commits  

Messages by Thread

• (tooling-trusted-releases) branch main updated (3ca91532 -> 026834ba) sbp
• (tooling-trusted-releases) branch sbp updated: Add conditional queries to perform atomic vote transitions sbp
• (tooling-trusted-releases) branch sbp updated: Add audit logging to key writer methods sbp
• (tooling-trusted-releases) branch main updated (886b4fee -> cbec8f50) sbp
• (tooling-trusted-releases) branch main updated (cbec8f50 -> 3ca91532) sbp
• (tooling-trusted-releases) branch sbp updated: Fix validation of release vote properties sbp
• (tooling-trusted-releases) branch arm updated (6fe8c0e9 -> 55714711) arm
  • (tooling-trusted-releases) 01/02: #1009 - Validate committee key from URL against the form arm
  • (tooling-trusted-releases) 02/02: Inline comment to address worker auth arm
• (tooling-trusted-releases) branch main updated (990ebe2c -> 886b4fee) sbp
• (tooling-trusted-releases) branch sbp updated: Fix an interpolation sbp
• (tooling-trusted-releases) branch arm updated: Inline comment to address worker auth arm
• (tooling-docs) branch main updated: Fix heading sbp
• (tooling-docs) branch main updated (7e42b38 -> bcae95d) sbp
  • (tooling-docs) 01/01: Add the Noisy Secrets draft specification sbp
• (tooling-docs) branch main updated (bcae95d -> 899dfc8) sbp
  • (tooling-docs) 01/01: Add the Noisy Secrets draft specification sbp
• (tooling-docs) branch main updated: Add the Noisy Secrets draft specification sbp
• (tooling-trusted-releases) branch arm updated: #1009 - Validate committee key from URL against the form arm
• (tooling-trusted-releases) branch arm updated (4847ab29 -> 7c1ef86e) arm
• (tooling-trusted-releases) branch main updated (7c1ef86e -> 990ebe2c) sbp
• (tooling-trusted-releases) branch sbp updated (d7a7bc04 -> 990ebe2c) sbp
  • (tooling-trusted-releases) 01/01: Improve the permissions model around bulk key deletion for admins sbp
• (tooling-trusted-releases) branch main updated (e52dce14 -> 7c1ef86e) arm
• (tooling-trusted-releases) branch main updated: #964 - implement constrained safe path type for containment guarantees arm
• (tooling-trusted-releases) branch main updated (7a934b2a -> 3abfd5e8) arm
• (tooling-trusted-releases) branch arm updated (3abfd5e8 -> 4847ab29) arm
• (tooling-trusted-releases) branch safe_paths deleted (was 3abfd5e8) arm
• (tooling-trusted-releases) branch arm updated (7a934b2a -> 3abfd5e8) arm
• (tooling-trusted-releases) branch safe_paths updated (5c6c6515 -> 3abfd5e8) arm
• (tooling-trusted-releases) branch main updated: #1013 - use DB IntegrityError to warn user their project already exists. Fix small form validation bug. arm
• (tooling-trusted-releases) branch arm updated (8c7de341 -> 7a934b2a) arm
• (tooling-trusted-releases) branch arm updated: #1010 - move distribution web validation to work on API calls as well, and support field-level errors in model_validator functions. arm
• (tooling-trusted-releases) branch main updated (e32be309 -> d7a7bc04) sbp
• (tooling-trusted-releases) branch main updated (a20fd81d -> e32be309) sbp
• (tooling-trusted-releases) branch sbp updated: Remove the flag that skips SVN certificate checks sbp
• (tooling-trusted-releases) branch main updated (8c7de341 -> a20fd81d) sbp
• (tooling-trusted-releases) branch sbp updated: Prevent pages from being cached by default sbp
• (tooling-trusted-releases) branch sbp updated (f24a7399 -> a20fd81d) sbp
  • (tooling-trusted-releases) 01/01: Remove a completed reminder to update the Noisy Secrets specification sbp
• (tooling-trusted-releases) branch main updated (f24a7399 -> 8c7de341) arm
