project-oak/transparent-release issues and pull requests

#231 - Release the verifier instead of the builder

Pull Request - State: closed - Opened by rbehjati over 1 year ago

#230 - Improve package names

Pull Request - State: closed - Opened by rbehjati over 1 year ago

#229 - Better package names in `pkg`

Issue - State: closed - Opened by rbehjati over 1 year ago

#228 - Add Endorsement in Confidential Computing use case

Pull Request - State: closed - Opened by rbehjati over 1 year ago

#227 - Parse SLSA v1 provenances to the internal representation

Pull Request - State: closed - Opened by rbehjati over 1 year ago

#226 - Refactor package common

Pull Request - State: closed - Opened by rbehjati over 1 year ago

#225 - Remove the Amber provenance format

Pull Request - State: closed - Opened by rbehjati over 1 year ago

#224 - Deprecate Amber provenance

Issue - State: closed - Opened by rbehjati over 1 year ago
Labels: Core

#223 - Remove builder

Pull Request - State: closed - Opened by rbehjati over 1 year ago

#222 - Improve the claim-transparency documentation

Issue - State: open - Opened by rbehjati over 1 year ago
Labels: documentation

#221 - Update image and README

Pull Request - State: closed - Opened by rbehjati almost 2 years ago - 1 comment

#220 - Rename the "common" package to a more descriptive name

Issue - State: closed - Opened by rbehjati almost 2 years ago
Labels: Core

#219 - Improve the code to better match Golang style & lints

Pull Request - State: closed - Opened by rbehjati almost 2 years ago - 1 comment

#218 - Expose LoadProvenances

Pull Request - State: closed - Opened by rbehjati almost 2 years ago

#217 - Remove special characters from file names

Pull Request - State: closed - Opened by rbehjati almost 2 years ago

#216 - Refactor endorser - load provenances before endorsement generation

Pull Request - State: closed - Opened by rbehjati almost 2 years ago - 1 comment

#215 - Change `GenerateEndorsement` to take provenances as ProvenanceIR

Issue - State: closed - Opened by rbehjati almost 2 years ago - 1 comment

#214 - Update documentation

Pull Request - State: closed - Opened by mariaschett almost 2 years ago - 2 comments

#213 - Use multierr instead of VerificationResult

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#212 - Add Trusted Builder

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#211 - Add comment on how to add new field and provenance

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#210 - Refactor to generalize endorser

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#209 - Document steps to add a new provenance format and field to `ProvenanceIR`

Issue - State: closed - Opened by mariaschett almost 2 years ago

#208 - Check whether value is present

Pull Request - State: closed - Opened by mariaschett almost 2 years ago - 3 comments

#207 - Verify only values from provenance

Issue - State: closed - Opened by mariaschett almost 2 years ago

#206 - Add simple endorser command line tool

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#205 - Add test where verification with reference values fails

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#204 - Add Provenances SLSA v0.2 test

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#203 - Add test for FromProvenance

Pull Request - State: closed - Opened by rbehjati almost 2 years ago

#202 - Add `WithBuilderImageDigest` to `fromSLSAv02`

Issue - State: closed - Opened by mariaschett almost 2 years ago

#201 - Add FuzzBinder design doc

Pull Request - State: closed - Opened by MarahGamdou almost 2 years ago - 2 comments

#200 - Verify that a provenance is signed by a Trusted Builder

Issue - State: open - Opened by mariaschett almost 2 years ago
Labels: endorser

#199 - Verify Provenance is built by a Trusted Builder

Issue - State: closed - Opened by mariaschett almost 2 years ago

#198 - Use Reference Values in tests

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#197 - Extend Tests of Generate Endorser using Reference Values

Issue - State: closed - Opened by mariaschett almost 2 years ago - 1 comment

#196 - Add check for Repo URIs

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#195 - Check that crash detection is generalizable for all types of crashes

Issue - State: open - Opened by MarahGamdou almost 2 years ago
Labels: fuzzbinder

#194 - Remove duplicated types

Pull Request - State: closed - Opened by rbehjati almost 2 years ago - 3 comments

