Buildpacks: Graduation Due Diligence

[kfaseela]

Graduation due diligence for Cloud Native Buildpacks.

Application: #1538
General Technical Review: #2047 cc @kdubois

Next steps

• Public comment period (minimum 2 weeks)
• TOC vote

Signed-off-by: Faseela K faseela.k@gmail.com

[sambhav]

💯 glad to see @buildpacks graduating 🎉 very well deserved and a great way to recognize all the efforts the community and maintainers have put in to make this project successful.

[jjbustamante]

Glad to see buildpacks graduating! It's a great technology used to build large numbers of applications in the cloud! Huge shout-outs to the community and maintainers for their great work!

[runesoerensen]

+1 for graduation. I've used and built CNBs personally and professionally for the past three years, across all kinds of platforms and apps, and it's been rock solid throughout. Great tech that address real challenges elegantly, with a thoughtful, engaged, and responsive maintainer community. Strong support from me, and a big thank you to everyone who helped make it happen!

[jghiloni]

I've been involved with CNBs as a consumer, contributor, and author, and it's fantastic to see them so close to graduating. It solves a real problem very elegantly, and every InfoSec team to whom I've evangelized them has loved them.

[sumitnagal]

Glad to see buildpacks graduating; we have been using Buildpacks for the last couple of years and really see the value they bring to developers.

[Malax]

I'm very happy to see Cloud Native Buildpacks graduating. I worked on libcnb.rs, a Rust framework for implementing CNBs, which gave me an appreciation for how thoughtfully the spec is designed and how open it is to implementations in whatever language and tooling fits the buildpack in question. CNBs solve real problems elegantly. Not just turning an app into an image, but also tackling the rebase problem and encouraging best practices like SBOMs. Graduation is well-earned. Huge thanks to everyone who got the project to this point!

[edmorley]

+1 to graduation as an active user and maintainer of CNBs :-)

[AidanDelaney]

This is fantastic. We use CNB to drive all our production images. Great to see the project graduate!

[tylerphelan]

Amazing!!

[schneems]

Excited for this. The rebaseable layering strategy alone is pretty legendary. I went to a KCD, and one of the conf organizers was gushing about how great CNB was and how more people should hear about it. Let's do this thing!

[techmaharaj]

Glad to see buildpacks making it to graduation. Have interacted with the team and truly appreciate the problem being solved.

[saiyam1814]

So excited to see this happen - I created a video on this https://www.youtube.com/watch?v=nG7N6SLNO4Q 4+ years ago and seeing this makes me happy! Lets go!

[hrittikhere]

+1 for graduation! 🚀 Cloud Native Buildpacks provide immense value to developers and the broader cloud native ecosystem

[shivaylamba]

Super excited to see the graduation for CNBs - they provide great developer experience and I see them becoming the standard for AI workloads as well in the future

[Paranitharan1110]

+1 for graduation! 🚀 Congratulations to everyone who contributed to making Cloud Native Buildpacks a graduated project. This is a significant milestone that reflects the maturity, reliability, and impact of the project on the cloud native community. 👏

[ramiyengar]

I'm very happy to see Cloud Native Buildpacks graduating. I worked on libcnb.rs, a Rust framework for implementing CNBs, which gave me an appreciation for how thoughtfully the spec is designed and how open it is to implementations in whatever language and tooling fits the buildpack in question. CNBs solve real problems elegantly. Not just turning an app into an image, but also tackling the rebase problem and encouraging best practices like SBOMs. Graduation is well-earned. Huge thanks to everyone who got the project to this point!

Malax, I followed your work to demo Ollama buildpacks. Thanks for your work so far. I hope the project gets adopted a lot more in the coming years.

[anthonydahanne]

+1 for graduation, finally 🚀
As an implementer (Paketo Buildpacks), I can say that the spec, the lifecycle, the tooling are mature, stable, and very well maintained.
Very excited to see this project graduate, so many successful projects rely on it (millions of Spring Boot developers rely on Paketo Buildpacks that rely on Buildpacks for example)

[raghureddycloud]

+1 , Very happy to see such wonderful tool getting graduation under CNCF.

[norman-abramovitz]

Looking forward for these buildpacks to be available

[herder]

Really happy to see this - we're using Buildpacks for most of our services, and being able to provide a CICD pipeline that Just Works, with no effort for the developer, while allowing us as a platform team to integrate our workloads with our stack in a streamlined fashion (versioning, metrics via Datadog, security etc), is such a great win.

Great experience both for DevEx and security concerns 🎉

[itsmeskmanoj]

💯 Absolutely deserved! Congratulations on the graduation of Buildpacks! 🎉

I've had the opportunity to see how Cloud Native Buildpacks simplify the application build process by enabling secure, consistent, and reproducible container images without requiring developers to write Dockerfiles. It's an outstanding example of how great engineering and a strong open-source community can solve real-world problems at scale.

A huge congratulations and heartfelt thank you to all the maintainers, contributors, reviewers, and the entire community for the countless hours of dedication that made this milestone possible. Wishing the project continued success and even broader adoption across the cloud-native ecosystem! 🚀

[gowtham500]

🎉 Huge congratulations to the entire Buildpacks community on reaching graduation!

I've followed this project for a while, and it's a great example of what focused, patient engineering looks like — turning "build a container image" from a fragile, Dockerfile-by-hand process into something secure, reproducible, and boringly reliable. That's a hard problem to solve well, and Buildpacks nailed it.

Thank you to every maintainer, contributor, and reviewer who put in the work to get here — the due diligence, the security audits, the governance docs, all of it. It doesn't happen by accident. Excited to see continued growth and adoption across the ecosystem. 🚀

[nimeshmora]

Fantastic. +1

[Vijayraj93]

🎉 Congratulations to the Cloud Native Buildpacks team on achieving graduation status! This milestone is well-deserved recognition of the project's maturity and its significant impact on simplifying containerization workflows.👏✨🎊

[kunalworldwide]

Incredibly excited to see Cloud Native Buildpacks heading towards graduation! 🎉

Having tracked and interacted with the project, it’s amazing to see how seamlessly CNBs bridge the gap between secure, production-ready container images and a top-tier developer experience,completely abstracting away the friction of traditional Dockerfiles. The architectural choices like the rebaseable layering strategy and native SBOM support are absolute game-changers for enterprise platform teams.

[anoop2811]

Great to see buildpacks graduate! Guidewire Software has been in using it and immensely been helped in the speed of delivery of our projects and reduce toil for things that image level changes. The user journey is also lot simplified and the extensible nature of it has only helped. A shout out the team maintaining it... keep going! 🏆

[patbaumgartner]

+1 for graduation! I have been a huge fan of Cloud Native Buildpacks for years. They completely changed how I ship my Java applications, no more hand-written Dockerfiles, just secure, reproducible images. I loved the approach so much that I built my own distroless builder to run my Java apps on minimal, hardened images. Congratulations to the maintainers and community, this is very well deserved.

[jerrinfrancis]

+1 to everything @anoop2811 said. I've seen it first-hand on the platform side at Guidewire — the no-Dockerfile, rebaseable-image flow takes real toil out of image-level changes. The rebaseable layering and first-class SBOMs are the kind of design decisions that pay off quietly for years, especially on the security side. Congratulations to the maintainers and community, this is very well deserved.

[ricardochimal]

this is great! 🍾 rebase and sboms solve real maintenance and security problems that are going to be getting bigger as more apps get created in this world of AI

[sreejith-rajashekaran]

+1 for graduation! In the era of frontier AI models — where the cost of discovering and chaining supply-chain attack paths is collapsing, buildpacks become vital: minimal images shrink the attack surface, automated rebase closes CVEs fleet-wide in minutes, and native SBOMs turn "am I affected?" into a query rather than an excavation.

[dmikusa]

🎉 Woohoo! It’s been a long road, so happy to see this. Congrats and big thanks to everyone who’s helped make this happen!

[miller79]

This is awesome news! We use Buildpacks consistently across my teams, and they’ve made container image creation incredibly simple. They’ve also eliminated the headaches that come from inconsistent or poorly configured application Dockerfiles by letting the platform handle those concerns for us.

I’d love to see Buildpacks reach the Graduated maturity level. Congratulations, and thank you to everyone who has helped make this possible!

[tomkennedy513]

Let’s go buildpacks!

[ibidani]

Congrats 👏 great team and well deserved!

[Sagar2366]

+1 for Cloud Native Buildpacks graduation.

As a CNCF Ambassador, SRE, and cloud native community organizer, I strongly support this. Buildpacks solve a real platform engineering problem by enabling secure, reproducible, production-ready OCI images without pushing every team to maintain Dockerfiles.

