Directories
¶
| Path | Synopsis |
|---|---|
|
Package atomicfile provides atomic file write operations.
|
Package atomicfile provides atomic file write operations. |
|
Package auditionproof is the evidence model for audition: audition produces proof results, later phases consume them.
|
Package auditionproof is the evidence model for audition: audition produces proof results, later phases consume them. |
|
Package badge provides a configurable SVG badge engine with dynamic font measurement.
|
Package badge provides a configurable SVG badge engine with dynamic font measurement. |
|
contributors
Package contributors holds the build-strategy contributors that supply rows into a perform run's domains.
|
Package contributors holds the build-strategy contributors that supply rows into a perform run's domains. |
|
domains
Package domains makes a perform run a single domain-ordered narrative.
|
Package domains makes a perform run a single domain-ordered narrative. |
|
engines
Package engines contains all built-in build engines.
|
Package engines contains all built-in build engines. |
|
Package cas is StageFreight's content-addressed artifact store: it retains the exact OCI layout bytes produced by a single perform-stage build so that review and publish operate on those bytes rather than re-deriving the image.
|
Package cas is StageFreight's content-addressed artifact store: it retains the exact OCI layout bytes produced by a single perform-stage build so that review and publish operate on those bytes rather than re-deriving the image. |
|
render/azuredevops
Package azuredevops renders a StageFreight pipeline to an Azure DevOps pipeline.
|
Package azuredevops renders a StageFreight pipeline to an Azure DevOps pipeline. |
|
render/forgejo
Package forgejo renders a StageFreight pipeline to a Forgejo Actions workflow.
|
Package forgejo renders a StageFreight pipeline to a Forgejo Actions workflow. |
|
render/gitea
Package gitea renders a StageFreight pipeline to a Gitea Actions workflow.
|
Package gitea renders a StageFreight pipeline to a Gitea Actions workflow. |
|
render/github
Package github renders a StageFreight pipeline to a GitHub Actions workflow.
|
Package github renders a StageFreight pipeline to a GitHub Actions workflow. |
|
render/gitlab
Package gitlab lowers a forge-neutral model.Pipeline to GitLab CI YAML.
|
Package gitlab lowers a forge-neutral model.Pipeline to GitLab CI YAML. |
|
render/internal/actions
Package actions is a private serialization backend: it writes a forge-neutral model.Pipeline out in the GitHub Actions workflow wire format.
|
Package actions is a private serialization backend: it writes a forge-neutral model.Pipeline out in the GitHub Actions workflow wire format. |
|
render/internal/azurepipelines
Package azurepipelines is a private serialization backend: it writes a forge-neutral model.Pipeline out as an Azure DevOps pipeline (azure-pipelines.yml).
|
Package azurepipelines is a private serialization backend: it writes a forge-neutral model.Pipeline out as an Azure DevOps pipeline (azure-pipelines.yml). |
|
render/model
Package model defines the forge-neutral CI pipeline types.
|
Package model defines the forge-neutral CI pipeline types. |
|
Package component provides GitLab CI component spec parsing and documentation generation for the `stagefreight component` command family.
|
Package component provides GitLab CI component spec parsing and documentation generation for the `stagefreight component` command family. |
|
Package credentials provides centralized registry credential resolution.
|
Package credentials provides centralized registry credential resolution. |
|
Package disk is a storage-attribution diagnostic for StageFreight: it answers "what operational entity (project / registry / runtime) is consuming disk today" rather than "what folders exist".
|
Package disk is a storage-attribution diagnostic for StageFreight: it answers "what operational entity (project / registry / runtime) is consuming disk today" rather than "what folders exist". |
|
Package docker provides Docker lifecycle orchestration for StageFreight.
|
Package docker provides Docker lifecycle orchestration for StageFreight. |
|
Package fonts provides embedded TTF fonts shared across StageFreight packages.
|
Package fonts provides embedded TTF fonts shared across StageFreight packages. |
|
Package forge provides a platform-agnostic abstraction over git forges (GitLab, GitHub, Gitea/Forgejo).
|
Package forge provides a platform-agnostic abstraction over git forges (GitLab, GitHub, Gitea/Forgejo). |
|
Package gitops provides Flux CD graph discovery, change impact analysis, and reconciliation coordination.
