write introduction

Signed-off-by: Trishank K Kuppusamy <[email protected]>

overview and table of contents

Signed-off-by: Trishank K Kuppusamy <[email protected]>

move some text around

Signed-off-by: Trishank K Kuppusamy <[email protected]>

better TOC; abstract; introduction

Signed-off-by: Trishank K Kuppusamy <[email protected]>

fix small grammar issue

Signed-off-by: Trishank K Kuppusamy <[email protected]>

introduce repos

Signed-off-by: Trishank K Kuppusamy <[email protected]>

add some TODOs about image repos

Signed-off-by: Trishank K Kuppusamy <[email protected]>

some clarifications(?)

Signed-off-by: Trishank K Kuppusamy <[email protected]>

break things up a bit

Signed-off-by: Trishank K Kuppusamy <[email protected]>

simplifying assumption: one image registry <=> one image repo

Signed-off-by: Trishank K Kuppusamy <[email protected]>

minor language edits

Signed-off-by: Trishank K Kuppusamy <[email protected]>

WIP on traditional img repos

Signed-off-by: Trishank K Kuppusamy <[email protected]>

WIP

Signed-off-by: Trishank K Kuppusamy <[email protected]>

expand ToC

Signed-off-by: Trishank K Kuppusamy <[email protected]>

defer community image repos

Signed-off-by: Trishank K Kuppusamy <[email protected]>

some minor fixes

Signed-off-by: Trishank K Kuppusamy <[email protected]>

introduce idea of gradual security

Signed-off-by: Trishank K Kuppusamy <[email protected]>

add section on gradual security

Signed-off-by: Trishank K Kuppusamy <[email protected]>

WIP

Signed-off-by: Trishank K Kuppusamy <[email protected]>

end here today

Signed-off-by: Trishank K Kuppusamy <[email protected]>

separate security analysis

Signed-off-by: Trishank K Kuppusamy <[email protected]>

move things around a bit

Signed-off-by: Trishank K Kuppusamy <[email protected]>

wrap up traditional img repos

Signed-off-by: Trishank K Kuppusamy <[email protected]>

add a sentence

Signed-off-by: Trishank K Kuppusamy <[email protected]>

mention PEPs 458 & 480 for community img repos

Signed-off-by: Trishank K Kuppusamy <[email protected]>

add a reference

Signed-off-by: Trishank K Kuppusamy <[email protected]>

draft of signing workflows

Signed-off-by: Trishank K Kuppusamy <[email protected]>

minor language edits

Signed-off-by: Trishank K Kuppusamy <[email protected]>

defer a few things

Signed-off-by: Trishank K Kuppusamy <[email protected]>

one more thing to defer for now

Signed-off-by: Trishank K Kuppusamy <[email protected]>

add some important considerations

Signed-off-by: Trishank K Kuppusamy <[email protected]>

minor edits

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Clarify why bundle.json is mounted in the invocation image (#228)

* clarify why bundle.json is mounted in the invocation image

Signed-off-by: Trishank K Kuppusamy <[email protected]>

* remove link

Signed-off-by: Trishank K Kuppusamy <[email protected]>

add a CNAB Registry icon (#232)

![cnab-registry](https://user-images.githubusercontent.com/686194/61753147-2b387a80-ad63-11e9-8a63-f250bcdf06b0.png)

Adds a registry icon, which is a variant of the main CNAB logo.

Signed-off-by: Trishank K Kuppusamy <[email protected]>

add a CNAB Security icon (#231)

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Remove the `immutable` attribute from parameters

This removes the `immutable` attribute from parameters per Issue #229

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Remove wording about immutable parameters

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Remove fields from outputs

Signed-off-by: Radu M <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

fix(claim.schema.json): s/underay/underway

Signed-off-by: Trishank K Kuppusamy <[email protected]>

fix(claim.schema.json): s/descripton/description

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Adds information about the Specification Freeze (#238)

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Update 103-bundle-runtime.md

s/Instance/Installation

Signed-off-by: Trishank K Kuppusamy <[email protected]>

massively simplify 300

Signed-off-by: Trishank K Kuppusamy <[email protected]>

terminology updates

Signed-off-by: Trishank K Kuppusamy <[email protected]>

more fine-grained security levels

Signed-off-by: Trishank K Kuppusamy <[email protected]>

KISS: break up metadata repositories, signing, verification

Signed-off-by: Trishank K Kuppusamy <[email protected]>

fix(400-claims.md): add mention of the custom field in a claim (#255)

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Update README.md (#260)

Remove the OCI mailing list info

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Update definitions schema to use a bespoke JSON Schema Version (#257)

* Update definitions schema to use integer, remove `number` as a type

Fixes #256

* Incorporate suggestion

Signed-off-by: Trishank K Kuppusamy <[email protected]>

fix: corrected a typo

Signed-off-by: Matt Butcher <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

clearify wording on writeOnly

Signed-off-by: Matt Butcher <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

clarify what to do when multiple invocation images match a pattern

Signed-off-by: Matt Butcher <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

fix: clarify the wording on stateless actions

Signed-off-by: Matt Butcher <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

Add clarification to `readOnly` definition

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Clarify parameters are encoded as json strings

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Clarify defaults for outputs and parameters (#270)

* Clarify how required and default interact

* Clarify output defaults

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Removed extra were

Signed-off-by: Trishank K Kuppusamy <[email protected]>

explain how claims treat parameters and credentials differently, and why (#267)

Signed-off-by: Matt Butcher <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

Update contentDigest wording to clarify behavior (#261)

* Update contentDigest wording to clarify behavior

Fixes: #254

* Update markup for contentDigest

* Update comments

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Clarify upgrade version handling responsibility

Signed-off-by: Christopher Crone <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

Improve wording

Signed-off-by: Christopher Crone <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

Fix OWF Contributor License Agreement link (#276)

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Clarify failed action handling (#274)

Signed-off-by: Christopher Crone <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

CNAB Core 1.0 GA

This commit marks the Working Group Acceptance (GA) of the CNAB Core 1.0 specification.

Signed-off-by: Matt Butcher <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

Final Approval for CNAB Core 1.0 Specification

This commit indicates that the CNAB specification is now a published final version.

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Update README.md

Co-Authored-By: Carolyn Van Slyck <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

Update 100-CNAB.md

Co-Authored-By: Carolyn Van Slyck <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

Add mailing list (#283)

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Bump bundle schemaVersion to 1.0.0 (#278)

Signed-off-by: Christopher Crone <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

Update 103-bundle-runtime.md

fixing the misleading description in the example of setting parameter value in file.

Signed-off-by: Trishank K Kuppusamy <[email protected]>

Define host environment

Signed-off-by: Matt Butcher <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

Make status.json a CNAB Output

Signed-off-by: Trishank K Kuppusamy <[email protected]>

fix: remove an unnecessary section

Signed-off-by: Matt Butcher <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

add bundleReference to the claim specification

Signed-off-by: Matt Butcher <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

Update 400-claims.md

Co-Authored-By: Glyn Normington <[email protected]>
Signed-off-by: Trishank K Kuppusamy <[email protected]>

address @vdice feedback

Signed-off-by: Trishank K Kuppusamy <[email protected]>

remove .gitignore

Signed-off-by: Trishank K Kuppusamy <[email protected]>

fix links per @chris-crone feedback

Signed-off-by: Trishank K Kuppusamy <[email protected]>