commits

Messages by Date

2026/04/02 (tooling-agents) branch main updated (1c71cc0 -> 98608bf) akm
2026/04/02 (tooling-agents) 02/02: Pushing github review code up akm
2026/04/02 (tooling-agents) branch main updated: Updating monitoring akm
2026/04/02 (tooling-trusted-releases) branch main updated (02787d1f -> f24a7399) sbp
2026/04/02 (tooling-trusted-releases) branch main updated (7d013b90 -> 02787d1f) sbp
2026/04/02 (tooling-trusted-releases) branch sbp updated: Improve key deletion methods in the storage interface sbp
2026/04/02 (tooling-trusted-releases) branch sbp updated: Move key association management to the storage interface sbp
2026/04/02 (tooling-agents) branch main updated: Bucketing categories akm
2026/04/02 (tooling-trusted-releases) branch main updated (f6f97de9 -> 7d013b90) sbp
2026/04/02 (tooling-trusted-releases) branch sbp updated: Check LDAP account status during SSH authentication sbp
2026/04/02 (tooling-trusted-releases) branch main updated (3f8e016e -> f6f97de9) sbp
2026/04/02 (tooling-trusted-releases) branch main updated (81ee4cfb -> 3f8e016e) sbp
2026/04/02 (tooling-trusted-releases) branch sbp updated: Remove the admin route that shows environment variables sbp
2026/04/02 (tooling-agents) branch main updated: Trusted publishing, monitoring script akm
2026/04/02 (tooling-trusted-releases) branch sbp updated: Update dependencies sbp
2026/04/02 (tooling-trusted-releases) branch main updated (f34f4a0a -> 81ee4cfb) sbp
2026/04/02 (tooling-trusted-releases) 01/01: Add an implementation of Noisy Secrets, and tests sbp
2026/04/02 (tooling-trusted-releases) branch sbp updated (f9cfcf22 -> 81ee4cfb) sbp
2026/04/02 (tooling-trusted-releases) 01/02: Initial safe path work arm
2026/04/02 (tooling-trusted-releases) branch safe_paths updated (b2261127 -> e96cc590) arm
2026/04/02 (tooling-trusted-releases) branch arm updated (403efc3c -> f34f4a0a) arm
2026/04/02 (tooling-trusted-releases) branch main updated: Update to MFA-supporting OAuth endpoints arm
2026/04/02 (tooling-trusted-releases) 01/03: Add an implementation of Noisy Secrets, and tests sbp
2026/04/02 (tooling-trusted-releases) branch sbp updated (3c04a833 -> f9cfcf22) sbp
2026/04/02 (tooling-trusted-releases) 02/03: Update dependencies sbp
2026/04/02 (tooling-trusted-releases) 03/03: Remove the admin route that shows environment variables sbp
2026/04/02 (tooling-trusted-releases) branch main updated (eab9c374 -> 403efc3c) arm
2026/04/02 (tooling-trusted-releases) 01/02: Initial safe path work arm
2026/04/02 (tooling-trusted-releases) branch safe_paths created (now b2261127) arm
2026/04/02 (tooling-trusted-releases) branch sbp updated: Update dependencies sbp
2026/04/02 (tooling-trusted-releases) branch sbp updated: Add an implementation of Noisy Secrets, and tests sbp
2026/04/02 (tooling-trusted-releases) 01/01: Replace ALLOW_TESTS with dedicated Test config mode. Add additional runtime safety checks. arm
2026/04/02 (tooling-trusted-releases) branch arm updated (1a979baf -> 403efc3c) arm
2026/04/02 (tooling-trusted-releases) branch arm updated: Replace ALLOW_TESTS with dedicated Test config mode. Add additional runtime safety checks. arm
2026/04/02 (tooling-trusted-releases) branch mode_updates deleted (was f9990cae) arm
2026/04/02 (tooling-trusted-releases) branch mode_updates updated (93a52190 -> f9990cae) arm
2026/04/02 (tooling-trusted-releases) branch arm updated (bf391606 -> eab9c374) arm
2026/04/02 (tooling-trusted-releases) branch arm created (now bf391606) arm
2026/04/01 (tooling-agents) branch main updated: Update GH workflow analysis code akm
2026/04/01 (tooling-agents) branch main updated: Adding GH workflow analysis akm
2026/04/01 (tooling-trusted-releases) branch main updated (448024d1 -> 7a877399) sbp
2026/04/01 (tooling-trusted-releases) branch main updated (a50d92d9 -> eab9c374) sbp
2026/04/01 (tooling-trusted-releases) branch sbp updated: Remove the pip-audit ignore for CVE-2026-4539 sbp
