license switch agpl -> busl1, sprints work, new product advisories

devops/compose/docker-compose.rekor-v2.yaml

@@ -0,0 +1,34 @@
+# Rekor v2 tiles stack (MySQL-free).
+# Usage:
+#   docker compose -f devops/compose/docker-compose.dev.yaml \
+#     -f devops/compose/docker-compose.rekor-v2.yaml --profile sigstore up -d
+#
+# Notes:
+# - This overlay runs Rekor v2 (rekor-tiles) with a POSIX tiles volume.
+# - Pin the image digest via REKOR_TILES_IMAGE in your env file.
+# - Keep it on the internal stellaops network unless you explicitly need
+#   external access.
+
+x-rekor-v2-labels: &rekor-v2-labels
+  com.stellaops.profile: "sigstore"
+  com.stellaops.component: "rekor-v2"
+
+networks:
+  stellaops:
+    driver: bridge
+
+volumes:
+  rekor-tiles-data:
+
+services:
+  rekor-v2:
+    image: ${REKOR_TILES_IMAGE:-ghcr.io/sigstore/rekor-tiles:latest}
+    restart: unless-stopped
+    networks:
+      - stellaops
+    volumes:
+      - rekor-tiles-data:/var/lib/rekor-tiles
+    # Backend-specific flags/env are intentionally omitted here; follow the
+    # rekor-tiles documentation for POSIX backend defaults.
+    profiles: ["sigstore"]
+    labels: *rekor-v2-labels