gittuf / gittuf

A security layer for Git repositories
https://gittuf.dev
Apache License 2.0
439 stars 28 forks source link

attestations: Add support for GitHub pull request approval attestation #439

Open adityasaky opened 1 week ago

adityasaky commented 1 week ago

This will change a fair bit with #372.

Also need to wire it up to the CLI.

adityasaky commented 5 days ago

@wlynch I've moved your comments about verify-mergeable over to #455 so this PR can be focused on the github app approval attestation and related functions.

adityasaky commented 1 hour ago

Exploring if we can also track PR numbers here so we can better track dismissals but I think that can happen after this gets merged too.