commits  

Messages by Date

• 2026/03/02 (tooling-trusted-releases) branch check-access-get updated (a8f26da5 -> 027eec84) wave
• 2026/03/02 (tooling-trusted-releases) branch check-access-get updated (027eec84 -> 55be2204) wave
• 2026/03/02 (tooling-trusted-releases) branch check-access-get updated (848a26b5 -> a8f26da5) wave
• 2026/03/02 (tooling-trusted-releases) branch main updated (2a7d4ea7 -> 83b03439) sbp
• 2026/03/02 (tooling-trusted-releases) branch sbp updated (690e461f -> 83b03439) sbp
• 2026/03/02 (tooling-trusted-releases) 01/01: Make one of the compose tests more reliable sbp
• 2026/03/02 (tooling-trusted-releases) branch promote_gha updated (33a97dda -> 727177ce) wave
• 2026/03/02 (tooling-trusted-releases) branch remove-unnecessary-test-endpoint deleted (was 737c887c) sbp
• 2026/03/02 (tooling-trusted-releases) branch main updated: Add check_access back into routes which require it and remove from GET generally. arm
• 2026/03/02 (tooling-trusted-releases) branch check-access-get updated (b0f278d3 -> 848a26b5) wave
• 2026/03/02 (tooling-trusted-releases) branch taint_tracking_types updated: Prefix some unused variables arm
• 2026/03/02 (tooling-trusted-releases) branch promote_gha updated (f869fcae -> 33a97dda) arm
• 2026/03/02 (tooling-trusted-releases) branch taint_tracking_types updated (f06f2df5 -> 2f68b218) arm
• 2026/03/02 (tooling-trusted-releases) branch main updated: Remove unnecessary test endpoint sbp
• 2026/03/02 (tooling-trusted-releases) branch arm updated (b53e4015 -> 2f68b218) arm
• 2026/03/02 (tooling-trusted-releases) branch arm updated (08c65a52 -> b53e4015) arm
• 2026/03/02 (tooling-trusted-releases) 01/01: Add check_access back into routes which require it and remove from GET generally. arm
• 2026/03/02 (tooling-trusted-releases) branch main updated (b0386f71 -> 690e461f) sbp
• 2026/03/02 (tooling-trusted-releases) branch arm updated: Add check_access back into routes which require it and remove from GET generally. arm
• 2026/03/02 (tooling-trusted-releases) branch check-access-get updated (ec956eb0 -> b0f278d3) wave
• 2026/03/02 (tooling-trusted-releases) branch arm updated (99c893ef -> 18d73aab) arm
• 2026/03/02 (tooling-trusted-releases) 01/01: Use experimental CodeQL query suites for actions sbp
• 2026/03/02 (tooling-trusted-releases) branch sbp updated (fa010e35 -> 690e461f) sbp
• 2026/03/02 (tooling-trusted-releases) branch promote_gha updated (2d086d4c -> f869fcae) arm
• 2026/03/02 (tooling-trusted-releases) branch arm updated (e58a18aa -> b0386f71) arm
• 2026/03/02 (tooling-trusted-releases) branch promote_gha updated (f8e8f679 -> 2d086d4c) arm
• 2026/03/02 (tooling-trusted-releases) branch main updated: Remove empty test method added by accident arm
• 2026/03/02 (tooling-trusted-releases) branch promote_gha updated (092afff9 -> f8e8f679) arm
• 2026/03/02 (tooling-trusted-releases) branch main updated (18d73aab -> e58a18aa) arm
• 2026/03/02 (tooling-trusted-releases) branch arm updated: Validate vulnerability URLs are http/s. Closes #768 arm
• 2026/03/02 (tooling-trusted-releases) 01/01: Add failed authentication logging to identified areas. Closes #725 arm
• 2026/03/02 (tooling-trusted-releases) branch arm updated: Add failed authentication logging to identified areas. Closes #725 arm
• 2026/03/02 (tooling-trusted-releases) branch drop-admin-privileges deleted (was 96fd0c36) wave
• 2026/03/02 (tooling-trusted-releases) branch main updated: Drop admin privileges (#796) wave
• 2026/03/02 (tooling-trusted-releases) branch promote_gha updated (2b0b4147 -> 092afff9) arm
