-
This will add:
- [ ] pre-submit with a non-signed attestations
- [ ] daily runs
-
~~http://scratchforums.blob8108.net/forums/viewtopic.php?id=34284~~
https://scratcharchive.asun.co//forums/viewtopic.php?id=34284
-
In the TS code, we have been using
```ts
val = || ""
```
Most of the time, these env variables should never be empty because they are GitHub variables. Nevertheless, we should spend some time …
-
Builtin extensions should use the BYOB stack and be lazily loaded. We can do this in a non-breaking way by having a static map for builtins types to their appropriate assembly, and then rely on BYOB.…
-
This isn't urgent, but it would be nice to have _every_ block contain some help info. I'm also going to list some places where the help descriptions could be improved, at least based on my experience.…
-
In the v1.0, we may leave
```
workflow: {
ref: rawTokenObj.github.ref,
repository: rawTokenObj.github.repository,
path: getWorkflowPath(rawTokenObj.github),
…
-
Provide a means for hosts to custom the JobHostConfiguration, such as replace the IDistributedLockManager or default logger.
Currently, the only way to do this is via the BYOB pipeline, but that's …
-
Need to finalize how to load extensions into Runtime.
Currently, it's via an appsetting that points to a directory, and we can scan the dir for files with "extension" in the name. That's a temporar…
-
Hello. I started doing this in BYOB but I've come across the same problem in Snap! (but with a different outcome).
Background: As an experiment sparked by Stefano Federici's languages in BYOB/Snap!/B…
-
v1.8.0 should be used in https://github.com/slsa-framework/example-package/blob/main/.github/workflows/scripts/e2e.delegator.default.verify.sh#L39