• (tooling-trusted-releases) branch arm updated (81ee214c -> 8c7de341) arm
  • (tooling-trusted-releases) 01/01: #1010 - move distribution web validation to work on API calls as well, and support field-level errors in model_validator functions. arm
• (tooling-trusted-releases) branch safe_paths updated (36600088 -> 5c6c6515) arm
• (tooling-trusted-releases) branch safe_paths updated (e96cc590 -> 36600088) arm
• (tooling-agents) branch main updated: Minor fixes akm
• (tooling-agents) branch main updated (1c71cc0 -> 98608bf) akm
  • (tooling-agents) 02/02: Pushing github review code up akm
  • (tooling-agents) 01/02: Renaming dir akm
• (tooling-agents) branch main updated: Updating monitoring akm
• (tooling-trusted-releases) branch main updated (02787d1f -> f24a7399) sbp
• (tooling-trusted-releases) branch main updated (7d013b90 -> 02787d1f) sbp
• (tooling-trusted-releases) branch sbp updated: Improve key deletion methods in the storage interface sbp
• (tooling-trusted-releases) branch sbp updated: Move key association management to the storage interface sbp
• (tooling-agents) branch main updated: Bucketing categories akm
• (tooling-trusted-releases) branch main updated (f6f97de9 -> 7d013b90) sbp
• (tooling-trusted-releases) branch sbp updated: Check LDAP account status during SSH authentication sbp
• (tooling-trusted-releases) branch main updated (3f8e016e -> f6f97de9) sbp
• (tooling-trusted-releases) branch main updated (81ee4cfb -> 3f8e016e) sbp
• (tooling-trusted-releases) branch sbp updated: Remove the admin route that shows environment variables sbp
• (tooling-agents) branch main updated: Trusted publishing, monitoring script akm
• (tooling-trusted-releases) branch main updated (f34f4a0a -> 81ee4cfb) sbp
• (tooling-trusted-releases) branch sbp updated (f9cfcf22 -> 81ee4cfb) sbp
  • (tooling-trusted-releases) 01/01: Add an implementation of Noisy Secrets, and tests sbp
• (tooling-trusted-releases) branch safe_paths updated (b2261127 -> e96cc590) arm
  • (tooling-trusted-releases) 01/02: Initial safe path work arm
• (tooling-trusted-releases) branch arm updated (403efc3c -> f34f4a0a) arm
• (tooling-trusted-releases) branch main updated: Update to MFA-supporting OAuth endpoints arm
• (tooling-trusted-releases) branch sbp updated (3c04a833 -> f9cfcf22) sbp
  • (tooling-trusted-releases) 03/03: Remove the admin route that shows environment variables sbp
  • (tooling-trusted-releases) 02/03: Update dependencies sbp
  • (tooling-trusted-releases) 01/03: Add an implementation of Noisy Secrets, and tests sbp
• (tooling-trusted-releases) branch main updated (eab9c374 -> 403efc3c) arm
• (tooling-trusted-releases) branch safe_paths created (now b2261127) arm
  • (tooling-trusted-releases) 01/02: Initial safe path work arm
• (tooling-trusted-releases) branch sbp updated: Add an implementation of Noisy Secrets, and tests sbp
• (tooling-trusted-releases) branch arm updated (1a979baf -> 403efc3c) arm
  • (tooling-trusted-releases) 01/01: Replace ALLOW_TESTS with dedicated Test config mode. Add additional runtime safety checks. arm
• (tooling-trusted-releases) branch arm updated: Replace ALLOW_TESTS with dedicated Test config mode. Add additional runtime safety checks. arm
• (tooling-trusted-releases) branch mode_updates deleted (was f9990cae) arm
• (tooling-trusted-releases) branch mode_updates updated (93a52190 -> f9990cae) arm
• (tooling-trusted-releases) branch arm updated (bf391606 -> eab9c374) arm
• (tooling-trusted-releases) branch arm created (now bf391606) arm
