Skip to content

docs: lead README + docs home with a badge row (PyPI, Docker, Ruff, cosign) + feature subtitle - #108

Merged
mountainowl merged 1 commit into
mainfrom
docs/readme-badges
Jun 16, 2026
Merged

docs: lead README + docs home with a badge row (PyPI, Docker, Ruff, cosign) + feature subtitle#108
mountainowl merged 1 commit into
mainfrom
docs/readme-badges

Conversation

@mountainowl

@mountainowl mountainowl commented Jun 16, 2026

Copy link
Copy Markdown
Owner

What

Puts the badge row directly under the H1 (above the tagline) on both the README and the docs site home, so status/install/trust signals are the first thing a visitor sees — and adds high-signal, all-true badges plus a scannable feature subtitle.

Badge row (order = install → health → security → quality → tooling → license):
PyPI · Python 3.14+ · Docker (GHCR) · CI · OpenSSF Scorecard · cosign-signed · Ruff · uv · License

Added:

  • PyPI version — live at 0.21.0.
  • Docker / GHCR — multi-arch image.
  • Ruff — official code-quality badge.
  • cosign-signed — Sigstore keyless signing is real (release.yml), as are the SBOM and the Docker image's BuildKit provenance. Deliberately not a "SLSA Level 3" claim — the image provenance is build-push-action (~SLSA Build L2), not the L3 a dedicated slsa-github-generator would assert.
  • Re-pointed the uv badge at the uv project.

Feature subtitle under the tagline (both files):

Self-hosted · bring-your-own-LLM · GitLab + GitHub · inline findings only · governance, provenance & audit · OpenTelemetry metrics

Docs home (docs/index.md) mirrors the row minus the self-referential Docs badge. mkdocs build --strict passes.

Notes

Move the badges directly under the H1 (above the tagline) so the
status/install signals are the first thing a visitor sees, and add three
high-signal badges:

- PyPI version — the package is published; shows it is installable + current.
- Docker / GHCR — bubo ships a multi-arch image.
- Ruff — code-quality signal; bubo lints with ruff.

Also re-point the uv badge at the uv project. No changes below the header.
@mountainowl
mountainowl merged commit e0b2b80 into main Jun 16, 2026
4 checks passed
@mountainowl mountainowl changed the title docs: lead README with the badge row; add PyPI, Docker (GHCR), Ruff docs: lead README + docs home with a badge row (PyPI, Docker, Ruff, cosign) + feature subtitle Jun 17, 2026
mountainowl added a commit that referenced this pull request Jun 17, 2026
…cs mirror

The second commit of #108 (cosign badge, feature subtitle, docs/index.md
mirror) never reached main — only the first commit (PyPI/Docker/Ruff row)
merged. Reconcile main with what #108 intended, and add the new SLSA L3 badge:

- README badge row: add `release: cosign signed` (Sigstore keyless signing,
  in place for many releases) and `SLSA 3` (Build L3 provenance, wired in the
  release workflow) in the security cluster after OpenSSF Scorecard.
- README: add the feature subtitle under the tagline.
- docs/index.md: mirror the full badge row (minus the self-referential Docs
  badge) + the subtitle, so the docs home matches the README.
mountainowl added a commit that referenced this pull request Jun 17, 2026
…cs mirror (#114)

The second commit of #108 (cosign badge, feature subtitle, docs/index.md
mirror) never reached main — only the first commit (PyPI/Docker/Ruff row)
merged. Reconcile main with what #108 intended, and add the new SLSA L3 badge:

- README badge row: add `release: cosign signed` (Sigstore keyless signing,
  in place for many releases) and `SLSA 3` (Build L3 provenance, wired in the
  release workflow) in the security cluster after OpenSSF Scorecard.
- README: add the feature subtitle under the tagline.
- docs/index.md: mirror the full badge row (minus the self-referential Docs
  badge) + the subtitle, so the docs home matches the README.

Co-authored-by: mountainowl <mountainowl@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant