What is the best way to get more help with testing?

[prabhu]

Everyone wants a stable and well-tested cdxgen. The master branch on both the container and the repo almost sees no downloads, which means 100% of the testing effort falls into the hands of the maintainers.

We often have no idea about regression bugs, so don't know if the master branch is even ready to be released. Most successful open-source projects would have a combination of users on both rolling and stable releases.

What's the best way to encourage the community to start testing the master branch in non-production environment and submit any regression bugs (performance and functional)?

[prabhu]

One idea I have is to make the master branch the latest tag for containers. So if someone pulls ghcr.io/cyclonedx/cdxgen they get the master branch. Should they prefer stability, they can refer to a specific tag or sha

[setchy]

I think that can be misleading.

Perhaps a develop or nightly tag is better suited to that (rather than master)

latest imo should match the most recent released version, not @HEAD

[prabhu]

Let me hear some more comments. Using a tag name such as develop or nightly requires people to make a change.

[prabhu]

Second idea. Don't make any releases until a few people test and confirms that the master branch is ready to be released.