The Apache Software Foundation has launched Apache Trusted Releases (ATR), a platform from the ASF Tooling Initiative designed to reduce friction in the release process for maintainers across hundreds of ASF projects. ATR automates previously manual tasks like vote tabulation, SBOM validation, and compliance checks, while remaining flexible enough to integrate with existing workflows such as GitHub Actions or CLI tools. It notably improved SBOM field coverage from thousands of missing entries to near-complete coverage. The platform is live at release-test.apache.org with open API and public source repos.
Questions this post answers
What is Apache Trusted Releases (ATR) and what does it automate in the ASF release process?
Apache Trusted Releases (ATR) is a platform from the ASF Tooling Initiative that automates release process tasks previously dependent on institutional knowledge, including vote tabulation, SBOM validation, and compliance checks. It integrates with existing workflows like GitHub Actions or CLI tools without imposing a single workflow. It reduced thousands of missing SBOM fields to near-complete coverage across releases while letting each project adopt it at its own pace. ASF contributors shipping releases can track ATR updates and related open source tooling news on daily.dev.