buildpacksio/lifecycle
A reference implementation of the Cloud Native Buildpacks specification.
5M+
This image is maintained by the Cloud Native Buildpacks project. The maintainers can be contacted via the Cloud Native Buildpacks Slack, or by opening an issue on the buildpacks/lifecycle
GitHub repo.
Supported tags are semver-versioned manifest lists - e.g., 0.12.0
or 0.12.0-rc.1
, pointing to one of the following os/architectures:
linux/amd64
linux/arm64
windows/amd64
Images are built in GitHub actions and signed with cosign
. To verify:
lifecycle-v<tag>-cosign.pub
on the releases pagecosign verify -key lifecycle-v<tag>-cosign.pub buildpacksio/lifecycle:<tag>
A CycloneDX SBOM is "attached" to the image and signed with cosign
. To verify:
lifecycle-v<tag>-cosign.pub
on the releases pagecosign version # must be at least 1.2.0
cosign verify -key cosign.pub -a tag=<tag> -attachment sbom buildpacksio/lifecycle:<tag>
cosign download sbom buildpacksio/lifecycle:<tag>
With pack:
pack build <target> --lifecycle-image buildpacksio/lifecycle:<tag>
With tekton:
LIFECYCLE_IMAGE
in taskrunSource for this page
docker pull buildpacksio/lifecycle