-
**Motivation**
We have signatures with cosign, and our next step is to add provenance attestations to images and artifacts as well, in the same way we have in Falcoctl
cc @cpanato @developer-guy
-
Group execution-context patterns and functions for consistent provenance tracking.
-
-
The scanner supports storing multiple types of data in storages for reuse in subsequents runs or other tools:
* Scan results
* Package based
* Provenance based
* Provenance resolutions resul…
-
Correct color on
- top nav
- logo text
- “Create New Device”
- “Device Image (optional)
- “Choose File” text and button
- background on “Create New Device” card
- input field filler text
Remo…
-
I find section 4 difficult to read. The heading "Endorsing Evidence Provenance" is not an intuitive concept. The authors must explain what it means first.
The first paragraph seems to describe tha…
-
- [ ] I'd be willing to implement this feature ([contributing guide](https://yarnpkg.com/advanced/contributing))
- [ ] This feature is important to have in this repository; a contrib plugin would…
-
### OS/platform
Linux
### Emacs version and provenance
28.2, self compiled, no special distribution
### Emacs command
emacs
### Org version and provenance
9.6.1, straight.el
### org-ql packag…
Fuco1 updated
1 month ago
-
Feature gate: `#![feature(strict_provenance)]`
[read the docs](https://doc.rust-lang.org/nightly/std/ptr/index.html#strict-provenance)
[get the stable polyfill](https://crates.io/crates/sptr…
-
One of the nice things about having a repo like this with version-controlled configurations is that it makes it easier to do provenance tracking. Just having the repo exist is a pretty good start, as …