Skip to content

Issues: slsa-framework/slsa

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
24 Open 7 Closed
24 Open 7 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Should we capture provenance for the control plane? build-environment-track Issues/PRs related to the SLSA BuildEnv track discussion
#1253 opened Dec 4, 2024 by marcelamelara
2
Add figure for build environment lifecycle showing metadata/attestation flows build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1245 opened Nov 19, 2024 by marcelamelara
1
Write detailed requirements/guidance for BuildEnv track build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1243 opened Nov 18, 2024 by marcelamelara
Clarify that it's the CI's control plane that gives it privileged access build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1211 opened Oct 21, 2024 by marcelamelara
Clarify the connection between the Build and BuildEnv tracks build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1210 opened Oct 21, 2024 by marcelamelara
Document implementation of the BuildEnv track for non-Linux environments build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1198 opened Oct 15, 2024 by marcelamelara
Add reference to TPM 2.0 spec defining "Quote" build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1197 opened Oct 15, 2024 by marcelamelara
Explicitly mention that BuildEnv L2 build platform MUST verify the SLSA Provenance OR its VSA. build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1196 opened Oct 15, 2024 by marcelamelara
1
Explicitly note that the build image should be included in the external parameters field of Provenance for artifacts built on BuildEnv platforms build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1195 opened Oct 15, 2024 by marcelamelara
More cleanly separate container vs. VM requirements in BuildEnv L2+ build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1192 opened Oct 15, 2024 by marcelamelara
Cover use case of build environments without a build agent build-environment-track Issues/PRs related to the SLSA BuildEnv track discussion
#1185 opened Oct 11, 2024 by marcelamelara
Link build environment terms to their definitions build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1177 opened Oct 8, 2024 by marcelamelara
1
Clarify that the build executor and agent may not be on the rootfs build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1170 opened Oct 1, 2024 by marcelamelara
Document detailed attested build environment verification flow build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1169 opened Sep 30, 2024 by marcelamelara
2
Attested build environment verification policy should have provenance/integrity guarantees build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1168 opened Sep 30, 2024 by marcelamelara
Cover replay attacks for attested build environments build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1167 opened Sep 30, 2024 by marcelamelara
Clarify what is within the scope of the build agent/executor measurement build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1164 opened Sep 30, 2024 by marcelamelara
How should container-in-VM build environments be attested? build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1151 opened Sep 23, 2024 by marcelamelara
How should builds using multiple container images be attested? build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1150 opened Sep 23, 2024 by marcelamelara
@paveliak
2
Discussion: How does runtime monitoring of a build fit into SLSA? build-environment-track Issues/PRs related to the SLSA BuildEnv track discussion
#1132 opened Sep 17, 2024 by marcelamelara
Attesting to the builds environments of distributed builds build-environment-track Issues/PRs related to the SLSA BuildEnv track
#1122 opened Aug 26, 2024 by marcelamelara
What is the best term to describe a build runtime environment's storage? build-environment-track Issues/PRs related to the SLSA BuildEnv track clarification Clarification of the spec, without changing meaning
#1107 opened Aug 6, 2024 by marcelamelara
@marcelamelara
Clarify where to use SLSA Provenance vs. VSA build-environment-track Issues/PRs related to the SLSA BuildEnv track clarification Clarification of the spec, without changing meaning source-track
#974 opened Oct 3, 2023 by joshuagl
6
Rename "hosted" to "dedicated"? build-environment-track Issues/PRs related to the SLSA BuildEnv track clarification Clarification of the spec, without changing meaning
#947 opened Aug 17, 2023 by MarkLodato
23
ProTip! Exclude everything labeled bug with -label:bug.