Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generate provenance #894

Closed
kamadorueda opened this issue Sep 6, 2022 · 0 comments
Closed

Generate provenance #894

kamadorueda opened this issue Sep 6, 2022 · 0 comments

Comments

@kamadorueda
Copy link
Contributor

As SLSA recommends: https://slsa.dev/spec/v0.1/requirements#provenance-requirements

kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 6, 2022
- Generate the fields that are easy to generate
  from the information we have
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 6, 2022
- Create a Config composite type
- Split main function into some steps
- The reason for this change is that
  we are just at the limit of the length
  of the `cli` function and I cannot add
  any more code without the linter yelling at me
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 6, 2022
- Create a Config composite type
- Split main function into some steps
- The reason for this change is that
  we are just at the limit of the length
  of the `cli` function and I cannot add
  any more code without the linter yelling at me
kamadorueda added a commit that referenced this issue Sep 6, 2022
refac(back): #894 split function
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 6, 2022
- Generate some basic fields of provenance that
  are easy to collect from the environment
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 6, 2022
- Generate some basic fields of provenance that
  are easy to collect from the environment
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 6, 2022
- Generate some basic fields of provenance that
  are easy to collect from the environment
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 6, 2022
- Generate some basic fields of provenance that
  are easy to collect from the environment
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 6, 2022
- Generate some basic fields of provenance that
  are easy to collect from the environment
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 6, 2022
- Generate some basic fields of provenance that
  are easy to collect from the environment
kamadorueda added a commit that referenced this issue Sep 6, 2022
feat(back): #894 generate provenance
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 7, 2022
- This way its integrity is guaranteed
- Polish a little bit the logs,
  this way even if a builder prints a fake
  provenance path or hash, or tries to hack
  its value by moving the terminal cursor,
  the real provenance will come after
  and clarify which one should a user believe to
  (the last)
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 7, 2022
- This way its integrity is guaranteed
- Polish a little bit the logs
kamadorueda added a commit that referenced this issue Sep 7, 2022
feat(back): #894 hash the provenance
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 7, 2022
- Add a better source identifier
- Fix the entrypoint and parameters
- Make the provenance have .json extension
kamadorueda added a commit that referenced this issue Sep 7, 2022
kamadorueda added a commit to kamadorueda/makes that referenced this issue Sep 8, 2022
- The previous environment variable may contain
  a temporary user and password generated by gitlab
  while clonning the repository, so lets use
  another variable witohut it
kamadorueda added a commit that referenced this issue Sep 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

No branches or pull requests

1 participant