public:99_annexes:annex-b-terms-and-definitions:i:image_promotion

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
public:99_annexes:annex-b-terms-and-definitions:i:image_promotion [2026/09/12 17:42] – removed - external edit (Unknown date) 127.0.0.1public:99_annexes:annex-b-terms-and-definitions:i:image_promotion [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
Line 1: Line 1:
 +====== Image Promotion ======
  
 +[[public:99_annexes:annex-b-terms-and-definitions:start|Go to Terms and Definitions]]
 +
 +===== Discussion =====
 +
 +Image Promotion is a controlled [[public:99_annexes:annex-b-terms-and-definitions:l:lifecycle|Lifecycle]] transition that changes the promotion state of an identified [[public:99_annexes:annex-b-terms-and-definitions:i:image|Image]] after the Image satisfies the applicable transition criteria.
 +
 +Image Promotion may progress an Image through states associated with:
 +
 +  * Building
 +  * Evaluation
 +  * Testing
 +  * [[public:99_annexes:annex-b-terms-and-definitions:i:image_signing|Image Signing]]
 +  * [[public:99_annexes:annex-b-terms-and-definitions:d:digital_signature_verification|Digital Signature Verification]]
 +  * Compliance assessment
 +  * Approval
 +  * Staging
 +  * Release
 +  * Publication
 +  * Distribution
 +  * Deployment authorization
 +  * [[public:99_annexes:annex-b-terms-and-definitions:r:retirement|Retirement]]
 +
 +The applicable Image Promotion workflow defines:
 +
 +  * The promotion states
 +  * The permitted transitions among promotion states
 +  * The transition criteria
 +  * The actor or process permitted to request a transition
 +  * The actor or process permitted to authorize a transition
 +  * The result of a successful transition
 +  * The result of an unsuccessful transition
 +  * The records and [[public:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] associated with the transition
 +
 +Transition criteria may include:
 +
 +  * Successful Image build
 +  * Successful test execution
 +  * Successful vulnerability assessment
 +  * Successful compliance assessment
 +  * A valid [[public:99_annexes:annex-b-terms-and-definitions:d:digital_signature|Digital Signature]]
 +  * Required approval
 +  * Required Evidence
 +  * Compatibility with a target environment
 +  * Satisfaction of applicable release conditions
 +
 +Image Promotion differs from Image transfer:
 +
 +  * Image Promotion changes the promotion state of an Image
 +  * Image transfer moves an Image between repositories, environments, or administrative domains
 +
 +Image Promotion differs from Image publication:
 +
 +  * Image Promotion authorizes or records a transition between promotion states
 +  * Image publication makes an Image available through a repository or distribution mechanism
 +
 +Image Promotion differs from deployment:
 +
 +  * Image Promotion changes the status of an Image within its promotion Lifecycle
 +  * Deployment uses an Image to instantiate or replace a computing subject
 +
 +An Image may be promoted without being deployed, and deployment may require the Image to occupy a specified promotion state.
 +
 +===== Definition =====
 +
 +//controlled [[public:99_annexes:annex-b-terms-and-definitions:l:lifecycle|lifecycle]] transition that changes the promotion state of an identified [[public:99_annexes:annex-b-terms-and-definitions:i:image|image]] after satisfaction of applicable transition criteria//
 +
 +===== Source =====
 +
 +Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
 +
 +===== Note =====
 +
 +Image Promotion does not by itself define:
 +
 +  * The names or numbers of promotion states
 +  * The order of all promotion states
 +  * The transition criteria
 +  * The approval authority
 +  * The repository used to store the Image
 +  * The mechanism used to record the promotion state
 +  * The environments in which the Image may be deployed
 +
 +The applicable Image Promotion workflow or lower-level requirements define those details.
 +
 +Image Promotion should preserve, as applicable:
 +
 +  * The Image identifier
 +  * The Image [[public:99_annexes:annex-b-terms-and-definitions:r:revision|Revision]]
 +  * The prior promotion state
 +  * The resulting promotion state
 +  * The applicable transition criteria
 +  * The observed criteria results
 +  * The requesting actor or process
 +  * The authorizing actor or process
 +  * The transition time
 +  * The promotion result
 +  * The resulting Evidence
 +  * [[public:99_annexes:annex-b-terms-and-definitions:p:provenance|Provenance]]
 +  * [[public:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]]
 +
 +Promotion of an Image does not modify the content of the Image. A content change produces a different Image or Image Revision, subject to its own evaluation and promotion.
 +
 +===== Example =====
 +
 +A Container Image enters the **Built** promotion state after a successful build. After the Image passes required testing, compliance assessment, and Digital Signature Verification, an authorized workflow performs Image Promotion to the **Approved for Deployment** state.
 +
 +----
 +
 +<WRAP centeralign>
 +© 2026 Dido Solutions, Inc. and Jackrabbit Consulting, Inc.
 +</WRAP>