• 2026/03/02 (tooling-trusted-releases) branch promote_gha updated (2b0973b8 -> 2b0b4147) arm
• 2026/03/02 (tooling-trusted-releases) 01/01: #344 - instructions on how to upload via GitHub Actions arm
• 2026/03/02 (tooling-trusted-releases) 01/02: #344 - starter for instructions on how to upload via GitHub Actions. Needs committee filtering. arm
• 2026/03/02 (tooling-trusted-releases) 02/02: #344 - added some extra information arm
• 2026/03/02 (tooling-trusted-releases) branch main updated (219d64af -> de57ce15) arm
• 2026/03/02 (tooling-trusted-releases) 01/01: Change data models to Subset instead of Lax - closes #777 arm
• 2026/03/02 (tooling-trusted-releases) branch arm updated (43f372e4 -> de57ce15) arm
• 2026/03/01 (tooling-trusted-releases) branch check-access-get created (now ec956eb0) wave
• 2026/03/01 (tooling-trusted-releases) 01/01: Add check access controls for committers wave
• 2026/02/28 (tooling-trusted-releases) branch manual-vote-resolution-fixes updated (ff244e41 -> 6e783d0b) wave
• 2026/02/28 (tooling-trusted-releases) branch manual-vote-resolution-fixes updated (f9f6a1cc -> ff244e41) wave
• 2026/02/28 (tooling-trusted-releases) branch manual-vote-resolution-fixes created (now f9f6a1cc) wave
• 2026/02/28 (tooling-trusted-releases) 01/01: Fix manual vote resolution configuration wave
• 2026/02/27 (tooling-trusted-releases) branch main updated: OF - fix typo wave
• 2026/02/27 (tooling-trusted-releases) 01/01: Validate sec-fetch headers wave
• 2026/02/27 (tooling-trusted-releases) branch valildate-sec-fetch-headers created (now c21cd313) wave
• 2026/02/27 (tooling-trusted-releases) 01/01: Remove unnecessary test endpoint wave
• 2026/02/27 (tooling-trusted-releases) branch remove-unnecessary-test-endpoint created (now 737c887c) wave
• 2026/02/27 (tooling-trusted-releases) 01/01: Drop admin privileges wave
• 2026/02/27 (tooling-trusted-releases) branch drop-admin-privileges created (now 96fd0c36) wave
• 2026/02/27 (tooling-trusted-releases) branch proper-pagination-validation-checks deleted (was 8d56a44f) sbp
• 2026/02/27 (tooling-trusted-releases) branch main updated: Proper pagination validation checks sbp
• 2026/02/27 (tooling-trusted-releases) branch main updated (fa010e35 -> cb5071f6) sbp
• 2026/02/27 (tooling-trusted-releases) branch fix-auth-bypass-admin-role deleted (was f453a021) sbp
• 2026/02/27 (tooling-trusted-releases) branch arm updated (f06f2df5 -> 43f372e4) arm
• 2026/02/27 (tooling-trusted-releases) 01/01: Change data models to Subset instead of Lax - closes #777 arm
• 2026/02/26 (tooling-trusted-releases) branch proper-pagination-validation-checks created (now 8d56a44f) wave
• 2026/02/26 (tooling-trusted-releases) 01/01: Proper pagination validation checks wave
• 2026/02/26 (tooling-trusted-releases) branch fix-auth-bypass-admin-role created (now f453a021) wave
• 2026/02/26 (tooling-trusted-releases) 01/01: Fix auth bypass for admin via exceptions wave
• 2026/02/26 (tooling-trusted-releases) branch main updated (d88c4b0f -> fa010e35) sbp
• 2026/02/26 (tooling-trusted-releases) branch main updated (f06f2df5 -> d88c4b0f) sbp
• 2026/02/26 (tooling-trusted-releases) branch sbp updated: Fix function ordering sbp
• 2026/02/26 (tooling-trusted-releases) branch sbp updated: Skip files that use overloads when fixing function order sbp
• 2026/02/26 (tooling-trusted-releases) 01/01: Add a task to validate quarantined files and reject or promote them sbp
• 2026/02/26 (tooling-trusted-releases) branch sbp updated (9003b050 -> c0900cf5) sbp
• 2026/02/26 (tooling-trusted-releases) branch main updated (9003b050 -> f06f2df5) arm
