Apache Trusted Releases (ATR) documentation

Welcome to the documentation for the ATR platform.

NOTE: This documentation is a work in progress.

Table of contents

• 1. Introduction to ATR
  • 1.1. Getting started
  • 1.2. Project configuration
  • 1.3. Release manager setup
  • 1.4. Making releases with ATR
  • 1.5. Release catalog
• 2. User guide
  • 2.1. Terminology
  • 2.2. Signing artifacts
  • 2.3. Checks
  • 2.4. License checks
  • 2.5. Trusted Publishing
  • 2.6. SBOM workflows
  • 2.7. Staging and voting
  • 2.8. Promoting to release
• 3. Developer guide
  • 3.1. Overview of the code
  • 3.2. How to contribute
  • 3.3. Code conventions
  • 3.4. Code policies
  • 3.5. Build processes
  • 3.6. Running the server
  • 3.7. Running and creating tests
  • 3.8. Database
  • 3.9. Storage interface
  • 3.10. User interface
  • 3.11. Tasks
  • 3.12. Authentication security
  • 3.13. Sessions
  • 3.14. Authorization security
  • 3.15. Input validation
  • 3.16. Dependency updates
  • 3.17. TLS security configuration
  • 3.18. API documentation policy
  • 3.19. ASF modules
  • 3.20. Resource management
  • 3.21. SBOM architecture