|
| 1 | +# Bazel Central Registry publication |
| 2 | + |
| 3 | +The [.github/workflows/publish-to-bcr.yml]( |
| 4 | +../.github/workflows/publish-to-bcr.yml) reusable GitHub workflow uses these |
| 5 | +configuration files for publishing Bazel modules to the [Bazel Central Registry |
| 6 | +(BCR)](https://registry.bazel.build/). This workflow also produces attestations |
| 7 | +required by the [Supply chain Levels for Software Artifacts |
| 8 | +(SLSA)](https://slsa.dev/) framework for secure supply chain provenance. |
| 9 | + |
| 10 | +[bazel-contrib/publish-to-bcr](https://github.com/bazel-contrib/publish-to-bcr) |
| 11 | +documentation: |
| 12 | + |
| 13 | +- [Publish to BCR workflow setup (from bazel-contrib/publish-to-bcr@fb1dc68)]( |
| 14 | + https://github.com/bazel-contrib/publish-to-bcr/blob/fb1dc6802c3c999e17ad7afce9474a90bd89e132/README.md#setup) |
| 15 | +- [.bcr/ templates]( |
| 16 | + https://github.com/bazel-contrib/publish-to-bcr/tree/main/templates) |
| 17 | +- [.github/workflows/publish.yaml reusable workflow]( |
| 18 | + https://github.com/bazel-contrib/publish-to-bcr/blob/main/.github/workflows/publish.yaml) |
| 19 | + |
| 20 | +Related documentation: |
| 21 | + |
| 22 | +- [bazelbuild/bazel-central-registry]( |
| 23 | + https://github.com/bazelbuild/bazel-central-registry) |
| 24 | +- [GitHub Actions](https://docs.github.com/actions) |
| 25 | +- [slsa-framework/slsa-verifier]( |
| 26 | + https://github.com/slsa-framework/slsa-verifier) |
| 27 | +- [Security for GitHub Actions]( |
| 28 | + https://docs.github.com/en/actions/security-for-github-actions) |
| 29 | +- [Security for GitHub Actions: Using artifact attestations]( |
| 30 | + https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations) |
| 31 | + |
| 32 | +--- |
| 33 | + |
| 34 | +Originally based on the examples from aspect-build/rules_lint#498 and |
| 35 | +aspect-build/rules_lint#501. See also: |
| 36 | + |
| 37 | +- bazelbuild/bazel-central-registry#4060 |
| 38 | +- slsa-framework/slsa-verifier#840 |
0 commit comments