• (tooling-agents) branch main updated: Update GH workflow analysis code akm
• (tooling-agents) branch main updated: Adding GH workflow analysis akm
• (tooling-trusted-releases) branch main updated (448024d1 -> 7a877399) sbp
• (tooling-trusted-releases) branch main updated (a50d92d9 -> eab9c374) sbp
• (tooling-trusted-releases) branch sbp updated: Remove the pip-audit ignore for CVE-2026-4539 sbp
• (tooling-trusted-releases) branch sbp updated: Handle phase mismatches and add further checking sbp
• (tooling-trusted-releases) branch main updated (ca216273 -> a50d92d9) sbp
• (tooling-trusted-releases) branch main updated (7a877399 -> ca216273) sbp
• (tooling-trusted-releases) branch sbp updated: Constrain allowed phases when creating a revision sbp
• (tooling-trusted-releases) branch sbp updated (6f110cdc -> 7a877399) sbp
  • (tooling-trusted-releases) 01/01: Migrate code from asfpy to the pubsub module sbp
• (tooling-trusted-releases) branch sbp updated (473002ea -> 6f110cdc) sbp
• (tooling-trusted-releases) branch arm updated: #992 - Fix safe types on ignore form arm
• (tooling-trusted-releases) branch mode_updates updated (9727cec0 -> 93a52190) arm
• (tooling-trusted-releases) branch arm updated (065445b5 -> 2ea02fe8) arm
  • (tooling-trusted-releases) 01/01: Remove custom session age checking now we have it in asfquart, and add periodic revalidation of LDAP status arm
• (tooling-trusted-releases) branch arm updated: Remove custom session age checking now we have it in asfquart, and add periodic revalidation of LDAP status arm
• (tooling-trusted-releases) branch session_validation deleted (was e93619bd) arm
• (tooling-trusted-releases) branch arm deleted (was 0686e69c) arm
• (tooling-trusted-releases) branch arm created (now 0686e69c) arm
• (tooling-trusted-releases) branch main updated: Possible LDAP implementation (commit to be updated) arm
• (tooling-trusted-releases) branch main updated: #961 - extract some of the validation for TP configuration into a shared helper arm
• (tooling-trusted-releases) branch trusted_publishing_validation deleted (was d705adcd) arm
• (tooling-trusted-releases) branch mode_updates updated (2c1f348a -> 9727cec0) arm
• (tooling-trusted-releases) branch session_validation updated (a02b8c54 -> e93619bd) arm
• (tooling-trusted-releases) branch mode_updates created (now 2c1f348a) arm
  • (tooling-trusted-releases) 01/01: Replace ALLOW_TESTS with dedicated Test config mode. Add additional runtime safety checks. arm
• (tooling-trusted-releases) branch session_validation updated (56aa22d5 -> a02b8c54) arm
• (tooling-trusted-releases) branch session_validation updated (97eab3a4 -> 56aa22d5) arm
• (tooling-agents) branch main updated: Extraneous comments akm
• (tooling-agents) branch main updated: Sanitizing HTML outside code blocks akm
• (tooling-agents) branch main updated: Finding assignee with @username pattern akm
• (tooling-agents) branch main updated: Improvements to deduping akm
• (tooling-agents) branch main updated: Updated consolidation code, adding github issue filing agent akm
• (tooling-trusted-releases) branch main updated: Update allowlist-check action version test #630 wave
• (tooling-trusted-releases) branch main updated: #988 - add -- separator for sbomqs invocation arm
• (tooling-trusted-releases) branch trusted_publishing_validation updated (6efe7443 -> d705adcd) arm
• (tooling-trusted-releases) branch main updated: Some additional security checks on distribute endpoints and rate limits for a few API operations arm
