melange
melange copied to clipboard
chainguard-dev
build APKs from source code
This PR wires SBOM generation into the melange build process. It creates basic SBOMs for all apks built by melange. The SBOMs themselves only inventory the apk contents and write...
Per user feedback, some people have tried using other package manager instead of compiling from source, suggest updating the README with more clarity. Here is one suggestion (feel free to...
We set the epoch to 1970 so we can create reproducible builds, we should add some information to the FAQ for places where this might break something. For example, urlwatch...
I'm trying to build an apk with a client tool (pulsar-client), however, I would receive the following error when I run the code with ``` docker run --privileged --rm -v...
This PR introduces the first iteration of the melange development environment. It is based on the apko equivalent with two main differences: 1. It uses our apko image to build...
We need to build a minimal SBOM generator into melange. The initial POC of the generator should be able to take the information from the OpenSBOM parsers and render a...
We should add a top level `archs: []string` key similar to [apko](https://github.com/chainguard-dev/apko/blob/9358e7424e03e6991535f2efeb2cc6126b876017/pkg/build/types/types.go#L77) to avoid having to pass a flag.
add `pipeline list/get` command to CLI as per discussion here https://github.com/chainguard-dev/melange/issues/162#issuecomment-1307438447 ## list  ## get 
I was looking for a complete list of the action-names that we use in the `pipeline.uses` in melange files (For example: https://github.com/wolfi-dev/os/blob/main/bash.yaml#L42-L44), but didn't find any. Even the [docs](https://edu.chainguard.dev/open-source/melange/reference/#pipeline) has...