|
Package gitops provides Flux CD graph discovery, change impact analysis, and reconciliation coordination. |
|
Package gitplan is StageFreight's planner for shared-history git operations.
|
Package gitplan is StageFreight's planner for shared-history git operations. |
|
Package gitver provides git-based version detection and tag template resolution.
|
Package gitver provides git-based version detection and tag template resolution. |
|
Package governance re-exports preset resolution from src/config.
|
Package governance re-exports preset resolution from src/config. |
|
Package k8s provides Kubernetes cluster discovery for the k8s-inventory narrator module.
|
Package k8s provides Kubernetes cluster discovery for the k8s-inventory narrator module. |
|
modules
Package modules contains all built-in lint modules.
|
Package modules contains all built-in lint modules. |
|
modules/freshness
Package freshness checks for outdated dependencies across ecosystems: Dockerfile base images, pinned tool versions, Go modules, Rust crates, npm packages, Alpine APK, Debian/Ubuntu APT, and pip packages.
|
Package freshness checks for outdated dependencies across ecosystems: Dockerfile base images, pinned tool versions, Go modules, Rust crates, npm packages, Alpine APK, Debian/Ubuntu APT, and pip packages. |
|
modules/vulnerabilities
Package vulnerabilities is the single lint module that reports known vulnerabilities affecting a project's dependencies.
|
Package vulnerabilities is the single lint module that reports known vulnerabilities affecting a project's dependencies. |
|
Package manifest defines the StageFreight manifest schema and deterministic JSON serialization.
|
Package manifest defines the StageFreight manifest schema and deterministic JSON serialization. |
|
Package narrator composes modules into managed README sections.
|
Package narrator composes modules into managed README sections. |
|
layout
Package layout provides terminal-aware text layout primitives.
|
Package layout provides terminal-aware text layout primitives. |
|
termutil
Package termutil detects terminal constraints for output layout.
|
Package termutil detects terminal constraints for output layout. |
|
Package pages holds the static-site deploy providers for the `kind: pages` target.
|
Package pages holds the static-site deploy providers for the `kind: pages` target. |
|
Package paths is the single source of truth for where StageFreight writes on disk.
|
Package paths is the single source of truth for where StageFreight writes on disk. |
|
Package postbuild contains post-build hook adapters that coordinate between the pipeline framework and external system packages (registry, badge, etc.).
|
Package postbuild contains post-build hook adapters that coordinate between the pipeline framework and external system packages (registry, badge, etc.). |
|
Package promote distributes a content-store OCI layout to a registry WITHOUT rebuilding and WITHOUT a daemon round-trip, preserving the exact index digest that perform recorded and review verified.
|
Package promote distributes a content-store OCI layout to a registry WITHOUT rebuilding and WITHOUT a daemon round-trip, preserving the exact index digest that perform recorded and review verified. |
|
Package props implements the composable presentation subsystem.
|
Package props implements the composable presentation subsystem. |
|
Package provision is StageFreight's shared environment-realization surface: the single, honest way every subsystem communicates what tools and native capabilities it pulled in, where from, and how (if at all) it verified them.
|
Package provision is StageFreight's shared environment-realization surface: the single, honest way every subsystem communicates what tools and native capabilities it pulled in, where from, and how (if at all) it verified them. |
|
Package registry provides a platform-agnostic abstraction over container registries (Docker Hub, GitLab, GHCR, Quay, JFrog, Harbor, Gitea).
|
Package registry provides a platform-agnostic abstraction over container registries (Docker Hub, GitLab, GHCR, Quay, JFrog, Harbor, Gitea). |
|
Package release handles release notes generation, release creation, and cross-platform sync.
|
Package release handles release notes generation, release creation, and cross-platform sync. |
|
trustdisclosure
Package trustdisclosure interprets a publish ResultsManifest into a STRUCTURED trust disclosure — typed facts, never pre-baked prose.
|
Package trustdisclosure interprets a publish ResultsManifest into a STRUCTURED trust disclosure — typed facts, never pre-baked prose. |
|
Package retention implements a restic-style retention engine that works with any named+timestamped items (registry tags, forge releases, etc).
