Wrangle aims to provide both:
- Reusable workflows that other projects can easily call to achieve their goals.
- Minimal example workflows that other projects can adopt themselves to use Wrangle workflows and actions.
Wrangle also has it's own workflows that it uses to mange itself.
Wrangle's own workflows all have filenames that start with local_
.
- Provide example workflows.
- Provide reuable workflow for code change...
This reusable workflow allows callers to easily, build and publish their containers with a minimum of fuss.
It's goal is to follow all best practices for building and publishing container images, including:
- Publishing SLSA provenance.
- (TODO) Creating and publishing SBOMs.
- (TODO) Scanning for vulnerabilities.
- ...
This reusable workflow allows callers to easily scan their source changes.
It creates a summary of all the tool results in the GitHub Action.