Reference material and conventions for the cssc-framework repository.
- Workflow actions and terminology — the composite-action
catalogue under
.github/actions/, the standard terminology (verbs and nouns), and how the reusable workflows compose the actions. - Image annotations — OCI manifest annotations carried by the CSSC Dashboard images.
- Image attestations — SBOM and provenance attestations published as OCI 1.1 referrers on the CSSC Dashboard images.
- Acquisition provenance — the OCI 1.1 referrer attached to mirrored images recording where they were acquired from.
- Mirror history — the per-repo OCI artifact recording the source digests a mirror has already synchronized (so promoted-and-deleted digests are not re-mirrored).