• 2026/02/26 (tooling-trusted-releases) branch arm updated (9003b050 -> f06f2df5) arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (c58fac7a -> f06f2df5) arm
• 2026/02/26 (tooling-trusted-releases) 01/02: Add taint tracking types to post endpoints arm
• 2026/02/26 (tooling-trusted-releases) 02/02: Validate session by type instead of name, and _ prefix unused sessions arm
• 2026/02/26 (tooling-trusted-releases) 01/02: Add taint tracking types to post endpoints arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (74925b03 -> c58fac7a) arm
• 2026/02/26 (tooling-trusted-releases) 02/02: Validate session by type instead of name, and _ prefix unused sessions arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated: Validate session by type instead of name, and _ prefix unused sessions arm
• 2026/02/26 (tooling-trusted-releases) 01/02: Add taint tracking types to get endpoints arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (939539af -> 94ace8db) arm
• 2026/02/26 (tooling-trusted-releases) branch arm updated (4862aec0 -> 9003b050) arm
• 2026/02/26 (tooling-trusted-releases) 02/02: Add taint tracking types to post endpoints arm
• 2026/02/26 (tooling-trusted-releases) 01/01: Add taint tracking types to post endpoints arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (caa5451a -> 939539af) arm
• 2026/02/26 (tooling-trusted-releases) 02/02: Add taint tracking types to post endpoints arm
• 2026/02/26 (tooling-trusted-releases) 01/02: Add taint tracking types to get endpoints arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (d64537a5 -> caa5451a) arm
• 2026/02/26 (tooling-trusted-releases) branch main updated (4862aec0 -> 9003b050) sbp
• 2026/02/26 (tooling-trusted-releases) 01/01: Separate the code to finalise a revision sbp
• 2026/02/26 (tooling-trusted-releases) branch sbp updated (70cdb2a2 -> 9003b050) sbp
• 2026/02/26 (tooling-trusted-releases) 01/01: Add taint tracking types to get endpoints arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (2eef89fc -> d64537a5) arm
• 2026/02/26 (tooling-trusted-releases) branch main updated: Fix import arm
• 2026/02/26 (tooling-trusted-releases) 01/01: Add taint tracking types to get endpoints arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (e568be5f -> 2eef89fc) arm
• 2026/02/26 (tooling-trusted-releases) branch arm updated (70cdb2a2 -> 4862aec0) arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (668c2f2e -> e568be5f) arm
• 2026/02/26 (tooling-trusted-releases) 01/01: Add taint tracking types to get endpoints arm
• 2026/02/26 (tooling-trusted-releases) branch arm updated (e8ea2fea -> 70cdb2a2) arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (7f570656 -> 668c2f2e) arm
• 2026/02/26 (tooling-trusted-releases) 01/01: Add taint tracking types to get endpoints arm
• 2026/02/26 (tooling-trusted-releases) 01/01: Add taint tracking types to get endpoints arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (f6e08562 -> 7f570656) arm
• 2026/02/26 (tooling-trusted-releases) 01/01: Add taint tracking types to get endpoints arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (770184ff -> f6e08562) arm
• 2026/02/26 (tooling-trusted-releases) 01/01: Add taint tracking types to get endpoints arm
• 2026/02/26 (tooling-trusted-releases) branch taint_tracking_types updated (9b70aadb -> 770184ff) arm
• 2026/02/25 (tooling-trusted-releases) branch taint_tracking_types updated (a6b22c9e -> 9b70aadb) arm
• 2026/02/25 (tooling-trusted-releases) 01/01: First cut of taint tracking types for project and version arm
• 2026/02/25 (tooling-trusted-releases) 01/01: First cut of taint tracking types for project and version arm
