{"id":19150145,"url":"https://github.com/carvel-dev/release-scripts","last_synced_at":"2026-03-10T17:07:10.474Z","repository":{"id":37441181,"uuid":"402831632","full_name":"carvel-dev/release-scripts","owner":"carvel-dev","description":"contains scripts for releasing carvel tools","archived":false,"fork":false,"pushed_at":"2025-05-16T18:04:07.000Z","size":261,"stargazers_count":4,"open_issues_count":6,"forks_count":3,"subscribers_count":10,"default_branch":"main","last_synced_at":"2025-05-16T19:22:18.032Z","etag":null,"topics":["carvel"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/carvel-dev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-09-03T16:23:04.000Z","updated_at":"2025-05-16T18:04:10.000Z","dependencies_parsed_at":"2024-02-06T10:45:08.240Z","dependency_job_id":"96d49ef2-62e4-42f9-a4a3-bcc5d5cb5427","html_url":"https://github.com/carvel-dev/release-scripts","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/carvel-dev/release-scripts","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/carvel-dev%2Frelease-scripts","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/carvel-dev%2Frelease-scripts/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/carvel-dev%2Frelease-scripts/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/carvel-dev%2Frelease-scripts/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/carvel-dev","download_url":"https://codeload.github.com/carvel-dev/release-scripts/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/carvel-dev%2Frelease-scripts/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":260844883,"owners_count":23071654,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["carvel"],"created_at":"2024-11-09T08:10:49.109Z","updated_at":"2026-03-10T17:07:05.428Z","avatar_url":"https://github.com/carvel-dev.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# release-scripts\n\n## Overview\n\nrelease-scripts contains scripting assets related to distributing carvel's binaries to the various distribution channels. i.e. Homebrew, carvel.dev install.sh script etc.\n\n- .github/ contains github action workflow files\n- ./scripts/ contains scripts used by the github action in this repo\n- releases.yaml contains all the tools shasums for the latest version (used on the generation of the install.sh)\n\n## How can a tool start using this release process:\n1. The following step need to be added to the current release-published.yml of the tools repository\n   \nfor e.g.\n```\n- run: |\n  curl -X POST https://api.github.com/repos/carvel-dev/release-scripts/dispatches \\\n  -H 'Accept: application/vnd.github.everest-preview+json' \\\n  -u ${{ secrets.ACCESS_TOKEN }} \\\n  --data '{\"event_type\": \"\u003cYourToolName\u003e_released\", \"client_payload\": { \"tagName\": \"${{ github.event.release.tag_name }}\", \"repo\": \"${{ github.repository }}\", \"toolName\": \"\u003cYourToolName\u003e\" }}'\n```\nNeed to change in the above:\n  - `ACCESS_TOKEN` this secret needs to be one the format username@accessToken and the user needs to have access to execute workflows in this repository\n  - `\u003cYourToolName\u003e` should be replace with the tool name\n\n## How can a new carvel tool start using this release process:\n1. Enable in the tool the published workflow and add the [step in this question](#how-can-a-tool-start-using-this-release-process)\n2. Edit `releases.yaml` and add the following entry to it:\n\n```yaml\n- product: YourProductName\n```\n3. Release the new tool on the tools Github Repository and the automation will start running\n\n**Note:** This automated release process will make the tool installable via installation script from the website\n\n## Start using the trivy scanning for CLI tools\n\n### Pre-requirements\n- The repository has a `./hack/build.sh` script that will build the binaries\n\n### Steps\n1. Create a secret named `SLACK_WEBHOOK_URL` that points to a slack webhook or slack workflow.\n2. Create a new workflow that looks like this:\n```yaml\nname: Trivy CVE Dependency Scanner\n\non:\n  schedule:\n    - cron: '0 0 * * *'\n\njobs:\n  trivy-scan:\n    uses: carvel-dev/release-scripts/.github/workflows/trivy-scan.yml@main\n    with:\n      repo: carvel-dev/imgpkg\n      tool: imgpkg\n      goVersion: 1.17.0\n    secrets:\n      githubToken: ${{ secrets.GITHUB_TOKEN }}\n      slackWebhookURL: ${{ secrets.SLACK_WEBHOOK_URL }}\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcarvel-dev%2Frelease-scripts","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcarvel-dev%2Frelease-scripts","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcarvel-dev%2Frelease-scripts/lists"}