2026/04/01 (tooling-trusted-releases) branch sbp updated: Handle phase mismatches and add further checking sbp
2026/04/01 (tooling-trusted-releases) branch main updated (ca216273 -> a50d92d9) sbp
2026/04/01 (tooling-trusted-releases) branch main updated (7a877399 -> ca216273) sbp
2026/04/01 (tooling-trusted-releases) branch sbp updated: Constrain allowed phases when creating a revision sbp
2026/04/01 (tooling-trusted-releases) 01/01: Migrate code from asfpy to the pubsub module sbp
2026/04/01 (tooling-trusted-releases) branch sbp updated (6f110cdc -> 7a877399) sbp
2026/04/01 (tooling-trusted-releases) branch sbp updated (473002ea -> 6f110cdc) sbp
2026/04/01 (tooling-trusted-releases) 01/01: Remove custom session age checking now we have it in asfquart, and add periodic revalidation of LDAP status arm
2026/04/01 (tooling-trusted-releases) branch arm updated: #992 - Fix safe types on ignore form arm
2026/04/01 (tooling-trusted-releases) branch mode_updates updated (9727cec0 -> 93a52190) arm
2026/04/01 (tooling-trusted-releases) branch arm updated (065445b5 -> 2ea02fe8) arm
2026/04/01 (tooling-trusted-releases) branch arm updated: Remove custom session age checking now we have it in asfquart, and add periodic revalidation of LDAP status arm
2026/04/01 (tooling-trusted-releases) branch session_validation deleted (was e93619bd) arm
2026/04/01 (tooling-trusted-releases) branch arm deleted (was 0686e69c) arm
2026/04/01 (tooling-trusted-releases) branch arm created (now 0686e69c) arm
2026/04/01 (tooling-trusted-releases) branch main updated: Possible LDAP implementation (commit to be updated) arm
2026/04/01 (tooling-trusted-releases) branch main updated: #961 - extract some of the validation for TP configuration into a shared helper arm
2026/04/01 (tooling-trusted-releases) branch trusted_publishing_validation deleted (was d705adcd) arm
2026/04/01 (tooling-trusted-releases) branch mode_updates updated (2c1f348a -> 9727cec0) arm
2026/04/01 (tooling-trusted-releases) branch session_validation updated (a02b8c54 -> e93619bd) arm
2026/04/01 (tooling-trusted-releases) 01/01: Replace ALLOW_TESTS with dedicated Test config mode. Add additional runtime safety checks. arm
2026/04/01 (tooling-trusted-releases) branch mode_updates created (now 2c1f348a) arm
2026/04/01 (tooling-trusted-releases) branch session_validation updated (56aa22d5 -> a02b8c54) arm
2026/04/01 (tooling-trusted-releases) branch session_validation updated (97eab3a4 -> 56aa22d5) arm
2026/04/01 (tooling-agents) branch main updated: Extraneous comments akm
2026/04/01 (tooling-agents) branch main updated: Sanitizing HTML outside code blocks akm
2026/03/31 (tooling-agents) branch main updated: Finding assignee with @username pattern akm
2026/03/31 (tooling-agents) branch main updated: Improvements to deduping akm
2026/03/31 (tooling-agents) branch main updated: Updated consolidation code, adding github issue filing agent akm
2026/03/31 (tooling-trusted-releases) branch main updated: Update allowlist-check action version test #630 wave
2026/03/31 (tooling-trusted-releases) branch main updated: #988 - add -- separator for sbomqs invocation arm
2026/03/31 (tooling-trusted-releases) branch trusted_publishing_validation updated (6efe7443 -> d705adcd) arm
2026/03/31 (tooling-trusted-releases) branch main updated: Some additional security checks on distribute endpoints and rate limits for a few API operations arm
2026/03/31 (tooling-trusted-releases) branch trusted_publishing_validation created (now 6efe7443) arm
2026/03/31 (tooling-trusted-releases) 01/01: #961 - extract some of the validation for TP configuration into a shared helper arm
2026/03/31 (tooling-trusted-releases) branch main updated: Minor comment update - closes #960 arm
2026/03/31 (tooling-trusted-releases) 01/01: Remove custom session age checking now we have it in asfquart, and add periodic revalidation of LDAP status arm
