-
Checkout a clean Tracee branch from
upstream
(instead of using your own). This will help with wrong tags you might have locally (by not uploading them by accident).gh clone aquasec/tracee
-
Prepare release by creating the PR with the following changes
- Check if a libbpfgo update is needed (needs to be released first).
- Check if libbpf version is the same as libbpfgo's libbpf version.
- Update types module to latest.
- Update the container image tag, with the one to be released, at:
deploy/kubernetes/tracee/tracee.yaml
- Update
home
,version
andappVersion
properties indeploy/helm/tracee/Chart.yaml
- example - Create a PR with the tags bump
-
Run tests and checks
- Manually run a snapshot release from its workflow.
- Sanity checks features that might not have specific tests:
- multiple policy files simultaneously (check event results)
- network capture (pcap files)
- other capture (files, memory, etc...)
- other ...
-
Create a git tag and push it to the
upstream
. This will trigger the.github/workflows/release.yaml
workflow.git tag -v0.99.0 git push upstream v0.99.0
-
Verify that the
release
workflow has built and published the artifacts.- Tracee binaries (tracee, tracee-ebpf, tracee-static, tracee-ebpf-static,
tracee-rules, signatures) in the form of a tar archive
tracee.<VERSION>.tar.gz
- Source code zip and tar files
- Docker images pushed to the aquasec/tracee repository.
- Tracee binaries (tracee, tracee-ebpf, tracee-static, tracee-ebpf-static,
tracee-rules, signatures) in the form of a tar archive
-
Publish the Helm chart by triggering workflow
.github/workflows/publish-helm.yaml
.