cncf-release-checklist

To verify a CNCF project release, execute the checklist to confirm all multi-arch builds, container image creation, signing, and SBOM generation steps are consistently completed and validated before tagging.

Supply-chain security during a container image release requires generating SBOMs, signing build artifacts, and verifying reproducible builds to ensure all dependencies and binaries are consistently managed.

To publish binaries and update Homebrew packaging, follow the workflow guidance checklist to cut releases, update the Homebrew formula, and verify that all multi-arch binaries have been generated.

Yes, the release checklist supports multi-arch builds and SBOM generation by executing and verifying that all necessary build artifacts have been generated, signed, and packaged correctly.

Use a release checklist for publishing CNCF project artifacts when you need to cut a new release and must confirm that signing, multi-arch binaries, and container images satisfy reproducible build requirements.