2026/03/31 (tooling-trusted-releases) branch session_validation created (now 97eab3a4) arm
2026/03/30 (tooling-trusted-releases) branch dependabot/github_actions/actions/cache-5.0.4 created (now 93d32038) github-bot
2026/03/30 (tooling-releases-client) branch dependabot/uv/pygments-2.20.0 created (now 255fb31) github-bot
2026/03/30 (tooling-actions) branch dependabot/github_actions/actions/cache-5.0.4 created (now 0b606f5) github-bot
2026/03/30 (tooling-trusted-releases) branch main updated: Update allowlistchecker.yml for action sha wave
2026/03/30 (tooling-releases-client) branch dependabot/github_actions/actions/cache-5.0.4 created (now 9d30ab6) github-bot
2026/03/30 (tooling-releases-client) branch dependabot/github_actions/actions/cache-5.0.3 deleted (was 502b003) github-bot
2026/03/30 (tooling-trusted-releases) branch arm updated (2951bd2e -> 0686e69c) arm
2026/03/30 (tooling-trusted-releases) branch cyclonedx_xml deleted (was 41ff0087) arm
2026/03/30 (tooling-trusted-releases) branch arm updated: Possible LDAP implementation (commit to be updated) arm
2026/03/30 (tooling-trusted-releases) branch main updated: Allow 4 columns on projects page arm
2026/03/30 (tooling-trusted-releases) branch main updated: #918 - allow 4 columns on committee page arm
2026/03/30 (tooling-trusted-releases) branch main updated (9a11abb5 -> 26482870) arm
2026/03/30 (tooling-trusted-releases) 01/01: #901 - add support for XML in sbom tooling and conversion from XML to JSON arm
2026/03/30 (tooling-trusted-releases) branch arm updated (db962304 -> 26482870) arm
2026/03/30 (tooling-trusted-releases) branch arm updated (2476fed2 -> db962304) arm
2026/03/30 (tooling-trusted-releases) 01/01: #901 - add support for XML in sbom tooling and conversion from XML to JSON arm
2026/03/30 (tooling-trusted-releases) branch arm updated (95a23912 -> 2476fed2) arm
2026/03/30 (tooling-trusted-releases) 01/01: #901 - add support for XML in sbom tooling and conversion from XML to JSON arm
2026/03/30 (tooling-trusted-releases) branch dependabot/uv/cryptography-46.0.6 deleted (was 95a23912) github-bot
2026/03/30 (tooling-trusted-releases) branch dependabot/uv/cryptography-46.0.6 updated (5b6da324 -> 95a23912) arm
2026/03/30 (tooling-trusted-releases) branch arm updated: #901 - add support for XML in sbom tooling and conversion from XML to JSON arm
2026/03/27 (tooling-trusted-releases) branch cyclonedx_xml updated (577d3875 -> 41ff0087) arm
2026/03/27 (tooling-trusted-releases) branch main updated (184c8276 -> 9a11abb5) arm
2026/03/27 (tooling-trusted-releases) 01/01: #931 - tidy up file planner code arm
2026/03/27 (tooling-trusted-releases) branch arm updated (f6a4841c -> 9a11abb5) arm
2026/03/27 (tooling-trusted-releases) branch arm updated (574295b6 -> f6a4841c) arm
2026/03/27 (tooling-trusted-releases) 01/01: #931 - tidy up file planner code arm
2026/03/27 (tooling-trusted-releases) branch arm updated (692f7790 -> 574295b6) arm
2026/03/27 (tooling-trusted-releases) branch moving_file_ui_to_compose deleted (was 574295b6) arm
2026/03/27 (tooling-trusted-releases) branch moving_file_ui_to_compose updated (984a55a4 -> 574295b6) arm
2026/03/27 (tooling-trusted-releases) branch moving_file_ui_to_compose updated (b4184e1e -> 984a55a4) arm
2026/03/27 (tooling-trusted-releases) branch moving_file_ui_to_compose updated (df3abbc7 -> b4184e1e) arm
2026/03/27 (tooling-trusted-releases) branch arm updated: #919 - remove action buttons from committee page for non-members/admins arm
2026/03/27 (tooling-trusted-releases) branch cyclonedx_xml updated (9055d366 -> 577d3875) arm
2026/03/27 (tooling-trusted-releases) branch arm updated (2fc0d842 -> 184c8276) arm
2026/03/27 (tooling-trusted-releases) branch main updated (473002ea -> 184c8276) arm
2026/03/27 (tooling-trusted-releases) 01/01: apache/tooling-runbooks#21 - add documentation arm
