Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

RFC for linking packages to their source and build #626

Merged
merged 39 commits into from
Nov 7, 2022
Merged

RFC for linking packages to their source and build #626

merged 39 commits into from
Nov 7, 2022

Commits on Aug 8, 2022

  1. RFC for linking packages to their source and build

    @feelepxyz
    feelepxyz committed Aug 8, 2022
    Configuration menu
    Copy the full SHA
    6e6ec6c View commit details
    Browse the repository at this point in the history

  2. Update accepted/0000-link-packages-to-source-and-build.md 

    Co-authored-by: Jordan Harband <ljharb@gmail.com>
    @feelepxyz @ljharb
    feelepxyz and ljharb authored Aug 8, 2022
    Configuration menu
    Copy the full SHA
    8677dcf View commit details
    Browse the repository at this point in the history

  3. Update accepted/0000-link-packages-to-source-and-build.md 

    Co-authored-by: Jordan Harband <ljharb@gmail.com>
    @feelepxyz @ljharb
    feelepxyz and ljharb authored Aug 8, 2022
    Configuration menu
    Copy the full SHA
    9d6d28e View commit details
    Browse the repository at this point in the history

  4. Update accepted/0000-link-packages-to-source-and-build.md 

    Co-authored-by: Tierney Cyren <accounts@bnb.im>
    @feelepxyz @bnb
    feelepxyz and bnb authored Aug 8, 2022
    Configuration menu
    Copy the full SHA
    3432621 View commit details
    Browse the repository at this point in the history

  5. Addressing PR comments

    @feelepxyz
    feelepxyz committed Aug 8, 2022
    Configuration menu
    Copy the full SHA
    620b247 View commit details
    Browse the repository at this point in the history

  6. certs > certificates

    @feelepxyz
    feelepxyz committed Aug 8, 2022
    Configuration menu
    Copy the full SHA
    aec5894 View commit details
    Browse the repository at this point in the history

Commits on Aug 9, 2022

  1. Update accepted/0000-link-packages-to-source-and-build.md 

    Co-authored-by: Ian Lewis <ianlewis@google.com>
    @feelepxyz @ianlewis
    feelepxyz and ianlewis authored Aug 9, 2022
    Configuration menu
    Copy the full SHA
    3833cb4 View commit details
    Browse the repository at this point in the history

  2. Clarify provenance

    @feelepxyz
    feelepxyz committed Aug 9, 2022
    Configuration menu
    Copy the full SHA
    821e639 View commit details
    Browse the repository at this point in the history

  3. Add Jenkins comparison

    @feelepxyz
    feelepxyz committed Aug 9, 2022
    Configuration menu
    Copy the full SHA
    849b928 View commit details
    Browse the repository at this point in the history

  4. Add tuf repo and root

    @feelepxyz
    feelepxyz committed Aug 9, 2022
    Configuration menu
    Copy the full SHA
    956afb4 View commit details
    Browse the repository at this point in the history

  5. Update accepted/0000-link-packages-to-source-and-build.md 

    Co-authored-by: Tierney Cyren <accounts@bnb.im>
    @feelepxyz @bnb
    feelepxyz and bnb authored Aug 9, 2022
    Configuration menu
    Copy the full SHA
    147777d View commit details
    Browse the repository at this point in the history

  6. Update accepted/0000-link-packages-to-source-and-build.md 

    Co-authored-by: Tierney Cyren <accounts@bnb.im>
    @feelepxyz @bnb
    feelepxyz and bnb authored Aug 9, 2022
    Configuration menu
    Copy the full SHA
    5ed0772 View commit details
    Browse the repository at this point in the history

  7. Rename CLI arg

    @feelepxyz
    feelepxyz committed Aug 9, 2022
    Configuration menu
    Copy the full SHA
    78a7ee7 View commit details
    Browse the repository at this point in the history

  8. Add Circle and GitLab to env table

    @feelepxyz
    feelepxyz committed Aug 9, 2022
    Configuration menu
    Copy the full SHA
    262a0b3 View commit details
    Browse the repository at this point in the history

  9. Update accepted/0000-link-packages-to-source-and-build.md 

    Co-authored-by: Ian Lewis <ianlewis@google.com>
    @feelepxyz @ianlewis
    feelepxyz and ianlewis authored Aug 9, 2022
    Configuration menu
    Copy the full SHA
    0c69e1c View commit details
    Browse the repository at this point in the history

  10. Update accepted/0000-link-packages-to-source-and-build.md 

    Co-authored-by: Tierney Cyren <accounts@bnb.im>
    @feelepxyz @bnb
    feelepxyz and bnb authored Aug 9, 2022
    Configuration menu
    Copy the full SHA
    6b77dc9 View commit details
    Browse the repository at this point in the history

  11. Add note on sct and slsa prov verifier

    @feelepxyz
    feelepxyz committed Aug 9, 2022
    Configuration menu
    Copy the full SHA
    da8a901 View commit details
    Browse the repository at this point in the history

  12. Update accepted/0000-link-packages-to-source-and-build.md 

    Co-authored-by: Ian Lewis <ianlewis@google.com>
    @feelepxyz @ianlewis
    feelepxyz and ianlewis authored Aug 9, 2022
    Configuration menu
    Copy the full SHA
    7c1b9ed View commit details
    Browse the repository at this point in the history

