Documentation
Everything we publish about how ReadyStack works, in one place.
Free, with an account
How it works
- How a release is builtWhat comes with a release, how it is built with the network off, and how to check it yourself.
- Source or image?What sits between git clone and working software, what each piece of release evidence proves, and how to change the code from the build kit.
- SLSA provenance on your own builderFrom a build kit to the published image, rebuilt offline with SLSA v1 provenance signed by your own key.
- Keeping images up to dateExact release tags that never move, a Renovate preset, and the measured time to a release without a fixable vulnerability.
- Free dataThe build records, tests and data that come with every image.
- Agent case studyOne AI agent, one deployment task, three starting points: what our image changed and where it did not help.
Evidence and data
- ProductsEvery release with its grade at release and today, its rebuild result and its defects; each product has its own page and its build recipe.
- For auditorsThe evidence each release carries, mapped to SOC 2 criteria, with the commands to check it.
- Defect logEvery defect recorded for a published release, with what happened to it.
- Build queueWhat is building, what is next, every published package, and how to request one.
- Public APIThe JSON behind the site: products, release history, scans, Docker Scout evidence, defects and the build queue. No key needed.
- llms.txt The site for language models; llms-full.txt lists every product as text.
Terms and policies
- Terms of ServiceWhat the images and build kits are, downloads, licensing and warranty.
- ReadyStack AgreementWhat we publish for every release, support, corrections and updates.
- Privacy policyWhat we collect, how it is used and stored, and your choices.
- Security contactWhere to report a vulnerability, privately.
- Issue trackerReport a problem with an image, an error in a handbook or recipe, or ask for a product. Public, on ReadyStack's GitHub.
- AboutWhy ReadyStack exists. ReadyStack is soon to be a nonprofit; anyone who wants to take part can email [email protected].