Documentation for the cssc-framework repository. The architecture and
guides are organized around the CSSC framework stages — Acquire,
Catalog, Build, Deploy, and Run — and, within each stage, grouped under two
cross-cutting themes where they apply: Authenticity and Integrity and
Supply Chain Observability. Reference material and contributing conventions
are kept as cross-cutting areas.
| Folder | Purpose |
|---|---|
architecture/ |
Design and architecture docs, organized by stage. |
guides/ |
How-to and operational guides, organized by stage. |
reference/ |
Reference material and conventions (cross-cutting). |
contributing/ |
Conventions for contributing to this repository. |
| Stage | Architecture | Guides |
|---|---|---|
| Acquire | architecture/acquire/ | guides/acquire/ |
| Catalog | architecture/catalog/ | guides/catalog/ |
| Build | architecture/build/ | guides/build/ |
| Deploy | architecture/deploy/ | guides/deploy/ |
| Run | architecture/run/ | guides/run/ |
Design docs that span stages live under architecture/cross-cutting/.
- Workflow naming conventions — how GitHub Actions workflows are named and organized in this repository.