2026/03/27 (tooling-trusted-releases) branch moving_file_ui_to_compose updated (ae83f94f -> df3abbc7) arm
2026/03/27 (tooling-trusted-releases) branch cyclonedx_xml updated (4ade5457 -> 9055d366) arm
2026/03/26 (tooling-agents) branch main updated: Minor cleanup akm
2026/03/26 (tooling-agents) branch main updated: Pruning skeleton dirs akm
2026/03/26 (tooling-trusted-releases) branch main updated (07c05c28 -> 473002ea) sbp
2026/03/26 (tooling-trusted-releases) branch moving_file_ui_to_compose updated (86d516e2 -> ae83f94f) arm
2026/03/26 (tooling-agents) branch asvs-gofannon-runbooks-and-reports deleted (was 7daee9a) akm
2026/03/26 (tooling-trusted-releases) branch sbp updated: Show how long is left in a vote and when it ends sbp
2026/03/26 (tooling-trusted-releases) 01/01: #931 - moving file planner to compose phase arm
2026/03/26 (tooling-trusted-releases) branch moving_file_ui_to_compose created (now 86d516e2) arm
2026/03/26 (tooling-trusted-releases) branch cyclonedx_xml updated: #901 - add support for SBOM conversion arm
2026/03/26 (tooling-trusted-releases) branch cyclonedx_xml updated (487a97dd -> 07258157) arm
2026/03/26 (tooling-agents) branch asvs-gofannon-runbooks-and-reports updated (a456dac -> 7daee9a) akm
2026/03/25 (tooling-agents) branch asvs-gofannon-runbooks-and-reports updated (8a85235 -> a456dac) akm
2026/03/25 (tooling-agents) branch asvs-gofannon-runbooks-and-reports created (now 8a85235) akm
2026/03/25 (tooling-trusted-releases) branch main updated (9ae748a6 -> 07c05c28) sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated: Remove the option to apply strict checking sbp
2026/03/25 (tooling-trusted-releases) branch main updated (2e60deba -> 9ae748a6) sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated: Do not allow votes to be resolved, only cancelled, before they end sbp
2026/03/25 (tooling-trusted-releases) branch cyclonedx_xml updated (5e3eda48 -> 487a97dd) arm
2026/03/25 (tooling-trusted-releases) branch cyclonedx_xml updated (a8790218 -> 5e3eda48) arm
2026/03/25 (tooling-trusted-releases) 01/01: apache/tooling-runbooks#21 - add documentation arm
2026/03/25 (tooling-trusted-releases) branch arm updated (af4f1024 -> 2fc0d842) arm
2026/03/25 (tooling-trusted-releases) branch cyclonedx_xml updated (baca1c0e -> a8790218) arm
2026/03/25 (tooling-trusted-releases) branch arm updated: apache/tooling-runbooks#21 - add documentation arm
2026/03/25 (tooling-trusted-releases) 01/01: #901 - add support for XML in sbom tooling arm
2026/03/25 (tooling-trusted-releases) branch arm updated (682ff179 -> 2e60deba) arm
2026/03/25 (tooling-trusted-releases) 01/01: #901 - add support for XML in sbom tooling arm
2026/03/25 (tooling-trusted-releases) branch cyclonedx_xml created (now baca1c0e) arm
2026/03/25 (tooling-trusted-releases) branch main updated (e91560f4 -> 2e60deba) sbp
2026/03/25 (tooling-trusted-releases) branch main updated (68434f0c -> e91560f4) sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated: Extract names when tabulating votes sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated: Update the requests dependency due to CVE-2026-25645 sbp
2026/03/25 (tooling-trusted-releases) branch main updated (26ef4a14 -> 68434f0c) sbp
2026/03/25 (tooling-trusted-releases) 01/01: Allow votes to be cancelled sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated (54315beb -> 68434f0c) sbp
2026/03/25 (tooling-trusted-releases) branch main updated (5bc8d2ef -> 26ef4a14) sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated: Allow votes to be cancelled sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated: Remove the release policy option to pause for the release manager sbp
2026/03/25 (tooling-trusted-releases) branch main updated (3ef3db84 -> 5bc8d2ef) sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated: Fix an email bug and add tests sbp
