{"id":38305228,"url":"https://github.com/juburr/melange-orb","last_synced_at":"2026-01-17T02:26:43.884Z","repository":{"id":253167328,"uuid":"842575909","full_name":"juburr/melange-orb","owner":"juburr","description":"A simple CircleCI orb to install Chainguard's melange tool and use it to build packages for distroless container images. ","archived":false,"fork":false,"pushed_at":"2025-08-24T13:33:00.000Z","size":368,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-08-24T18:26:32.609Z","etag":null,"topics":["apk","chainguard","circleci","circleci-orbs","container-builder","containers","melange","package-builder"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/juburr.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-08-14T16:20:40.000Z","updated_at":"2025-08-24T13:33:01.000Z","dependencies_parsed_at":"2024-09-12T04:59:57.102Z","dependency_job_id":"1bf94ddf-7165-4a77-a6d4-d2d45c72ec76","html_url":"https://github.com/juburr/melange-orb","commit_stats":null,"previous_names":["juburr/melange-orb"],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/juburr/melange-orb","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/juburr%2Fmelange-orb","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/juburr%2Fmelange-orb/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/juburr%2Fmelange-orb/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/juburr%2Fmelange-orb/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/juburr","download_url":"https://codeload.github.com/juburr/melange-orb/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/juburr%2Fmelange-orb/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28492286,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-17T00:50:05.742Z","status":"online","status_checked_at":"2026-01-17T02:00:07.808Z","response_time":85,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["apk","chainguard","circleci","circleci-orbs","container-builder","containers","melange","package-builder"],"created_at":"2026-01-17T02:26:43.768Z","updated_at":"2026-01-17T02:26:43.848Z","avatar_url":"https://github.com/juburr.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cdiv align=\"center\"\u003e\n  \u003cimg align=\"center\" width=\"320\" src=\"assets/logos/melange-orb-logo.png\" alt=\"Melange Orb\"\u003e\n  \u003ch1\u003eCircleCI Melange Orb\u003c/h1\u003e\n  \u003ci\u003eAn orb for simplifying Melange installation and use within CircleCI.\u003c/i\u003e\u003cbr /\u003e\u003cbr /\u003e\n\u003c/div\u003e\n\n[![CircleCI Build Status](https://circleci.com/gh/juburr/melange-orb.svg?style=shield \"CircleCI Build Status\")](https://circleci.com/gh/juburr/melange-orb) [![CircleCI Orb Version](https://badges.circleci.com/orbs/juburr/melange-orb.svg)](https://circleci.com/developer/orbs/orb/juburr/melange-orb) [![GitHub License](https://img.shields.io/badge/license-MIT-lightgrey.svg)](https://raw.githubusercontent.com/juburr/melange-orb/master/LICENSE) [![CircleCI Community](https://img.shields.io/badge/community-CircleCI%20Discuss-343434.svg)](https://discuss.circleci.com/c/ecosystem/orbs)\n\nThis is an unofficial Melange orb used for installing Melange in your CircleCI pipeline to build packages for distroless container images. Contributions are welcome!\n\n## Features\n### **Secure By Design**\n- **Least Privilege**: Installs to a user-owned directory by default, with no `sudo` usage anywhere in this orb.\n- **Integrity**: Checksum validation of all downloaded binaries using SHA-512.\n- **Provenance**: Installs directly from Melange's official [releases page](https://github.com/chainguard-dev/melange/releases/) on GitHub. No third-party websites, domains, or proxies are used.\n- **Confidentiality**: All secrets and environment variables are handled in accordance with CircleCI's [security recommendations](https://circleci.com/docs/security-recommendations/) and [best practices](https://circleci.com/docs/orbs-best-practices/).\n- **Privacy**: No usage data of any kind is collected or shipped back to the orb developer.\n\nInfo for security teams:\n- Required external access to allow, if running a locked down, self-hosted CircleCI pipeline on-prem:\n  - `github.com`: For download and installation of the Melange tool.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjuburr%2Fmelange-orb","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjuburr%2Fmelange-orb","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjuburr%2Fmelange-orb/lists"}