• 2026/02/25 (tooling-trusted-releases) branch taint_tracking_types updated (bc540c70 -> a6b22c9e) arm
• 2026/02/25 (tooling-trusted-releases) branch taint_tracking_types updated (7714d597 -> bc540c70) arm
• 2026/02/25 (tooling-trusted-releases) 01/01: First cut of taint tracking types for project and version arm
• 2026/02/25 (tooling-trusted-releases) branch taint_tracking_types updated (4b0213c8 -> 7714d597) arm
• 2026/02/25 (tooling-trusted-releases) 01/01: First cut of taint tracking types for project and version arm
• 2026/02/25 (tooling-trusted-releases) 01/01: First cut of taint tracking types for project and version arm
• 2026/02/25 (tooling-trusted-releases) branch taint_tracking_types updated (20200510 -> 4b0213c8) arm
• 2026/02/25 (tooling-trusted-releases) branch taint_tracking_types updated: First cut of taint tracking types for project and version arm
• 2026/02/25 (tooling-trusted-releases) branch main updated (df9462aa -> 70cdb2a2) sbp
• 2026/02/25 (tooling-trusted-releases) branch main updated (7cac7526 -> df9462aa) sbp
• 2026/02/25 (tooling-trusted-releases) branch sbp updated: Temporarily allow .gitkeep release files throughout sbp
• 2026/02/25 (tooling-trusted-releases) 01/01: First cut of taint tracking types for project and version arm
• 2026/02/25 (tooling-trusted-releases) branch taint_tracking_types updated (fef79800 -> 3e3c8d92) arm
• 2026/02/25 (tooling-trusted-releases) 01/01: First cut of taint tracking types for project and version arm
• 2026/02/25 (tooling-trusted-releases) branch taint_tracking_types updated (ecbcda71 -> fef79800) arm
• 2026/02/25 (tooling-trusted-releases) branch sbp updated (5db7392a -> df9462aa) sbp
• 2026/02/25 (tooling-trusted-releases) 01/01: Fix a problem with rendering information about checks sbp
• 2026/02/25 (tooling-trusted-releases) branch taint_tracking_types updated (5b438db7 -> ecbcda71) arm
• 2026/02/25 (tooling-trusted-releases) 01/01: First cut of taint tracking types for project and version arm
• 2026/02/25 (tooling-trusted-releases) 01/02: #641 - some initial migrations out of the util module for paths and hash calculation. arm
• 2026/02/25 (tooling-trusted-releases) 02/02: First cut of taint tracking types for project and version arm
• 2026/02/25 (tooling-trusted-releases) branch taint_tracking_types created (now 5b438db7) arm
• 2026/02/24 (tooling-trusted-releases) branch explicit-ldap-tls-configuration deleted (was c6542f4e) sbp
• 2026/02/24 (tooling-trusted-releases) branch main updated: Explicit ldap tls configuration (#755) sbp
• 2026/02/24 (tooling-trusted-releases) branch explicit-ldap-tls-configuration updated (ea1347b7 -> c6542f4e) wave
• 2026/02/24 (tooling-trusted-releases) branch main updated (b96895d6 -> 5db7392a) sbp
• 2026/02/24 (tooling-trusted-releases) branch main updated (98584f0c -> b96895d6) sbp
• 2026/02/24 (tooling-trusted-releases) branch sbp updated: Add missing parentheses sbp
• 2026/02/24 (tooling-trusted-releases) branch sbp updated (03114918 -> b96895d6) sbp
• 2026/02/24 (tooling-trusted-releases) 01/01: Add some simple archive checks for quarantined file validation sbp
• 2026/02/24 (tooling-trusted-releases) branch sbp updated: Add some simple archive checks for quarantined file validation sbp
• 2026/02/24 (tooling-trusted-releases) branch main updated (e8ea2fea -> 98584f0c) sbp
• 2026/02/24 (tooling-trusted-releases) branch sbp updated (bc3f4f19 -> 98584f0c) sbp
• 2026/02/24 (tooling-trusted-releases) 01/01: Fix some e2e tests for checks sbp
• 2026/02/24 (tooling-trusted-releases) branch arm updated (039f5889 -> e8ea2fea) arm