  13. Update sequence diagram to include id token req

    @feelepxyz
    feelepxyz committed Aug 9, 2022
    Configuration menu
    Copy the full SHA
    ce838d5 View commit details
    Browse the repository at this point in the history

  14. Fix ref to reverse proxy

    @feelepxyz
    feelepxyz committed Aug 9, 2022
    Configuration menu
    Copy the full SHA
    996b6d5 View commit details
    Browse the repository at this point in the history

  15. Clarify sigstore conf is from the configured reg

    @feelepxyz
    feelepxyz committed Aug 9, 2022
    Configuration menu
    Copy the full SHA
    fdf8d9d View commit details
    Browse the repository at this point in the history

  16. Add note about perf benchmark

    @feelepxyz
    feelepxyz committed Aug 9, 2022
    Configuration menu
    Copy the full SHA
    ab81e1c View commit details
    Browse the repository at this point in the history

Commits on Aug 10, 2022

  1. Add note about commitments

    @feelepxyz
    feelepxyz committed Aug 10, 2022
    Configuration menu
    Copy the full SHA
    718650a View commit details
    Browse the repository at this point in the history

Commits on Aug 11, 2022

  1. Add section on long-lived ci/cd secrets

    @feelepxyz
    feelepxyz committed Aug 11, 2022
    Configuration menu
    Copy the full SHA
    edb7937 View commit details
    Browse the repository at this point in the history

  2. Add a summary to implementation details

    @feelepxyz
    feelepxyz committed Aug 11, 2022
    Configuration menu
    Copy the full SHA
    3a030f9 View commit details
    Browse the repository at this point in the history

  3. Update provenance generation

    @feelepxyz
    feelepxyz committed Aug 11, 2022
    Configuration menu
    Copy the full SHA
    a2c45c2 View commit details
    Browse the repository at this point in the history

  4. Clarify sigstore-js env support

    @feelepxyz
    feelepxyz committed Aug 11, 2022
    Configuration menu
    Copy the full SHA
    65e2a91 View commit details
    Browse the repository at this point in the history

  5. Add section on additional events

    @feelepxyz
    feelepxyz committed Aug 11, 2022
    Configuration menu
    Copy the full SHA
    6f67e0b View commit details
    Browse the repository at this point in the history

  6. Add section on unanswered questions

    @feelepxyz
    feelepxyz committed Aug 11, 2022
    Configuration menu
    Copy the full SHA
    90c3673 View commit details
    Browse the repository at this point in the history

  7. Add note about audit sig

    @feelepxyz
    feelepxyz committed Aug 11, 2022
    Configuration menu
    Copy the full SHA
    44d0c62 View commit details
    Browse the repository at this point in the history

Commits on Aug 15, 2022

  1. Expand Web PKI

    @feelepxyz
    feelepxyz committed Aug 15, 2022
    Configuration menu
    Copy the full SHA
    fff96cd View commit details
    Browse the repository at this point in the history

  2. Expand CAs

    @feelepxyz
    feelepxyz committed Aug 15, 2022
    Configuration menu
    Copy the full SHA
    be4ecba View commit details
    Browse the repository at this point in the history

Commits on Aug 18, 2022

  1. Run a transparency log monitor for Rekor

    @feelepxyz
    feelepxyz committed Aug 18, 2022
    Configuration menu
    Copy the full SHA
    4927444 View commit details
    Browse the repository at this point in the history

Commits on Aug 19, 2022

  1. Update accepted/0000-link-packages-to-source-and-build.md 

    Co-authored-by: Fedor Korotkov <fedor.korotkov@gmail.com>
    @feelepxyz @fkorotkov
    feelepxyz and fkorotkov authored Aug 19, 2022
    Configuration menu
    Copy the full SHA
    17aa6a7 View commit details
    Browse the repository at this point in the history

Commits on Aug 25, 2022

  1. Update non-goals and trusted builder

    @feelepxyz
    feelepxyz committed Aug 25, 2022
    Configuration menu
    Copy the full SHA
    842db1e View commit details
    Browse the repository at this point in the history

Commits on Oct 12, 2022

  1. Update accepted/0000-link-packages-to-source-and-build.md

    @feelepxyz
    feelepxyz authored Oct 12, 2022
    Configuration menu
    Copy the full SHA
    0715e14 View commit details
    Browse the repository at this point in the history

Commits on Oct 25, 2022

  1. Merge remote-tracking branch 'origin/main' into link-packages-to-sour… 

    …ce-and-build
    @feelepxyz
    feelepxyz committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    16822dd View commit details
    Browse the repository at this point in the history

  2. Add note about travis credits 

    Signed-off-by: Philip Harrison <philip@mailharrison.com>
    @feelepxyz
    feelepxyz committed Oct 25, 2022
    Configuration menu
    Copy the full SHA
    9bfdb52 View commit details
    Browse the repository at this point in the history

Commits on Nov 7, 2022

  1. Sigstore GA, release > publish attestation 

    Signed-off-by: Philip Harrison <philip@mailharrison.com>
    @feelepxyz
    feelepxyz committed Nov 7, 2022
    Configuration menu
    Copy the full SHA
    53e2206 View commit details
    Browse the repository at this point in the history