{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":475074978,"defaultBranch":"main","name":"slsa-github-generator","ownerLogin":"slsa-framework","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2022-03-28T15:57:17.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/80431187?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1713817562.0","currentOid":""},"activityList":{"items":[{"before":"88d8fa6c096d3bbea3d8a843ffaa28b08d7441fb","after":"2f113ffa96f45c20f09c3cd15831d24d32cffa3d","ref":"refs/heads/main","pushedAt":"2024-05-08T14:01:40.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"fix: Update release docs (#3589)\n\n# Summary\r\n\r\nA few fixes and additions to the release docs.\r\n\r\n- fix the `sed` commands\r\n- add Github container registry auth instructions\r\n\r\nrelated PR https://github.com/slsa-framework/slsa-verifier/pull/761\r\n\r\n## Testing Process\r\n\r\nManual testing locally.\r\n\r\n## Checklist\r\n\r\n- [x] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [ ] Add a reference to related issues in the PR description.\r\n- [x] Update documentation if applicable.\r\n- [ ] Add unit tests if applicable.\r\n- [x] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\n---------\r\n\r\nSigned-off-by: Ramon Petgrave \r\nSigned-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>","shortMessageHtmlLink":"fix: Update release docs (#3589)"}},{"before":"799b48e80c5a13bc995cb523a2ebf491a391c876","after":"88d8fa6c096d3bbea3d8a843ffaa28b08d7441fb","ref":"refs/heads/main","pushedAt":"2024-05-07T16:19:30.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"chore(setup-go): update actions/setup-go to resolve the warning (#3604)\n\n# Summary\r\n\r\nUpdate actions/setup-go to v5.0.0 to resolve the warning.\r\n\r\n```\r\nNode.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.\r\n```\r\n\r\n\r\nhttps://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/\r\n\r\nhttps://github.com/actions/setup-go/releases/tag/v5.0.0\r\n\r\n> In scope of this release, we change Nodejs runtime from node16 to\r\nnode20 (https://github.com/actions/setup-go/pull/421).\r\n\r\n## Testing Process\r\n\r\n...\r\n\r\n## Checklist\r\n\r\n- [x] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [ ] Add a reference to related issues in the PR description.\r\n- [ ] Update documentation if applicable.\r\n- [ ] Add unit tests if applicable.\r\n- [ ] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\n---------\r\n\r\nSigned-off-by: Shunsuke Suzuki \r\nCo-authored-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>","shortMessageHtmlLink":"chore(setup-go): update actions/setup-go to resolve the warning (#3604)"}},{"before":"8332e56d482c28cf186c93eec3f8660d937d9554","after":"799b48e80c5a13bc995cb523a2ebf491a391c876","ref":"refs/heads/main","pushedAt":"2024-05-06T16:14:26.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"docs: fix broken links (#3605)\n\n# Summary\r\n\r\nFix broken links.\r\n\r\nNot found.\r\n\r\nhttps://github.com/slsa-framework/slsa-github-generator/CONTRIBUTING.md\r\nhttps://github.com/slsa-framework/slsa-github-generator/CHANGELOG.md\r\n\r\nhttps://github.com/actions/starter-workflows/blob/main/ci/generic-generator-ossf-slsa3-publish.yml\r\n\r\n## Testing Process\r\n\r\n\r\n## Checklist\r\n\r\n- [ ] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [ ] Add a reference to related issues in the PR description.\r\n- [ ] Update documentation if applicable.\r\n- [ ] Add unit tests if applicable.\r\n- [ ] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\nSigned-off-by: Shunsuke Suzuki ","shortMessageHtmlLink":"docs: fix broken links (#3605)"}},{"before":"472fb17d7c6d1af4cd32e8402054e318b63ec904","after":"8332e56d482c28cf186c93eec3f8660d937d9554","ref":"refs/heads/main","pushedAt":"2024-04-24T20:22:30.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"fix: use @sigstore/cli in e2e.sign-attestations.schedule.yml (#3572)\n\n# Summary\r\n\r\nAddresses\r\nhttps://github.com/slsa-framework/slsa-github-generator/issues/3002\r\n\r\nFixes the .github/workflows/e2e.sign-attestations.schedule.yml workflow.\r\nsigstore-js now has its cli tools in a separate package, to be installed\r\nwith `install -g @sigstore/cli`.\r\n\r\n## Testing Process\r\n\r\nInvoked the workflow from my personal fork\r\n\r\n-\r\nhttps://github.com/ramonpetgrave64/slsa-github-generator/actions/runs/8757196289/job/24035331070#step:6:11\r\n\r\n```\r\nVerification succeeded\r\nVerification succeeded\r\n```\r\n\r\nWe can't add this to a pre-submit, because it requires token permissions\r\nthat are not available to forks' PR runs.\r\n\r\n## Checklist\r\n\r\n- [x] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [x] Add a reference to related issues in the PR description.\r\n- [ ] Update documentation if applicable.\r\n- [ ] Add unit tests if applicable.\r\n- [ ] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\n---------\r\n\r\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"fix: use @sigstore/cli in e2e.sign-attestations.schedule.yml (#3572)"}},{"before":"5a775b367a56d5bd118a224a811bba288150a563","after":"472fb17d7c6d1af4cd32e8402054e318b63ec904","ref":"refs/heads/main","pushedAt":"2024-04-22T21:30:23.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"chore: v2.0.0: update tags to v2.0.0 (#3584)\n\n# Summary\r\n\r\nhttps://github.com/slsa-framework/slsa-github-generator/issues/3576\r\n\r\nfollowup to\r\nhttps://github.com/slsa-framework/slsa-github-generator/pull/3578\r\n\r\nnext step in\r\nhttps://github.com/slsa-framework/slsa-github-generator/blob/main/RELEASE.md#reference-actions-at-main\r\n\r\nChanging all the actions to point back to main.\r\n\r\n## Testing Process\r\n\r\npre-submit workflows\r\n\r\n## Checklist\r\n\r\n- [ ] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [ ] Add a reference to related issues in the PR description.\r\n- [ ] Update documentation if applicable.\r\n- [ ] Add unit tests if applicable.\r\n- [ ] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"chore: v2.0.0: update tags to v2.0.0 (#3584)"}},{"before":"41733f74c025cc6d156547121989dd50fbc92364","after":null,"ref":"refs/tags/v2.0.0","pushedAt":"2024-04-22T20:24:51.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"}},{"before":"41733f74c025cc6d156547121989dd50fbc92364","after":null,"ref":"refs/tags/v2.0.0","pushedAt":"2024-04-22T20:18:06.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"}},{"before":"41733f74c025cc6d156547121989dd50fbc92364","after":"5a775b367a56d5bd118a224a811bba288150a563","ref":"refs/heads/main","pushedAt":"2024-04-22T19:51:39.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"chore: v2.0.0: update tags (#3583)\n\n#label:release v2.0.0\r\n\r\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"chore: v2.0.0: update tags (#3583)"}},{"before":"41733f74c025cc6d156547121989dd50fbc92364","after":null,"ref":"refs/tags/v2.0.0-rc.0","pushedAt":"2024-04-18T20:37:09.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"}},{"before":"3789345176c808c7a10e049021fce712d8a0c8b7","after":"41733f74c025cc6d156547121989dd50fbc92364","ref":"refs/heads/main","pushedAt":"2024-04-18T18:02:15.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"chore: v2.0.0-rc.0: update tags (#3578)\n\n#label:release v2.0.0-rc.0\r\n\r\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"chore: v2.0.0-rc.0: update tags (#3578)"}},{"before":"3789345176c808c7a10e049021fce712d8a0c8b7","after":null,"ref":"refs/tags/v2.0.0-rc.0","pushedAt":"2024-04-18T17:56:45.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"}},{"before":null,"after":"fc013c380ad56e8d316ac38deea2900c947607ce","ref":"refs/heads/v2.0.0-rc.0-tag-updates","pushedAt":"2024-04-18T17:53:42.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"update tags\n\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"update tags"}},{"before":"02fc78b979e15ee621875039cb550e5b454b0955","after":"3789345176c808c7a10e049021fce712d8a0c8b7","ref":"refs/heads/main","pushedAt":"2024-04-18T17:44:59.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"docs: v.2.0.0: finalize CHANGELOG.md (#3577)\n\n# Summary\r\n\r\n#3576 \r\n\r\nFirst step before a release, marking all \"Unreleased\" changes in\r\nCHANGELOG.md as \"v2.0.0\"\r\n\r\n## Testing Process\r\n\r\n...\r\n\r\n## Checklist\r\n\r\n- [x] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [x] Add a reference to related issues in the PR description.\r\n- [ ] Update documentation if applicable.\r\n- [ ] Add unit tests if applicable.\r\n- [x] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\n---------\r\n\r\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"docs: v.2.0.0: finalize CHANGELOG.md (#3577)"}},{"before":"79f040bbe638000dad3bff92add0927e1099a0af","after":"72e91e9f516dac79720660da260cbfce3568329f","ref":"refs/heads/v1.11.0-finialize-changelog","pushedAt":"2024-04-18T17:10:25.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"change to 2.0.0\n\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"change to 2.0.0"}},{"before":"5933614ca0695c03dbbd3ad22fab91fb5e97a8a8","after":"79f040bbe638000dad3bff92add0927e1099a0af","ref":"refs/heads/v1.11.0-finialize-changelog","pushedAt":"2024-04-18T17:03:19.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"fix toc\n\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"fix toc"}},{"before":null,"after":"5933614ca0695c03dbbd3ad22fab91fb5e97a8a8","ref":"refs/heads/v1.11.0-finialize-changelog","pushedAt":"2024-04-18T16:51:44.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"finalize changelog\n\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"finalize changelog"}},{"before":"4534a0b24500dfdd11685f2950cba9a35086c4d2","after":"02fc78b979e15ee621875039cb550e5b454b0955","ref":"refs/heads/main","pushedAt":"2024-04-17T18:15:28.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"laurentsimon","name":null,"path":"/laurentsimon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/64505099?s=80&v=4"},"commit":{"message":"fix: deadlock and improve debugging experience (#3570)\n\n# Summary\r\n\r\nFixes #3571. Fixes #3569. Shoutout to @jblebrun who wrote most of the\r\ncode in this PR and debugged this issue together with me.\r\n\r\n\r\n## Testing Process\r\n\r\n...\r\n\r\n## Checklist\r\n\r\n- [ ] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [ ] Add a reference to related issues in the PR description.\r\n- [ ] Update documentation if applicable.\r\n- [ ] Add unit tests if applicable.\r\n- [ ] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\nSigned-off-by: Juliette Pretot \r\nCo-authored-by: Jason LeBrun ","shortMessageHtmlLink":"fix: deadlock and improve debugging experience (#3570)"}},{"before":"66678f6f254fbf670c48c69021842bdf6583b93c","after":"e589ed94cf1984ce7cf7bda0ed88f6530db62d1a","ref":"refs/heads/test-renobvate","pushedAt":"2024-04-04T17:48:26.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"shellcheck\n\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"shellcheck"}},{"before":null,"after":"66678f6f254fbf670c48c69021842bdf6583b93c","ref":"refs/heads/test-renobvate","pushedAt":"2024-04-03T21:55:39.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"test renovate\n\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"test renovate"}},{"before":"e8c2dcff94b830dfe6897c48b7218c85fe6f3eb3","after":"4534a0b24500dfdd11685f2950cba9a35086c4d2","ref":"refs/heads/main","pushedAt":"2024-04-03T16:31:56.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"break: Revert \"chore: Revert \"fix: upload-artifact and download-artifact v4\"\" (#3499)\n\nReverts slsa-framework/slsa-github-generator#3398\r\n\r\nFollowing up with \r\n\r\n- https://github.com/slsa-framework/example-trw/pull/3\r\n- https://github.com/slsa-framework/example-package/pull/340\r\n- https://github.com/slsa-framework/slsa-verifier/pull/719\r\n\r\nSigned-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>","shortMessageHtmlLink":"break: Revert \"chore: Revert \"fix: upload-artifact and download-artif…"}},{"before":"51f2ca0db627607982438609a60b7a0850f60164","after":"897e28ce6b7970b0f068a8c855b63c7215207ec2","ref":"refs/heads/revert-3398-revert-3312-ramonpetgrave64-upload-download-artifact-v4","pushedAt":"2024-04-03T16:21:08.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"differentiate the provenance names, so we don't attempt to overwrite\n\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"differentiate the provenance names, so we don't attempt to overwrite"}},{"before":"23687819b9d80e138155d9673f73dd5da2cb1cf9","after":"51f2ca0db627607982438609a60b7a0850f60164","ref":"refs/heads/revert-3398-revert-3312-ramonpetgrave64-upload-download-artifact-v4","pushedAt":"2024-04-02T17:07:53.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"Revert \"chore: Revert \"fix: upload-artifact and download-artifact v4\" (#3398)\"\n\nThis reverts commit 90f2eb146c8c9600120c49cbfa442fbe4f366ab8.\n\nSigned-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>","shortMessageHtmlLink":"Revert \"chore: Revert \"fix: upload-artifact and download-artifact v4\" ("}},{"before":null,"after":"23687819b9d80e138155d9673f73dd5da2cb1cf9","ref":"refs/heads/revert-3398-revert-3312-ramonpetgrave64-upload-download-artifact-v4","pushedAt":"2024-04-02T15:54:58.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"Revert \"chore: Revert \"fix: upload-artifact and download-artifact v4\" (#3398)\"\n\nThis reverts commit 90f2eb146c8c9600120c49cbfa442fbe4f366ab8.","shortMessageHtmlLink":"Revert \"chore: Revert \"fix: upload-artifact and download-artifact v4\" ("}},{"before":"2512315f2272b7cde8e609d26a55807593c8dc68","after":"e8c2dcff94b830dfe6897c48b7218c85fe6f3eb3","ref":"refs/heads/main","pushedAt":"2024-03-28T22:22:45.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"laurentsimon","name":null,"path":"/laurentsimon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/64505099?s=80&v=4"},"commit":{"message":"fix(deps): Update Sigstore Dep to Sigstore 2.2.2 (#3491)\n\n# Summary\r\nUpdates sigstore version from 1.8 -> 2.2.2 for the root dependency\r\nversion and for the Github Action `sign-attestation`, `verify-token`,\r\nand `setup-generic`.\r\n\r\nPer 1.9, signing options needed to be removed. More information on it\r\nhere on this [Sigstore\r\nIssue](https://github.com/sigstore/sigstore-js/issues/833). This fixes\r\nrevert from #2913\r\n\r\nThe actions were refactored to make use of to explicitly use Sigstore's\r\nindividual functions/types on imports from this [v2.0.0\r\nchange](https://github.com/sigstore/sigstore-js/commit/829e123e822226c16b8155c518521f4acd83a29d)\r\n\r\n## Testing Process\r\n**Testing Removal of Signing Options**\r\nAfter updating `sign-attestation` on a personal workflow pointing to the\r\nbranch. Check it out\r\n[here](https://github.com/enteraga6/bazel_docker_test/actions/runs/8458206728)\r\nAfter updating `verify-token` and `setup-generic` to 1.9, I tested using\r\nthis\r\n[workflow](https://github.com/enteraga6/bazel_docker_test/actions/runs/8459083200).\r\n\r\n**Testing 2.2.2**\r\nAfter updating the actions to Sigstore 2.2.2, I tested using this\r\n[workflow](https://github.com/enteraga6/bazel_docker_test/actions/runs/8464040937).\r\nNote: it says Sigstore 1.9 on workflow title, but it was used to test\r\n2.2.2. I used the same workflow.\r\n\r\n**Final Test**\r\nThis [workflow\r\ntest](https://github.com/enteraga6/bazel_docker_test/actions/runs/8474173065)\r\nshows successful functionality after all the changes.\r\n\r\n## Checklist\r\n\r\n- [x] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [x] Add a reference to related issues in the PR description.\r\n- [x] Update documentation if applicable.\r\n- [x] Add unit tests if applicable.\r\n- [x] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\n---------\r\n\r\nSigned-off-by: Noah Elzner ","shortMessageHtmlLink":"fix(deps): Update Sigstore Dep to Sigstore 2.2.2 (#3491)"}},{"before":"4fbc6a9e127dff1c59d860d84c0234d1b5e3a3e3","after":"2512315f2272b7cde8e609d26a55807593c8dc68","ref":"refs/heads/main","pushedAt":"2024-03-27T17:01:11.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"laurentsimon","name":null,"path":"/laurentsimon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/64505099?s=80&v=4"},"commit":{"message":"feat(breaking): remove attestation-name input and output (#3456)\n\n# Summary\r\n\r\n- Reverting #3399\r\n- Fixes\r\nhttps://github.com/slsa-framework/slsa-github-generator/issues/3031\r\n- Fixes\r\nhttps://github.com/slsa-framework/slsa-github-generator/issues/3072\r\n- Removes the attestation-name input and output from the\r\ngenerator_generic_slsa3.yml, which has been deprecated for\r\nprovenance-name.\r\n\r\n## Testing Process\r\n\r\n- We have existing PR Check workflows that do call the generic-genertor\r\nwth the correct parameters\r\n- example-package e2e2 tests have already been updated to use the new\r\nparameter and are already passing.\r\n\r\n## Checklist\r\n\r\n- [x] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [x] Add a reference to related issues in the PR description.\r\n- [x] Update documentation if applicable.\r\n- [x] Add unit tests if applicable.\r\n- [x] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\nSigned-off-by: Ramon Petgrave ","shortMessageHtmlLink":"feat(breaking): remove attestation-name input and output (#3456)"}},{"before":"8869c8a5155fcf554f5bc8dfa4ac3cae624d8513","after":"4fbc6a9e127dff1c59d860d84c0234d1b5e3a3e3","ref":"refs/heads/main","pushedAt":"2024-03-27T16:10:29.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"laurentsimon","name":null,"path":"/laurentsimon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/64505099?s=80&v=4"},"commit":{"message":"chore: add ramonpetgrave64 to CODEOWNERS (#3490)\n\n# Summary\r\n\r\nadding myself as CODEOWNERS\r\n\r\n## Testing Process\r\n\r\n...\r\n\r\n## Checklist\r\n\r\n- [ ] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [ ] Add a reference to related issues in the PR description.\r\n- [ ] Update documentation if applicable.\r\n- [ ] Add unit tests if applicable.\r\n- [ ] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\nSigned-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>","shortMessageHtmlLink":"chore: add ramonpetgrave64 to CODEOWNERS (#3490)"}},{"before":null,"after":"50e62ffb5971987f71081f759ad4faa14b70c6d9","ref":"refs/heads/ramonpetgrave64-patch-1","pushedAt":"2024-03-27T16:06:15.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"ramonpetgrave64","name":"Ramon Petgrave","path":"/ramonpetgrave64","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/32398091?s=80&v=4"},"commit":{"message":"add ramonpetgrave64 to CODEOWNERS\n\nadding myself as CODEOWNERS\n\nSigned-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>","shortMessageHtmlLink":"add ramonpetgrave64 to CODEOWNERS"}},{"before":"9d81ca7164fc7ec1291ec266552f37bbb9099c6b","after":"8869c8a5155fcf554f5bc8dfa4ac3cae624d8513","ref":"refs/heads/main","pushedAt":"2024-03-26T16:31:14.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"laurentsimon","name":null,"path":"/laurentsimon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/64505099?s=80&v=4"},"commit":{"message":"fix: Switch to newer DSSE rekor type (#3299)\n\nThe intoto v001 type does not persist signatures of the DSSE envelope,\r\nas noted in https://github.com/sigstore/rekor/pull/973. We introduced an\r\nintoto v002 type shortly after to fix this, but since then, we've\r\nintroduced another newer type, DSSE v001, which also does not persist\r\nthe attestation in Rekor (as we discourage using Rekor as storage).\r\n\r\nI also updated the verifier in\r\nhttps://github.com/slsa-framework/slsa-verifier/pull/742 to search for\r\nboth Rekor entry types.\r\n\r\n# Summary\r\n\r\n...\r\n\r\n## Testing Process\r\n\r\n...\r\n\r\n## Checklist\r\n\r\n- [ ] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [ ] Add a reference to related issues in the PR description.\r\n- [ ] Update documentation if applicable.\r\n- [ ] Add unit tests if applicable.\r\n- [ ] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\n---------\r\n\r\nSigned-off-by: Hayden Blauzvern \r\nSigned-off-by: Hayden B \r\nSigned-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>\r\nCo-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>","shortMessageHtmlLink":"fix: Switch to newer DSSE rekor type (#3299)"}},{"before":"d6b8c9f3cf323290338cde46659623ed44f3ea07","after":"9d81ca7164fc7ec1291ec266552f37bbb9099c6b","ref":"refs/heads/main","pushedAt":"2024-03-26T16:26:04.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"laurentsimon","name":null,"path":"/laurentsimon","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/64505099?s=80&v=4"},"commit":{"message":"chore: Update slsa-verifier version (#3454)\n\n# Summary\r\n\r\nUpdate slsa-verifier version\r\n\r\n## Testing Process\r\n\r\nTo LGTM this PR, verify that the sha256 is the same as in the official\r\nrelease page\r\nhttps://github.com/slsa-framework/slsa-verifier/blob/main/SHA256SUM.md\r\n\r\n## Checklist\r\n\r\n- [ ] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [ ] Add a reference to related issues in the PR description.\r\n- [ ] Update documentation if applicable.\r\n- [ ] Add unit tests if applicable.\r\n- [ ] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\n---------\r\n\r\nSigned-off-by: laurentsimon ","shortMessageHtmlLink":"chore: Update slsa-verifier version (#3454)"}},{"before":"c747fe7769adf3656dc7d588b161cb614d7abfee","after":"d6b8c9f3cf323290338cde46659623ed44f3ea07","ref":"refs/heads/main","pushedAt":"2024-03-21T15:48:39.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"kpk47","name":null,"path":"/kpk47","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1079282?s=80&v=4"},"commit":{"message":"chore: Ref to main after v1.10.0 release (#3421)\n\n# Summary\r\n\r\nRef to main after v1.10.0 release. Merging this PR can be done after\r\nrelease\r\n\r\n## Testing Process\r\n\r\n...\r\n\r\n## Checklist\r\n\r\n- [ ] Review the contributing [guidelines](./../CONTRIBUTING.md)\r\n- [ ] Add a reference to related issues in the PR description.\r\n- [ ] Update documentation if applicable.\r\n- [ ] Add unit tests if applicable.\r\n- [ ] Add changes to the [CHANGELOG](./../CHANGELOG.md) if applicable.\r\n\r\n---------\r\n\r\nSigned-off-by: laurentsimon ","shortMessageHtmlLink":"chore: Ref to main after v1.10.0 release (#3421)"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAERLH4HgA","startCursor":null,"endCursor":null}},"title":"Activity · slsa-framework/slsa-github-generator"}