• (tooling-trusted-releases) branch trusted_publishing_validation created (now 6efe7443) arm
  • (tooling-trusted-releases) 01/01: #961 - extract some of the validation for TP configuration into a shared helper arm
• (tooling-trusted-releases) branch main updated: Minor comment update - closes #960 arm
• (tooling-trusted-releases) branch session_validation created (now 97eab3a4) arm
  • (tooling-trusted-releases) 01/01: Remove custom session age checking now we have it in asfquart, and add periodic revalidation of LDAP status arm
• (tooling-trusted-releases) branch dependabot/github_actions/actions/cache-5.0.4 created (now 93d32038) github-bot
• (tooling-releases-client) branch dependabot/uv/pygments-2.20.0 created (now 255fb31) github-bot
• (tooling-actions) branch dependabot/github_actions/actions/cache-5.0.4 created (now 0b606f5) github-bot
• (tooling-trusted-releases) branch main updated: Update allowlistchecker.yml for action sha wave
• (tooling-releases-client) branch dependabot/github_actions/actions/cache-5.0.4 created (now 9d30ab6) github-bot
• (tooling-releases-client) branch dependabot/github_actions/actions/cache-5.0.3 deleted (was 502b003) github-bot
• (tooling-trusted-releases) branch arm updated (2951bd2e -> 0686e69c) arm
• (tooling-trusted-releases) branch cyclonedx_xml deleted (was 41ff0087) arm
• (tooling-trusted-releases) branch arm updated: Possible LDAP implementation (commit to be updated) arm
• (tooling-trusted-releases) branch main updated: Allow 4 columns on projects page arm
• (tooling-trusted-releases) branch main updated: #918 - allow 4 columns on committee page arm
• (tooling-trusted-releases) branch main updated (9a11abb5 -> 26482870) arm
• (tooling-trusted-releases) branch arm updated (db962304 -> 26482870) arm
  • (tooling-trusted-releases) 01/01: #901 - add support for XML in sbom tooling and conversion from XML to JSON arm
• (tooling-trusted-releases) branch arm updated (2476fed2 -> db962304) arm
  • (tooling-trusted-releases) 01/01: #901 - add support for XML in sbom tooling and conversion from XML to JSON arm
• (tooling-trusted-releases) branch arm updated (95a23912 -> 2476fed2) arm
  • (tooling-trusted-releases) 01/01: #901 - add support for XML in sbom tooling and conversion from XML to JSON arm
• (tooling-trusted-releases) branch dependabot/uv/cryptography-46.0.6 deleted (was 95a23912) github-bot
• (tooling-trusted-releases) branch dependabot/uv/cryptography-46.0.6 updated (5b6da324 -> 95a23912) arm
• (tooling-trusted-releases) branch arm updated: #901 - add support for XML in sbom tooling and conversion from XML to JSON arm
• (tooling-trusted-releases) branch cyclonedx_xml updated (577d3875 -> 41ff0087) arm
• (tooling-trusted-releases) branch main updated (184c8276 -> 9a11abb5) arm
• (tooling-trusted-releases) branch arm updated (f6a4841c -> 9a11abb5) arm
  • (tooling-trusted-releases) 01/01: #931 - tidy up file planner code arm
• (tooling-trusted-releases) branch arm updated (574295b6 -> f6a4841c) arm
  • (tooling-trusted-releases) 01/01: #931 - tidy up file planner code arm
• (tooling-trusted-releases) branch arm updated (692f7790 -> 574295b6) arm
• (tooling-trusted-releases) branch moving_file_ui_to_compose deleted (was 574295b6) arm
• (tooling-trusted-releases) branch moving_file_ui_to_compose updated (984a55a4 -> 574295b6) arm
• (tooling-trusted-releases) branch moving_file_ui_to_compose updated (b4184e1e -> 984a55a4) arm
• (tooling-trusted-releases) branch moving_file_ui_to_compose updated (df3abbc7 -> b4184e1e) arm
• (tooling-trusted-releases) branch arm updated: #919 - remove action buttons from committee page for non-members/admins arm
