@10.0.0",
+          "digest": {
+            "sha256": "<NUGET_HOSTING_DIGEST>"
+          }
+        },
+        {
+          "uri": "pkg:nuget/Npgsql.EntityFrameworkCore.PostgreSQL@10.0.0",
+          "digest": {
+            "sha256": "<NUGET_NPGSQL_DIGEST>"
+          }
+        },
+        {
+          "uri": "pkg:nuget/Cronos@0.10.0",
+          "digest": {
+            "sha256": "<NUGET_CRONOS_DIGEST>"
+          }
+        }
+      ]
+    },
+    "runDetails": {
+      "builder": {
+        "id": "https://git.stella-ops.org/stella-ops/stellaops/-/runners/1",
+        "builderDependencies": [
+          {
+            "uri": "docker.io/moby/buildkit:latest",
+            "digest": {
+              "sha256": "<BUILDKIT_DIGEST>"
+            }
+          }
+        ],
+        "version": {
+          "buildkit": "0.14.0"
+        }
+      },
+      "metadata": {
+        "invocationId": "<INVOCATION_ID>",
+        "startedOn": "<BUILD_START_TIME>",
+        "finishedOn": "<BUILD_END_TIME>"
+      },
+      "byproducts": [
+        {
+          "name": "sbom-web",
+          "uri": "registry.stella-ops.org/stellaops/orchestrator-web:sbom",
+          "mediaType": "application/spdx+json",
+          "digest": {
+            "sha256": "<SBOM_WEB_DIGEST>"
+          }
+        },
+        {
+          "name": "sbom-worker",
+          "uri": "registry.stella-ops.org/stellaops/orchestrator-worker:sbom",
+          "mediaType": "application/spdx+json",
+          "digest": {
+            "sha256": "<SBOM_WORKER_DIGEST>"
+          }
+        }
+      ]
+    }
+  }
+}