Skip to content

Issues: asraa/slsa-on-github

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

22 Open 9 Closed
22 Open 9 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

use API or HTTP client for workflow fetch
#75 opened Feb 26, 2022 by laurentsimon
Additional fields to validate (?)
#74 opened Feb 26, 2022 by laurentsimon
2
Add unit tests for provenance verification given a list of matching UUIDs for Subject.Digest
#70 opened Feb 24, 2022 by asraa
Cleanup un-needed artifacts
#66 opened Feb 24, 2022 by asraa
Create e2e test
#65 opened Feb 24, 2022 by laurentsimon
Search for provenance on rekor
#59 opened Feb 23, 2022 by asraa
1
Check that the re-usable workflow is pinned by hash during validation
#57 opened Feb 22, 2022 by laurentsimon
Investigate the use of stdin indirection to reduce chance of print by builder
#53 opened Feb 22, 2022 by laurentsimon
@laurentsimon
1
harden prov args
#49 opened Feb 18, 2022 by laurentsimon
@laurentsimon
7
Prohibit empty env:` variable during verification
#48 opened Feb 17, 2022 by laurentsimon
Audit sensitive fields in GITHUB_CONTEXT
#39 opened Feb 16, 2022 by asraa
All variables inside double quotes
#35 opened Feb 15, 2022 by laurentsimon
Cleanup our directory structure
#32 opened Feb 15, 2022 by laurentsimon
@laurentsimon
3
use default arguments
#20 opened Feb 10, 2022 by laurentsimon
Fetching golang deps with go get vs go mod vendor
#15 opened Feb 7, 2022 by asraa
Verify that the binary uploaded by the build step matches the one consumed by the provenance generator
#13 opened Feb 7, 2022 by asraa
Call generator in a run step
#12 opened Feb 7, 2022 by asraa
Remove default repo-token argument from action
#10 opened Feb 7, 2022 by laurentsimon
Make a provenance verification script
#4 opened Nov 10, 2021 by asraa
Build tool to create in-toto attestation from build transcript
#3 opened Nov 10, 2021 by asraa
@asraa
Create a slsa-release.yml workflow
#2 opened Nov 10, 2021 by asraa
Create a slsa-scorecard.yml workflow
#1 opened Nov 10, 2021 by asraa
3
ProTip! Type g i on any issue or pull request to go back to the issue listing page.