ar2

Package attest checks that a release carries the GitHub artifact attestations its definition says it does.

Package cli provides the command-line interface layer for ar2.

Package flag defines the flags shared by ar2's commands.

Package index implements the 'ar2 index' command.

Package initcmd implements the 'ar2 init' command.

Package run implements the 'ar2 run' command.

Package token builds the GitHub clients ar2 uses beside the ordinary one.

Package index maintains aqua-registry-g2's catalogue of the packages it holds.

Package initcmd implements the logic behind the 'ar2 init' command.

Package run implements the logic behind the 'ar2 run' command.

Package g2 talks to the aqua-registry-g2 repository.

Package generate builds aqua-registry-g2's registry.json from an upstream release.

Package github fetches data from GitHub's GraphQL API.

Package migrate converts aqua-registry's package definitions into the form aqua-registry-g2 keeps them in.

Package registry reads the aqua-registry (v1) registry.yaml.

Package sign checks that an asset carries the signatures its entry says it does.

Package state stores ar2's state in a container registry (GHCR).

Package summary writes to the GitHub Actions job summary.

Package verify extracts a generated asset to decide whether its registry.json can be merged without a human looking at it.