Cloud Build
Trace a build’s recorded source and output images when investigating a release.
Read the provider’s build record
Proofline reads builds in a configured project and location. Records include outcome, timing, execution identity, the source fetched by the provider, and the image digests it reports pushing.
A source revision supplied by the caller remains identified as a declaration. An uploaded source archive is not automatically tied to a Git commit.
Follow the image beyond the build
The build record can establish that a particular digest was produced. Artifact Registry provides the repository’s image inventory, while Cloud Run or another workload source supplies deployment configuration.
A successful deploy build shows that the build executed. It does not, on its own, identify the image currently running or establish application health.
Connect the Google Cloud source
Choose the environment, project, and resources in the Google Cloud connection form. Review and apply its setup script, then verify the connection before using its evidence in a review.
Get started with GitHub