2026/03/25 (tooling-trusted-releases) branch main updated (c6357163 -> 3ef3db84) sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated: Fix verb conjugation in the vote resolution email default body sbp
2026/03/25 (tooling-trusted-releases) branch main updated (442e308f -> c6357163) sbp
2026/03/25 (tooling-trusted-releases) branch main updated (790a665f -> 442e308f) sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated: Update dependencies sbp
2026/03/25 (tooling-trusted-releases) branch main updated (6bbadc81 -> 790a665f) sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated: Turn off basic authentication in ASFQuart sbp
2026/03/25 (tooling-trusted-releases) branch sbp updated (53788af7 -> 790a665f) sbp
2026/03/25 (tooling-trusted-releases) 01/01: Add a form to tally any vote sbp
2026/03/25 (tooling-trusted-releases) 01/01: Ignore CVE-2026-4539 until a fix is available sbp
2026/03/25 (tooling-trusted-releases) branch main updated (682ff179 -> 6bbadc81) sbp
2026/03/25 (tooling-trusted-releases) branch arm updated (af4f63d9 -> 682ff179) arm
2026/03/24 (tooling-trusted-releases) branch sbp updated: Turn off basic authentication in ASFQuart sbp
2026/03/24 (tooling-trusted-releases) branch main updated (af4f63d9 -> 682ff179) sbp
2026/03/24 (tooling-trusted-releases) branch sbp updated (8f86fe3b -> 682ff179) sbp
2026/03/24 (tooling-trusted-releases) 01/01: Add a form to tally any vote sbp
2026/03/24 (tooling-trusted-releases) branch form_validation_cache updated (d120c688 -> 347d4eef) arm
2026/03/24 (tooling-trusted-releases) branch main updated (8f86fe3b -> af4f63d9) arm
2026/03/24 (tooling-trusted-releases) 01/01: Allow safe types to be used in task args in the database. arm
2026/03/24 (tooling-trusted-releases) branch arm updated (82bae60a -> af4f63d9) arm
2026/03/24 (tooling-trusted-releases) branch main updated (da4d20a1 -> 8f86fe3b) sbp
2026/03/24 (tooling-trusted-releases) 01/01: Allow safe types to be used in task args in the database. arm
2026/03/24 (tooling-trusted-releases) branch arm updated (f2b3fd9b -> 82bae60a) arm
2026/03/24 (tooling-trusted-releases) 01/01: Allow the use of CC and BCC for voting and announcing sbp
2026/03/24 (tooling-trusted-releases) branch sbp updated (7a3dc4d3 -> 8f86fe3b) sbp
2026/03/24 (tooling-trusted-releases) 01/01: Allow safe types to be used in task args in the database. arm
2026/03/24 (tooling-trusted-releases) branch arm updated (e3ba5367 -> f2b3fd9b) arm
2026/03/24 (tooling-trusted-releases) 01/01: Allow the use of CC and BCC for voting and announcing sbp
2026/03/24 (tooling-trusted-releases) branch sbp updated (da901ba5 -> 7a3dc4d3) sbp
2026/03/24 (tooling-trusted-releases) 01/01: Allow safe types to be used in task args in the database. arm
2026/03/24 (tooling-trusted-releases) branch arm updated (c7afdf58 -> e3ba5367) arm
2026/03/24 (tooling-trusted-releases) branch main updated: Notes say that cmarkgfm is safe arm
2026/03/24 (tooling-trusted-releases) branch arm updated (54921a69 -> c7afdf58) arm
2026/03/24 (tooling-trusted-releases) 01/01: Allow safe types to be used in task args in the database. arm
2026/03/23 (tooling-trusted-releases) branch dependabot/github_actions/astral-sh/setup-uv-7.6.0 deleted (was 366f4a2b) sbp
2026/03/23 (tooling-trusted-releases) branch main updated: Bump astral-sh/setup-uv from 7.3.1 to 7.6.0 sbp
2026/03/23 (tooling-trusted-releases) branch dependabot/github_actions/biomejs/setup-biome-2.7.1 deleted (was 81fbf489) sbp
2026/03/23 (tooling-trusted-releases) branch main updated: Bump biomejs/setup-biome from 2.7.0 to 2.7.1 sbp
2026/03/23 (tooling-trusted-releases) branch dependabot/github_actions/astral-sh/setup-uv-7.6.0 created (now 366f4a2b) github-bot
2026/03/23 (tooling-trusted-releases) branch dependabot/github_actions/biomejs/setup-biome-2.7.1 created (now 81fbf489) github-bot
2026/03/23 (tooling-actions) branch main updated: Add license to dependabot yml arm