issues
search
slsa-framework
/
slsa-verifier
Verify provenance from SLSA compliant builders
Apache License 2.0
214
stars
45
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
fix(deps): update dependency org.apache.maven:maven-core to v3.9.8
#787
renovate-bot
closed
1 day ago
0
chore(deps): update github-actions
#786
renovate-bot
closed
1 day ago
0
chore: fix vuln: override autolinker >= 4.0.0 ^4.0.0
#785
ramonpetgrave64
opened
4 days ago
1
chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates
#784
dependabot[bot]
closed
5 days ago
0
chore: pin yamllint, golangci-lint
#783
ramonpetgrave64
opened
6 days ago
1
chore(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.5 to 0.7.7
#782
dependabot[bot]
closed
6 days ago
0
chore(deps): bump golang.org/x/net from 0.22.0 to 0.23.0
#781
dependabot[bot]
closed
6 days ago
0
chore(deps-dev): bump braces from 3.0.2 to 3.0.3 in /actions/installer
#780
dependabot[bot]
closed
5 days ago
0
chore(deps): bump undici from 5.28.3 to 5.28.4 in /actions/installer
#779
dependabot[bot]
closed
5 days ago
0
feat: parse Github Actions provenances with fully specified structs
#778
ramonpetgrave64
opened
1 week ago
0
feat: vsa support
#777
ramonpetgrave64
opened
1 week ago
11
feat: support npm cli provenance v1 attestations
#776
ramonpetgrave64
opened
4 weeks ago
5
fix(deps): update golang.org/x/exp digest to 7f521ea
#775
renovate-bot
closed
5 days ago
1
chore(deps): update golang:1.21 docker digest to b405b62
#774
renovate-bot
closed
5 days ago
1
feat: expose SigstoreTUFClient mocks
#773
ramonpetgrave64
opened
1 month ago
1
fix: #161: replace prints with logs
#772
ramonpetgrave64
opened
1 month ago
0
fix: use pr_number as env variable
#771
ramonpetgrave64
closed
1 month ago
1
chore: fix pr-title-checker
#770
ianlewis
closed
1 month ago
0
chore: Update Renovate config
#769
ianlewis
closed
1 month ago
1
feat: VerifyNpmPackage API with supplied tuf client
#768
ramonpetgrave64
opened
1 month ago
5
fix: signoff commit
#767
ramonpetgrave64
closed
1 month ago
1
Support off-line mode for air-gapped environments
#766
pjbgf
opened
2 months ago
6
chore(deps): update golang:1.21 docker digest to d83472f
#764
renovate-bot
closed
1 month ago
0
chore(deps): update gcr.io/distroless/base:nonroot docker digest to 53745e9
#763
renovate-bot
closed
1 month ago
1
add MarkLodato to CODEOWNERS
#762
ramonpetgrave64
closed
2 months ago
0
fix: make download-artifacts.sh more flexible
#761
ramonpetgrave64
closed
5 days ago
2
feat: workflow to update actions dist
#760
ramonpetgrave64
closed
1 month ago
4
SHA256SUM.md format is messy (not machine friendly)
#759
udf2457
opened
2 months ago
1
chore: slsa-framework/slsa-github-generator@v2.0.0: add testdata
#758
ramonpetgrave64
closed
2 months ago
3
feat: npmjs sigstore tuf: use ValidFor.Start and ValidFor.End
#757
ramonpetgrave64
opened
2 months ago
0
Set of verification API
#756
laurentsimon
opened
2 months ago
0
Merge slsa-policy repo with this repo
#755
laurentsimon
opened
2 months ago
0
feat: repackage node libs during renovate
#754
ramonpetgrave64
closed
1 month ago
0
chore(deps): update npm dev (major)
#753
ramonpetgrave64
closed
3 months ago
1
fix(deps): update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.11.0
#752
renovate-bot
closed
3 months ago
1
fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.6
#751
renovate-bot
closed
3 months ago
1
feat: add ramonpetgrave64 as CODEOWNER
#750
ramonpetgrave64
closed
3 months ago
2
chore: Update @actions/github v6
#749
laurentsimon
closed
3 months ago
0
chore: Update doc and digests for v2.5.1
#748
laurentsimon
closed
3 months ago
0
feat: Update verifier version in GHA installer
#747
laurentsimon
closed
3 months ago
3
fix: use sigstore/pkg/fulcioroots to lessen deps
#746
ramonpetgrave64
closed
3 months ago
3
feat: Regression tests for builder v1.10.0
#745
laurentsimon
closed
3 months ago
0
Support for SLSA GHA
#744
laurentsimon
opened
3 months ago
3
fix(deps): update module google.golang.org/protobuf to v1.33.0 [security]
#743
renovate-bot
closed
3 months ago
1
feat: Add support for DSSE Rekor type
#742
haydentherapper
closed
4 months ago
1
chore(deps): update github-actions
#741
renovate-bot
closed
3 months ago
0
remove setup-go from the codeql-analysis workflow
#740
ramonpetgrave64
opened
5 months ago
1
Update e2e tests for `--provenance-repository`
#739
laurentsimon
closed
3 months ago
4
fix(deps): update go to 1.21
#738
ramonpetgrave64
closed
5 months ago
1
fix: #642: don't use go-cmp for outputting diff
#737
ramonpetgrave64
closed
5 months ago
0
Next