Commits · main · Shawn Webb / Slsa

This project is mirrored from https://github.com/slsa-framework/slsa.git. Pull mirroring updated Jun 27, 2022.

24 Jun, 2022 3 commits
- Merge pull request #408 from abacchi/gitlab-provenance-example · 0b8f6bd1
  Michael Lieberman authored Jun 24, 2022
```
Add GitLab Provenance Example
```
  0b8f6bd1
- updates · 374d3231
  Aaron Bacchi authored Jun 24, 2022
```
Signed-off-by: Aaron Bacchi <aaron.bacchi@gmail.com>
```
  374d3231
- Added GitLab provenance example · eddae440
  Aaron Bacchi authored Jun 24, 2022
```
Signed-off-by: Aaron Bacchi <aaron.bacchi@gmail.com>
```
  eddae440
23 Jun, 2022 2 commits
- Merge pull request #404 from asraa/add-image · 5b13e4dc
  Abhishek Arya authored Jun 23, 2022
```
update: blog post with image of starter workflow
```
  5b13e4dc
- update blog post with image of starter workflow · cdc6ceed
  Asra Ali authored Jun 22, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  cdc6ceed
22 Jun, 2022 3 commits
- Merge pull request #402 from slsa-framework/revert-400-fix-code-color · 57ed5274
  Abhishek Arya authored Jun 21, 2022
```
Fix code color regression, match code block background with code word
```
  57ed5274
- Fix regression, match code block color with word code highlights · 2af9bece
  Abhishek Arya authored Jun 21, 2022
  
  2af9bece
- Revert "fix: code formatting color" · 200b4976
  Abhishek Arya authored Jun 21, 2022
  
  200b4976
21 Jun, 2022 9 commits
- Merge pull request #400 from asraa/fix-code-color · 30cd1e55
  Abhishek Arya authored Jun 21, 2022
```
fix: code formatting color
```
  30cd1e55
- Merge remote-tracking branch 'upstream/main' into fix-code-color · ebcef400
  Asra Ali authored Jun 21, 2022
  
  ebcef400
- fix: code formatting color · e9e10531
  Asra Ali authored Jun 21, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  e9e10531
- fix: code formatting color · c3c39f9a
  Asra Ali authored Jun 21, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  c3c39f9a
- Merge pull request #398 from asraa/slsa-v1-release · 5941f284
  Abhishek Arya authored Jun 21, 2022
```
blog: slsa generator and verifier v1 release
```
  5941f284
- Update 2022-06-20-slsa-github-workflows.md · c954cc86
  Abhishek Arya authored Jun 21, 2022
```
Fix guest post bool
```
  c954cc86
- update the starter workflow · ffd27e8a
  Asra Ali authored Jun 21, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  ffd27e8a
- add image · 95644482
  Asra Ali authored Jun 21, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  95644482
- update version info · 77561f17
  Asra Ali authored Jun 20, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  77561f17
20 Jun, 2022 10 commits
- Add info on availability of starter workflow this week · c5a8b20b
  Asra Ali authored Jun 20, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  c5a8b20b
- Update 2022-06-20-slsa-github-workflows.md · a3557892
  laurentsimon authored Jun 18, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  a3557892
- Change Golang to Go · d0055958
  laurentsimon authored Jun 17, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  d0055958
- Update 2022-06-20-slsa-github-workflows.md · 09808caf
  laurentsimon authored Jun 17, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  09808caf
- Remove v0.2 from provenance URL · fd3269e3
  laurentsimon authored Jun 17, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  fd3269e3
- Rename 2022-06-20-slsa-workflows.md to 2022-06-20-slsa-github-workflows.md · 7a6cd1dd
  laurentsimon authored Jun 17, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  7a6cd1dd
- fix lint · 166ac20b
  Asra Ali authored Jun 15, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  166ac20b
- make updates · e1c0de0b
  Asra Ali authored Jun 15, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  e1c0de0b
- update · c620043d
  Asra Ali authored Jun 13, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  c620043d
- blog post: slsa generator and verifier v1 release · d2d9cadb
  Asra Ali authored Jun 13, 2022
```
Signed-off-by: Asra Ali <asraa@google.com>
```
  d2d9cadb
15 Jun, 2022 2 commits
- Merge pull request #395 from lumjjb/ssdf-blogpost · 4bb78a6f
  Abhishek Arya authored Jun 15, 2022
```
Add SLSA+SSDF blogpost
```
  4bb78a6f
- add SLSA+SSDF blogpost · 0d690204
  Brandon Lum authored Jun 09, 2022
```
Co-authored-by: Joshua Lock <jlock@vmware.com>
Signed-off-by: Brandon Lum <lumjjb@gmail.com>
```
  0d690204
06 Jun, 2022 1 commit
- Merge pull request #391 from lirantal/patch-1 · 58f31a69
  Joshua Lock authored Jun 06, 2022
```
docs: fix typo in description of the build model
```
  58f31a69
02 Jun, 2022 3 commits
- docs: fix typo in description of the build model · cfee5dad
  Liran Tal authored Jun 02, 2022
```
Signed-off-by: Liran Tal <liran.tal@gmail.com>
```
  cfee5dad
- Merge pull request #390 from lehors/main · 328c469c
  Mark Lodato authored Jun 02, 2022
```
Add missing contact address
```
  328c469c
- Add missing contact address · a0e74fe7
  Arnaud J Le Hors authored Jun 02, 2022
```
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
```
  a0e74fe7
31 May, 2022 1 commit
- Merge pull request #386 from joshuagl/joshuagl/build-as-code-368 · 21be3422
  Joshua Lock authored May 31, 2022
```
Refine 'build as code' requirement description
```
  21be3422
23 May, 2022 3 commits

Less verbose "build as code" definition · eb89e57c
Joshua Lock authored May 23, 2022
```
Signed-off-by: Joshua Lock <jlock@vmware.com>
```
eb89e57c

Refine 'build as code' requirement description · c08e6902

Joshua Lock authored May 19, 2022



Refine the text to make it clearer that the recipe and configuration must
be verifiably traceable to text files in an SCM, not necessarily fetched
from the SCM directly by the trusted control plane.

Fixes #368
Signed-off-by: Joshua Lock <jlock@vmware.com>

c08e6902

Merge pull request #381 from MarkLodato/threats-v2 · 07bf3f8f
Mark Lodato authored May 23, 2022
```
Re-label the threat diagram and add descriptions
```
07bf3f8f

20 May, 2022 1 commit
- Merge pull request #385 from slsa-framework/dependabot/bundler/docs/nokogiri-1.13.6 · cdcc0e0f
  Joshua Lock authored May 20, 2022
```
Bump nokogiri from 1.13.4 to 1.13.6 in /docs
```
  cdcc0e0f
19 May, 2022 1 commit

Bump nokogiri from 1.13.4 to 1.13.6 in /docs · 7efcf39c

dependabot[bot] authored May 19, 2022

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.13.4 to 1.13.6.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.13.4...v1.13.6

)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>

7efcf39c

16 May, 2022 1 commit
- Merge pull request #383 from slsa-framework/dependabot/github_actions/actions/setup-node-3.2.0 · 1e8e3ee6
  Mark Lodato authored May 16, 2022
```
Bump actions/setup-node from 3.1.1 to 3.2.0
```
  1e8e3ee6