• (tooling-trusted-releases) branch cyclonedx_xml updated (9055d366 -> 577d3875) arm
• (tooling-trusted-releases) branch arm updated (2fc0d842 -> 184c8276) arm
  • (tooling-trusted-releases) 01/01: apache/tooling-runbooks#21 - add documentation arm
• (tooling-trusted-releases) branch main updated (473002ea -> 184c8276) arm
• (tooling-trusted-releases) branch moving_file_ui_to_compose updated (ae83f94f -> df3abbc7) arm
• (tooling-trusted-releases) branch cyclonedx_xml updated (4ade5457 -> 9055d366) arm
• (tooling-agents) branch main updated: Minor cleanup akm
• (tooling-agents) branch main updated: Pruning skeleton dirs akm
• (tooling-trusted-releases) branch main updated (07c05c28 -> 473002ea) sbp
• (tooling-trusted-releases) branch moving_file_ui_to_compose updated (86d516e2 -> ae83f94f) arm
• (tooling-agents) branch asvs-gofannon-runbooks-and-reports deleted (was 7daee9a) akm
• (tooling-trusted-releases) branch sbp updated: Show how long is left in a vote and when it ends sbp
• (tooling-trusted-releases) branch moving_file_ui_to_compose created (now 86d516e2) arm
  • (tooling-trusted-releases) 01/01: #931 - moving file planner to compose phase arm
• (tooling-trusted-releases) branch cyclonedx_xml updated: #901 - add support for SBOM conversion arm
• (tooling-trusted-releases) branch cyclonedx_xml updated (487a97dd -> 07258157) arm
• (tooling-agents) branch asvs-gofannon-runbooks-and-reports updated (a456dac -> 7daee9a) akm
• (tooling-agents) branch asvs-gofannon-runbooks-and-reports updated (8a85235 -> a456dac) akm
• (tooling-agents) branch asvs-gofannon-runbooks-and-reports created (now 8a85235) akm
• (tooling-trusted-releases) branch main updated (9ae748a6 -> 07c05c28) sbp
• (tooling-trusted-releases) branch sbp updated: Remove the option to apply strict checking sbp
• (tooling-trusted-releases) branch main updated (2e60deba -> 9ae748a6) sbp
• (tooling-trusted-releases) branch sbp updated: Do not allow votes to be resolved, only cancelled, before they end sbp
• (tooling-trusted-releases) branch cyclonedx_xml updated (5e3eda48 -> 487a97dd) arm
• (tooling-trusted-releases) branch cyclonedx_xml updated (a8790218 -> 5e3eda48) arm
• (tooling-trusted-releases) branch arm updated (af4f1024 -> 2fc0d842) arm
  • (tooling-trusted-releases) 01/01: apache/tooling-runbooks#21 - add documentation arm
• (tooling-trusted-releases) branch cyclonedx_xml updated (baca1c0e -> a8790218) arm
  • (tooling-trusted-releases) 01/01: #901 - add support for XML in sbom tooling arm
• (tooling-trusted-releases) branch arm updated: apache/tooling-runbooks#21 - add documentation arm
• (tooling-trusted-releases) branch arm updated (682ff179 -> 2e60deba) arm
• (tooling-trusted-releases) branch cyclonedx_xml created (now baca1c0e) arm
  • (tooling-trusted-releases) 01/01: #901 - add support for XML in sbom tooling arm
• (tooling-trusted-releases) branch main updated (e91560f4 -> 2e60deba) sbp
• (tooling-trusted-releases) branch main updated (68434f0c -> e91560f4) sbp
• (tooling-trusted-releases) branch sbp updated: Extract names when tabulating votes sbp
• (tooling-trusted-releases) branch sbp updated: Update the requests dependency due to CVE-2026-25645 sbp
• (tooling-trusted-releases) branch main updated (26ef4a14 -> 68434f0c) sbp
• (tooling-trusted-releases) branch sbp updated (54315beb -> 68434f0c) sbp
  • (tooling-trusted-releases) 01/01: Allow votes to be cancelled sbp
• (tooling-trusted-releases) branch main updated (5bc8d2ef -> 26ef4a14) sbp

• Earlier messages