HumbleBee

Release trust

HumbleBee releases include CLI archives, GUI assets, checksums, and a CycloneDX SBOM.

HumbleBee release artifacts are published on GitHub Releases:

github.com/grobmeier/humblebee/releases

Release assets

A release can include:

  • CLI archives built by GoReleaser,
  • standalone GUI downloads built with Wails,
  • checksums.txt,
  • a CycloneDX SBOM such as HumbleBee_v0.2.1_sbom.cdx.json.

Checksums

Checksums help verify that a downloaded file matches the file published in the release.

Download the asset and checksums.txt, then compare the checksum with your operating system tools.

SBOM

The SBOM is a machine-readable software bill of materials. It documents dependencies detected during the release process and helps with security review, dependency audits, and release evidence.

For now, HumbleBee publishes one release-level SBOM. It covers the source tree and dependency manifests used for the CLI and GUI release.

GitHub Actions builds

The CLI release is created by GitHub Actions and GoReleaser from v* tags. GUI assets are attached to the same release by a separate GUI workflow.

What is not promised yet

HumbleBee releases currently do not claim full signed binary provenance or notarized macOS distribution.