Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs: adding example output for PROVENANCE.md #268

Merged
merged 2 commits into from
Feb 22, 2024

Conversation

rsoberano-ld
Copy link
Contributor

@rsoberano-ld rsoberano-ld commented Feb 22, 2024

Requirements

  • I have added test coverage for new or changed functionality
  • I have followed the repository's pull request submission guidelines
  • I have validated my changes against all supported platform versions

Describe the solution you've provided

Using provenance generated for previous release to flesh out PROVENANCE.md

Describe alternatives you've considered

Provide a clear and concise description of any alternative solutions or features you've considered.

Additional context

Add any other context about the pull request here.

BEGIN_COMMIT_OVERRIDE
docs: Add example output for PROVENANCE.md #268
END_COMMIT_OVERRIDE

@rsoberano-ld rsoberano-ld requested a review from a team as a code owner February 22, 2024 01:06

To verify SLSA provenance attestations, we recommend using [slsa-verifier](https://github.com/slsa-framework/slsa-verifier). Example usage for verifying SDK packages is included below:

<!-- x-release-please-start-version -->
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@rsoberano-ld I added a commit to this PR. It configures release-please to update this file with the latest release version each time we cut a release. This way we don't have to update that version number manually. FYI for the next ones we do.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is great, thanks for adding this in! Do I need to replace 9.2.0 with a template variable, or will release-please know to replace that?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nope, this should be sufficient for it to update it.

@rsoberano-ld rsoberano-ld merged commit 43cf5bf into main Feb 22, 2024
11 checks passed
@rsoberano-ld rsoberano-ld deleted the rsoberano/SEC-5003/provenance-examples branch February 22, 2024 19:36
keelerm84 pushed a commit that referenced this pull request Mar 1, 2024
🤖 I have created a release *beep* *boop*
---


##
[9.2.1](9.2.0...9.2.1)
(2024-03-01)


### Bug Fixes

* Raise minimum urllib3 package to 1.26.0
([#271](#271))
([ffeded9](ffeded9)),
closes
[#270](#270)


### Documentation

* Add example output for PROVENANCE.md
[#268](#268)
([43cf5bf](43cf5bf))
* Fix version generation in PROVENANCE file
([#272](#272))
([7dd887e](7dd887e))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants