Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -32,9 +32,6 @@ Since Stackable release 24.3, {stackable-sboms}[SBOMs{external-link-icon}^] for
Since release 26.7, SBOMs are available in both the CycloneDX and SPDX formats.
Have a look at the xref:guides:viewing-and-verifying-sboms.adoc[] guide to learn how to use SBOMs.

Additionally, since release 26.7, all images carry SLSA build provenance attestations at SLSA Level 3.
See the xref:guides:verifying-image-provenance.adoc[] guide for details.

[#multi-platform-support]
== Multi-platform support

Expand Down
1 change: 0 additions & 1 deletion modules/guides/nav.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,5 @@
** xref:running-stackable-in-an-airgapped-environment.adoc[]
** xref:viewing-and-verifying-sboms.adoc[]
** xref:enabling-verification-of-image-signatures.adoc[]
** xref:verifying-image-provenance.adoc[]
** xref:kubernetes-cluster-domain.adoc[]
** xref:deploy-operators-and-csi-drivers-separately.adoc[]
59 changes: 0 additions & 59 deletions modules/guides/pages/verifying-image-provenance.adoc

This file was deleted.

2 changes: 1 addition & 1 deletion modules/guides/pages/viewing-and-verifying-sboms.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ With release 24.3 of SDP, we started providing SBOMs (Software Bill of Materials

NOTE: Starting with SDP 25.7, we now embed the exact source code used to build each product directly into our images. You can find the source code in files ending with `-src.tar.gz` within the `/stackable` directory of each image.

Starting with SDP 26.7, every image additionally carries an SBOM in the https://spdx.dev/[SPDX{external-link-icon}^] format (SPDX JSON), attested alongside the CycloneDX SBOM. The SPDX SBOM is derived from the CycloneDX SBOM, so both formats describe the same component inventory. Container images also come with xref:guides:verifying-image-provenance.adoc[SLSA build provenance] since SDP 26.7.
Starting with SDP 26.7, every image additionally carries an SBOM in the https://spdx.dev/[SPDX{external-link-icon}^] format (SPDX JSON), attested alongside the CycloneDX SBOM. The SPDX SBOM is derived from the CycloneDX SBOM, so both formats describe the same component inventory.

You can browse through our SBOMs at https://sboms.stackable.tech/[https://sboms.stackable.tech/{external-link-icon}^].

Expand Down
Loading