#193 - Extract fuzz-target path in FuzzBinder

Pull Request - State: closed - Opened by MarahGamdou almost 2 years ago - 1 comment

#192 - Add verification step URI of repo

Issue - State: closed - Opened by mariaschett almost 2 years ago

#191 - Add `buildType` to `ProvenanceIR`

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#190 - Add `buildType` to `ProvenanceIR`

Issue - State: closed - Opened by mariaschett almost 2 years ago

#189 - Refactor Internal Endorser

Pull Request - State: closed - Opened by mariaschett almost 2 years ago - 1 comment

#188 - Use cmp in tests

Issue - State: open - Opened by rbehjati almost 2 years ago
Labels: good first issue, Core

#187 - Better follow the go-style guide throughout

Issue - State: open - Opened by rbehjati almost 2 years ago
Labels: good first issue, Core

#186 - Use option pattern on `ProvenanceIR`

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#185 - Add References Values

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#184 - Use `multierr` instead of `VerificationResult`

Issue - State: closed - Opened by mariaschett almost 2 years ago

#183 - Add validity period as input for FuzzBinder

Pull Request - State: closed - Opened by MarahGamdou almost 2 years ago - 3 comments

#182 - Validate the fuzzing date in FuzzBinder

Pull Request - State: closed - Opened by MarahGamdou almost 2 years ago - 1 comment

#181 - Encapsulate GCS connection into one struct to use it to apply dependency inversion

Pull Request - State: closed - Opened by MarahGamdou almost 2 years ago - 1 comment

#180 - Encapsulate GCS connection into one struct to use it to apply dependency inversion

Pull Request - State: closed - Opened by MarahGamdou almost 2 years ago

#179 - Encapsulate GCS connection into one struct to use it to apply dependency inversion

Pull Request - State: closed - Opened by MarahGamdou almost 2 years ago

#178 - Add Builder Image Digest

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#177 - Add fuzz-target path extraction to FuzzBinder

Issue - State: closed - Opened by MarahGamdou almost 2 years ago

#176 - Check the date range in FuzzBinder

Issue - State: closed - Opened by MarahGamdou almost 2 years ago

#175 - Remove fuzzEngine and sanitizer from FuzzBinder inputs

Issue - State: open - Opened by MarahGamdou almost 2 years ago
Labels: fuzzbinder

#174 - Replace GCS path by Ent path in FuzzClaim evidences

Issue - State: open - Opened by MarahGamdou almost 2 years ago
Labels: fuzzbinder

#173 - Add validity duration as an input parameter for the FuzzClaims

Issue - State: closed - Opened by MarahGamdou almost 2 years ago

#172 - Rename functions that take a lot of computation in FuzzBinder

Issue - State: open - Opened by MarahGamdou almost 2 years ago
Labels: fuzzbinder

#171 - Split functionality for PerTarget / PerProject in FuzzBinder

Issue - State: open - Opened by MarahGamdou almost 2 years ago
Labels: fuzzbinder

#170 - Get `ReferenceValues`

Issue - State: closed - Opened by mariaschett almost 2 years ago

#169 - Fix links in transparent-release and verifier readme

Pull Request - State: closed - Opened by MarahGamdou almost 2 years ago

#168 - Add FuzzBinder cmd line tool

Pull Request - State: closed - Opened by MarahGamdou almost 2 years ago - 1 comment

#167 - Add validated provenance and reference values

Pull Request - State: closed - Opened by mariaschett almost 2 years ago - 1 comment

#166 - Add `ValidatedReferenceValues` and `ValidatedProvenanceValues`

Issue - State: closed - Opened by mariaschett almost 2 years ago - 11 comments

#165 - Generalize `endorser` to work on `ProvenanceIR`

Issue - State: closed - Opened by mariaschett almost 2 years ago - 5 comments

#164 - Add build cmd not empty

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#163 - Add `VerifyResult`

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#162 - Change type of `Verify`

Issue - State: closed - Opened by mariaschett almost 2 years ago - 5 comments

#161 - Refactor ReproducibleProvenanceVerifier

Pull Request - State: closed - Opened by mariaschett almost 2 years ago

#160 - Format using golines

Pull Request - State: closed - Opened by MarahGamdou almost 2 years ago

#159 - Add internal/intermediate struct for provenance data

Pull Request - State: closed - Opened by mariaschett almost 2 years ago - 3 comments

#158 - transparent-release tool does not print logs while executing a build

Issue - State: closed - Opened by tiziano88 about 2 years ago - 1 comment

#157 - Remove issuer from example

Pull Request - State: closed - Opened by rbehjati about 2 years ago

#156 - Replace the use of Amber provenance with the generic SLSA provenance …

Pull Request - State: closed - Opened by rbehjati about 2 years ago

#155 - Add fuzzscraper to fuzzbinder

Pull Request - State: closed - Opened by MarahGamdou about 2 years ago - 1 comment

#145 - Create a new builder cmd to support new Docker-Based Builder type

Issue - State: closed - Opened by asraa about 2 years ago - 6 comments

#144 - Set the name in the endorsement

Issue - State: closed - Opened by rbehjati about 2 years ago - 2 comments
Labels: Core

#141 - Add library for generating endorsements

Issue - State: open - Opened by rbehjati about 2 years ago - 3 comments
Labels: Core

#111 - Add invocation to BuildConfig

Pull Request - State: closed - Opened by rbehjati over 2 years ago - 1 comment

#103 - Automatically copy over output of endorsement-release binary into output_policy_examples/...

Issue - State: closed - Opened by aferr over 2 years ago

#102 - Choose some conventions for writing authorization logic and make the auth logic code consistent with this convention.

Issue - State: closed - Opened by aferr over 2 years ago
Labels: AuthorizationLogic

#97 - Add trusted builder key to Endorsement Release Authorization Logic Policy

Issue - State: closed - Opened by aferr over 2 years ago - 1 comment

#95 - Generate endorsement file if authorization logic query passes

Issue - State: closed - Opened by aferr over 2 years ago - 7 comments

#91 - Authorization Logic for Endorsement File Release.

Issue - State: closed - Opened by aferr over 2 years ago - 1 comment
Labels: AuthorizationLogic

#90 - Possibly simplify `rekor_verifier_policy.auth.tmpl`

Issue - State: closed - Opened by aferr over 2 years ago
Labels: AuthorizationLogic

#89 - Consider changing the "Endorsement" principal to one representing a product team

Issue - State: closed - Opened by aferr over 2 years ago

#87 - Fix quirks with directory and file paths in experimental/auth-logic

Issue - State: closed - Opened by aferr over 2 years ago

#81 - Refactor Auth Logic Wrappers to Mostly Use Bytes

Issue - State: closed - Opened by aferr over 2 years ago

#80 - Add Instructions for preparing a Rekor entry using KMS to generate signatures

Issue - State: closed - Opened by aferr over 2 years ago

#74 - Make library for unpacking rekor entries more flexible, if actually needed for our use cases

Issue - State: closed - Opened by aferr over 2 years ago

#60 - Restore Working Directory in FetchSourcesFromRepo and Verify

Issue - State: closed - Opened by aferr over 2 years ago - 3 comments
Labels: Core

#59 - Refactor to Enforce Principal Name Sanitization

Issue - State: closed - Opened by aferr over 2 years ago - 1 comment

#58 - Sanitized Names Can Collide

Issue - State: closed - Opened by aferr over 2 years ago

#57 - The input toml file should contain the name of released binary

Issue - State: closed - Opened by rbehjati over 2 years ago - 2 comments
Labels: Core

#53 - Use Standard Package Layout for Auth Logic Subdirectory.

Issue - State: closed - Opened by aferr over 2 years ago - 4 comments

#49 - Add Library Function for Concatenation

Issue - State: closed - Opened by aferr over 2 years ago - 2 comments

#25 - Transparent Release CLI producing different builds than manual Oak builds

Issue - State: closed - Opened by jul-sh almost 3 years ago - 14 comments
Labels: bug

#6 - Add actions GitHub actions to validate schema examples against the respective schema

Issue - State: closed - Opened by jul-sh almost 3 years ago

GitHub / project-oak/transparent-release issues and pull requests