Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SLSA v1: Mark as Approved specification #829

Merged
merged 2 commits into from
Apr 18, 2023

Conversation

MarkLodato
Copy link
Member

@MarkLodato MarkLodato commented Apr 12, 2023

  • Mark SLSA v1.0, Provenance v1, and VSA v1 as Approved.
  • Mark release candidates as Retired and hide them from the dropdown.
  • Remove ?draft from predicateType.

Part of #513.

Important: We cannot merge this until Tuesday, April 18, which is after the end of the mandatory two-week review period. In the meantime, please review and approve so that we can merge on the 18th.

Note: This just marks v1.0 as approved. PR #832 sets the default version to v1.0.

@netlify
Copy link

netlify bot commented Apr 12, 2023

Deploy Preview for slsa ready!

Name Link
🔨 Latest commit d978dc9
🔍 Latest deploy log https://app.netlify.com/sites/slsa/deploys/6436bcd4296ace0008c91a59
😎 Deploy Preview https://deploy-preview-829--slsa.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

@MarkLodato MarkLodato mentioned this pull request Apr 12, 2023
7 tasks
docs/_data/versions.yml Outdated Show resolved Hide resolved
docs/_data/versions.yml Outdated Show resolved Hide resolved
docs/_data/versions.yml Outdated Show resolved Hide resolved
Copy link
Member

@lehors lehors left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should point to v1.0 as the current version. I also wonder about the version used for provenance.

@MarkLodato
Copy link
Member Author

MarkLodato commented Apr 12, 2023

We should point to v1.0 as the current version. I also wonder about the version used for provenance.

Yes. I am working on a separate PR for that, which is much bigger. I wanted to separate out the Approval (which is codified in our governance) from changing the default (which is not).

Copy link
Member

@lehors lehors left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

- Mark SLSA v1.0, Provenance v1, and VSA v1 as Approved.
- Mark release candidates as Retired and hide them from the dropdown.
- Remove `?draft` from `predicateType`.

Note: This only marks v1.0 as Approved. A separate PR will set the
default to v1.0.

Signed-off-by: Mark Lodato <lodato@google.com>
Signed-off-by: Mark Lodato <lodato@google.com>
MarkLodato added a commit to MarkLodato/slsa that referenced this pull request Apr 12, 2023
- Make v1.0 the default nav version.
- Update front page to link to v1.0.
- Update redirects to point to v1.0.

Note: This just sets the default version to v1.0. PR slsa-framework#829 marks it as Approved.

Part of slsa-framework#513.

Signed-off-by: Mark Lodato <lodato@google.com>
@MarkLodato MarkLodato marked this pull request as ready for review April 17, 2023 12:22
@MarkLodato MarkLodato requested a review from a team April 17, 2023 12:22
Copy link
Contributor

@TomHennen TomHennen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🥳 🍾

Copy link
Collaborator

@abacchi abacchi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Member

@di di left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎉

Copy link
Contributor

@kpk47 kpk47 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🥳

@MarkLodato
Copy link
Member Author

Merging now. Thanks all!

@MarkLodato MarkLodato merged commit 63e2e99 into slsa-framework:main Apr 18, 2023
@MarkLodato MarkLodato deleted the v1-approval branch April 18, 2023 20:48
chtiangg pushed a commit to chtiangg/slsa that referenced this pull request May 22, 2023
SLSA v1: Mark as Approved specification
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

10 participants