The lifecycle, rebaseable layers, SBOM support, and clean separation between app and platform responsibilities make CNBs valuable for DevEx, SRE, and software supply chain use cases.

Thanks to the maintainers and community for the sustained work. Graduation is well deserved.

[mailprak]

+1 Excited to see Cloud Native Buildpacks heading towards graduation 🎉

[jchester]

Hello, it's me, a person perhaps best known in cloud native circles for my battle cry: Fuck yeah Buildpacks!

Ever since I first used a buildpack, in the pre-CNB v2b days, I knew I had seen how software development and deployment was meant to be. This was before Dockerfiles; and when those came along I was absolutely stumped. Why on earth would you waste so much time futzing and fiddling and mucking around with a deranged shell script? Why do I have to do all this work? Computers are computers dammit, let them do the computing.

I worked with Buildpacks -- either using them for my work or developing the tech -- for about 7 or so years at Pivotal/VMware. And I have missed having them on tap ever since. I have never met a better developer experience at the source code / production border crossing. Never, anywhere, seen a better alternative that didn't require either (a) acres of tedious and fragile YAMLeering or (b) a PhD in higher endofunctor metamathematics. It just works. IT JUST WORKS! There should be ticker tape parades for the inventors of every variant and generation!

All of which is to say: +1. +100. +ℵ₀. +∞. You get the idea.

[ramamoorthypraveen-ui]

💯 Absolutely deserved—congratulation on the graduation of Buildpacks! 🎉

This is a fantastic milestone for the cloud-native ecosystem. Cloud Native Buildpacks have transformed the way applications are built by enabling secure, consistent, and reproducible container images without the need to manage Dockerfiles.

A huge congratulations and heartfelt thanks to all the maintainers, contributors, reviewers, and the entire community whose dedication made this achievement possible. Wishing Buildpacks continued success and even wider adoption in the years ahead! 🚀👏

[kothaai1798]

Amazing achievement! 🚀 Congratulations to everyone who contributed to this milestone. Graduation is a testament to the strength of the community and the impact Cloud Native Buildpacks continues to have across the cloud native ecosystem.

[AjayPrasad2005593]

Great Achievement! Hats-off to everyone who contributed.

[mohdazaruddin]

As someone working with both Cloud Foundry and Kubernetes platforms, I've seen how Buildpacks provide a consistent, secure, and streamlined way to build applications across different environments.

Their maturity, strong community, vendor-neutral governance, and broad ecosystem adoption make this graduation well deserved. Congratulations to all the maintainers and contributors on reaching this milestone!

[adityasonittyl]

+1 Buildpacks have matured into a stable and widely adopted project that solves a real problem for developers and platform teams by providing a consistent, secure, and repeatable way to build applications into OCI images. The project has demonstrated a healthy ecosystem, strong community engagement, and long-term sustainability.

Graduation would be a well-deserved milestone and a recognition of the project's technical maturity, governance, and continued impact across the cloud native ecosystem. Congratulations to all the maintainers and contributors who have made this possible!

[joshwlewis]

👍🏻 -- Go Cloud Native Buildpacks! I used them extensively at Heroku, and am starting to use them again with my latest career move. At R1 RCM, we're exploring using them for building AI agents, and it's looking promising. We love the improved cache-ability story over Dockerfiles, and we love the rebase functionality.

[vmandalapu1994]

Glad to see buildpacks graduating! It's a great technology used to build large numbers of applications in the cloud! Huge shout-outs to the community and maintainers for their great work!

[afawcett]

It's easy to overlook the complexity, risks, and ongoing management involved in building something that runs in the cloud these days. Thankfully, that's not a ball being dropped / left unchecked or one that AI is needlessly having to rediscover. Instead, it's firmly in the hands of this team's hard work and the critical role CNBs play in our future for years to come. Bravo team! 🥇

[jasonschroeder-sfdc]

I'm very excited to see this graduate, we use this OSS technology daily!

[Mangai-23]

+1 from me! I had an opportunity to work with Cloud Native Buildpacks to see how they remove much of the complexity from container image creation and let developer focus on building apps instead of maintaining docker files. Congratulations to the entire community on reaching this milestone. Thank you to all the contributors and maintainers for your hard work and commitment. Excited to see what's next for the project! 🎉