1 — Artifact Management
Purpose
[stub: artifact-management]
Metadata
| Author | Amit Singh |
| Scope | ci-cd |
Local graph
Related notes
5 — GitHub Actions: Artifacts
Covers uploading and downloading build artifacts, retention policy tuning, handling large files, and publishing test/report artifacts from a workflow run.
2 — Artifact Lifecycle
Walks an artifact's lifecycle from publishing through promotion, retention policy, and cleanup, and why each stage needs explicit platform support.
3 — Software Supply Chain
Covers build provenance, SBOMs, artifact signing, and verification as the software-supply-chain controls layered on top of artifact storage — see kubernetes/08-supply-chain-security for the Sigstore/cosign/SLSA implementation detail.
4 — Dependency Management
Covers internal library management, third-party dependency handling, repository mirroring, and dependency governance policy at platform scale.