4 — Dependency Management
Purpose
[stub: dependency-management]
Metadata
| Author | Amit Singh |
| Scope | ci-cd |
Local graph
Related notes
5 — GitHub Actions: Artifacts
Covers uploading and downloading build artifacts, retention policy tuning, handling large files, and publishing test/report artifacts from a workflow run.
1 — Artifact Management
Covers artifact repositories, OCI registries, language package repositories, and versioning schemes as the foundation of an artifact platform.
2 — Artifact Lifecycle
Walks an artifact's lifecycle from publishing through promotion, retention policy, and cleanup, and why each stage needs explicit platform support.
3 — Software Supply Chain
Covers build provenance, SBOMs, artifact signing, and verification as the software-supply-chain controls layered on top of artifact storage — see kubernetes/08-supply-chain-security for the Sigstore/cosign/SLSA implementation detail.