Apache Trusted Releases (ATR) documentation

Welcome to the documentation for the ATR platform.

NOTE: This documentation is a work in progress.

Table of contents

• 1. Scope
• 2. Getting started
  • 2.1. Moving from the current process
• 3. Projects
  • 3.1. Project configuration
• 4. Release managers
  • 4.1. Signing artifacts
  • 4.2. Trusted Publishing
• 5. Making releases
  • 5.1. Compose phase
    • 5.1.1. Uploading files
    • 5.1.2. Checks
    • 5.1.3. License checks
    • 5.1.4. SBOM workflows
  • 5.2. Vote phase
    • 5.2.1. Staging and voting
  • 5.3. Finish phase
    • 5.3.1. Promoting to release
  • 5.4. Archiving and lifecycle
  • 5.5. Podling releases
• 6. Release catalog
• 7. Developer guide
  • 7.1. Overview of the code
  • 7.2. How to contribute
  • 7.3. Code conventions
  • 7.4. Code policies
  • 7.5. Build processes
  • 7.6. Running the server
  • 7.7. Running and creating tests
  • 7.8. Database
  • 7.9. Storage interface
  • 7.10. User interface
  • 7.11. Tasks
  • 7.12. Authentication security
  • 7.13. Sessions
  • 7.14. Authorization security
  • 7.15. Input validation
  • 7.16. Dependency updates
  • 7.17. TLS security configuration
  • 7.18. API documentation policy
  • 7.19. ASF modules
  • 7.20. Resource management
  • 7.21. SBOM architecture
  • 7.22. File handling