slsa-framework/slsa-verifier

Issues

• Installer Action Node16 Deprecation Notice

  #806 opened 3 months ago by IAreKyleW00t
  19

• SHA256SUM.md format is messy (not machine friendly)

  #759 opened 9 months ago by udf2457
  2

• [e2e]: vsa gcp gke

  #792 opened 6 months ago by ianlewis
  1

• release.yml: The specified go version file at: go.mod does not exist

  #658 opened 7 months ago by ianlewis
  1

• e2e-cli.sh pre-submit script fails

  #647 opened 7 months ago by ianlewis
  1

• bug: slsa-verifier failing to validate google cloud generated provenance

  #700 opened a year ago by godofredoc
  9

• feat: Enable granular regression tests

  #709 opened 7 months ago by laurentsimon
  6

• Support for SLSA GHA

  #744 opened 10 months ago by laurentsimon
  3

• feat: parse Github Actions provenances with fully specified structs

  #778 opened 7 months ago by ramonpetgrave64
  0

• Support off-line mode for air-gapped environments

  #766 opened 9 months ago by pjbgf
  6

• feat: expose SigstoreTUFClient mocks

  #773 opened 8 months ago by ramonpetgrave64
  1

• feat: npmjs sigstore tuf: use ValidFor.Start and ValidFor.End

  #757 opened 9 months ago by ramonpetgrave64
  0

• Set of verification API

  #756 opened 9 months ago by laurentsimon
  0

• Merge slsa-policy repo with this repo

  #755 opened 9 months ago by laurentsimon
  0

• Support verification of generic builders

  #734 opened a year ago by netomi
  9

• Update e2e tests for `--provenance-repository`

  #739 opened 10 months ago by laurentsimon
  4

• remove setup-go from the codeql-analysis workflow

  #740 opened a year ago by ramonpetgrave64
  1

• Add attestation store option

  #724 opened a year ago by laurentsimon
  7

• Support directory hashes

  #730 opened a year ago by laurentsimon
  12

• [refactor] Don't use go-cmp in non-test code.

  #642 opened a year ago by ianlewis
  0

• Feature: distinction between builder and signer for generators and npm

  #735 opened a year ago by laurentsimon
  0

• Output more verbose information during verification

  #733 opened a year ago by netomi
  0

• Action Required: Fix Renovate Configuration

  #726 opened a year ago by forking-renovate
  0

• Enable pre-release Action installer

  #721 opened a year ago by laurentsimon
  1

• feat: address missed comments in #705

  #707 opened a year ago by laurentsimon
  6

• feat: Rename verifySubjectDigest to verifyPuboishAttestationSubjectDigest

  #711 opened a year ago by laurentsimon
  0

• Take advantage of cosign's modular re-factoring

  #684 opened a year ago by laurentsimon
  1

• buildType "https://github.com/npm/cli/gha/v2" invalid for provenance v0.2 verifier

  #703 opened a year ago by trishankatdatadog
  0

• GCB v1.0 regression tests

  #690 opened a year ago by laurentsimon
  0

• Wrap multiple errors

  #692 opened a year ago by laurentsimon
  0

• GCB v1.0 support

  #683 opened a year ago by laurentsimon
  0

• [feature] Harden maven verifier plugin against command injections

  #665 opened 2 years ago by AdamKorcz
  4

• Make builder ID not compulsory for BYOB builders hosted on our repo

  #659 opened a year ago by laurentsimon
  3

• Support branch for v1 format

  #661 opened a year ago by laurentsimon
  1

• Fix success message for BYOB builders

  #672 opened a year ago by laurentsimon
  0

• Group Maven deps in renovate config

  #679 opened a year ago by laurentsimon
  0

• Add example for Maven plugin pom.xml

  #675 opened a year ago by laurentsimon
  0

• Enable regression tests for BYOB

  #663 opened 2 years ago by laurentsimon
  2

• Enhance the e2e tests to display badges

  #662 opened 2 years ago by laurentsimon
  3

• [docs][byob] Update docs to reflect that --builder-id is not optional for byob

  #656 opened 2 years ago by enteraga6
  7

• Update `--source-versioned-tag` to `--source-semver-tag`

  #655 opened 2 years ago by laurentsimon
  0

• Share v0.2 / v1.0 interfaces among builders

  #652 opened 2 years ago by laurentsimon
  0

• [test] Regenerate multiple subject tests that use builders@main

  #639 opened 2 years ago by asraa
  0

• Add subject digest minimum bit length check

  #630 opened 2 years ago by ianlewis
  2

• [feature]: verify `externalParameters.source` as a string URI

  #626 opened 2 years ago by laurentsimon
  1

• Support tag for JReleaser

  #625 opened 2 years ago by laurentsimon
  0

• Fix code scanning alert - Token-Permissions: .github/workflows/pr-title.yml

  #631 opened 2 years ago by ianlewis
  0

• [feature] verify using `workflow` under `externalParameters` for generators

  #624 opened 2 years ago by laurentsimon
  1

• [feature] verify using `source:URI` under `externalParameters` for builders

  #623 opened 2 years ago by laurentsimon
  0

• verify the TRW is called at a tag

  #617 opened 2 years ago by laurentsimon
  0