|
Package retention implements a restic-style retention engine that works with any named+timestamped items (registry tags, forge releases, etc). |
|
Package runner implements execution substrate introspection.
|
Package runner implements execution substrate introspection. |
|
Package security provides vulnerability scanning and SBOM generation.
|
Package security provides vulnerability scanning and SBOM generation. |
|
Package sign is the pure trust-contract core of StageFreight signing.
|
Package sign is the pure trust-contract core of StageFreight signing. |
|
anchordoc
Package anchordoc generates the canonical signing-anchor documentation — a managed, idempotent section embedded in an operator-owned file (conventionally SECURITY.md).
|
Package anchordoc generates the canonical signing-anchor documentation — a managed, idempotent section embedded in an operator-owned file (conventionally SECURITY.md). |
|
autosign
Package autosign resolves the effective signer for a target, applying Tier-0 auto-provision ONLY when the operator has consented (enabled && auto_provision && a configured state_dir).
|
Package autosign resolves the effective signer for a target, applying Tier-0 auto-provision ONLY when the operator has consented (enabled && auto_provision && a configured state_dir). |
|
cosign
Package cosign is the ONLY cosign-aware code in StageFreight signing — the edge renderer that satisfies a sign.SignPlan (a declarative trust contract) against a declared capability Env, emitting a concrete cosign invocation.
|
Package cosign is the ONLY cosign-aware code in StageFreight signing — the edge renderer that satisfies a sign.SignPlan (a declarative trust contract) against a declared capability Env, emitting a concrete cosign invocation. |
|
provision
Package provision manages StageFreight's auto-provisioned Tier-0 signing identity — a persistent software cosign keypair living in the operator's signing state dir.
|
Package provision manages StageFreight's auto-provisioned Tier-0 signing identity — a persistent software cosign keypair living in the operator's signing state dir. |
|
Package ssh provides SSH authentication and host key resolution for all SSH transports in StageFreight.
|
Package ssh provides SSH authentication and host key resolution for all SSH transports in StageFreight. |
|
Package substrate realizes the native BUILD ENVIRONMENT a build needs — C toolchains, build helpers, sysroots — as a peer of the toolchain layer, under the same ownership discipline: inferred (engines emit CAPABILITIES, never packages), realized by a backend (which alone knows distro/package semantics), cached on the persistent mount, and recorded as explicit provenance.
|
Package substrate realizes the native BUILD ENVIRONMENT a build needs — C toolchains, build helpers, sysroots — as a peer of the toolchain layer, under the same ownership discipline: inferred (engines emit CAPABILITIES, never packages), realized by a backend (which alone knows distro/package semantics), cached on the persistent mount, and recorded as explicit provenance. |
|
analysis
Package analysis is the supply-chain vulnerability analysis layer.
|
Package analysis is the supply-chain vulnerability analysis layer. |
|
analysis/evidence
Package evidence is StageFreight's security-ENRICHMENT layer.
|
Package evidence is StageFreight's security-ENRICHMENT layer. |
|
Package sync implements forge accessory synchronization.
|
Package sync implements forge accessory synchronization. |
|
Package test is the StageFreight test subsystem: it resolves declared/synthesized test suites into native commands, runs them, and models the verdict.
|
Package test is the StageFreight test subsystem: it resolves declared/synthesized test suites into native commands, runs them, and models the verdict. |
|
Package toolchain provides a governed execution substrate for external tools.
|
Package toolchain provides a governed execution substrate for external tools. |
|
Package trace implements the truth emission model for StageFreight.
|
Package trace implements the truth emission model for StageFreight. |
|
vulnerability
|
|
|
severity
Package severity is the vulnerability domain's severity vocabulary: normalization, ranking, and ordering of the well-known labels (critical, high, medium, low, unknown).
|
Package severity is the vulnerability domain's severity vocabulary: normalization, ranking, and ordering of the well-known labels (critical, high, medium, low, unknown). |
|
Package workspace owns the .stagefreight/ generated namespace and keeps it hygienic.
|
Package workspace owns the .stagefreight/ generated namespace and keeps it hygienic. |
Click to show internal directories.
Click to hide internal directories.