• 2026/02/24 (tooling-trusted-releases) branch main updated (bc3f4f19 -> e8ea2fea) arm
• 2026/02/24 (tooling-trusted-releases) 01/01: #641 - some initial migrations out of the util module for paths and hash calculation. arm
• 2026/02/24 (tooling-trusted-releases) branch main updated (4ca6056d -> bc3f4f19) sbp
• 2026/02/24 (tooling-trusted-releases) branch sbp updated: Detect which files need to be quarantined sbp
• 2026/02/24 (tooling-trusted-releases) branch sbp updated (ece6e9d4 -> 4ca6056d) sbp
• 2026/02/24 (tooling-trusted-releases) 01/01: #641 - some initial migrations out of the util module for paths and hash calculation. arm
• 2026/02/24 (tooling-trusted-releases) branch arm updated (612cffa4 -> 039f5889) arm
• 2026/02/24 (tooling-trusted-releases) branch arm updated (ef1c4b9e -> 612cffa4) arm
• 2026/02/24 (tooling-trusted-releases) 01/01: #641 - some initial migrations out of the util module for paths and hash calculation. arm
• 2026/02/24 (tooling-trusted-releases) branch arm updated: #641 - some initial migrations out of the util module for paths and hash calculation. arm
• 2026/02/24 (tooling-trusted-releases) branch main updated (7a828f68 -> 4ca6056d) arm
• 2026/02/24 (tooling-trusted-releases) branch arm updated (e7b73d88 -> 4ca6056d) arm
• 2026/02/24 (tooling-trusted-releases) 01/01: #720 - Ensure paths are relative to the revision path. arm
• 2026/02/24 (tooling-trusted-releases) branch arm updated: Ensure paths are relative to the revision path. Closes #720. arm
• 2026/02/24 (tooling-trusted-releases) branch arm updated: Add tighter rate limit to /distribute/ssh/register to match /ssh/register. Update docs on some other endpoints. Closes #724. arm
• 2026/02/24 (tooling-trusted-releases) 01/01: #695 - remove SVN Relase from SVN form. Also add support for Njord bundle as a filetype and project property for file tagging spec arm
• 2026/02/24 (tooling-trusted-releases) branch main updated (ece6e9d4 -> 7a828f68) arm
• 2026/02/24 (tooling-trusted-releases) branch arm updated (baeee120 -> 7a828f68) arm
• 2026/02/24 (tooling-trusted-releases) branch arm updated (0912c5c2 -> baeee120) arm
• 2026/02/24 (tooling-trusted-releases) 01/01: #695 - remove SVN Relase from SVN form. Also add support for Njord bundle as a filetype and project property for file tagging spec arm
• 2026/02/23 (tooling-trusted-releases) branch main updated (731b389a -> ece6e9d4) sbp
• 2026/02/23 (tooling-trusted-releases) branch main updated (1354f7ab -> 731b389a) sbp
• 2026/02/23 (tooling-trusted-releases) branch sbp updated: Fix more function ordering by improving the order fixing script sbp
• 2026/02/23 (tooling-trusted-releases) branch explicit-ldap-tls-configuration updated (819e4681 -> ea1347b7) wave
• 2026/02/23 (tooling-trusted-releases) 01/01: Explicit ldap tls configuration wave
• 2026/02/23 (tooling-trusted-releases) branch explicit-ldap-tls-configuration created (now 819e4681) wave
• 2026/02/23 (tooling-trusted-releases) branch sbp updated: Add the quarantined directory and tests sbp
• 2026/02/23 (tooling-trusted-releases) branch main updated (e68a272c -> 1354f7ab) sbp
• 2026/02/23 (tooling-trusted-releases) branch sbp updated (0acdc900 -> 1354f7ab) sbp
• 2026/02/23 (tooling-trusted-releases) 01/01: Fix a problem with the download script sbp
• 2026/02/23 (tooling-trusted-releases) branch docker-checksum-apache-rat deleted (was 9d7b7db3) sbp
• 2026/02/23 (tooling-trusted-releases) branch main updated: Refactor Dockerfile to streamline Apache RAT installation sbp
• 2026/02/23 (tooling-trusted-releases) branch docker-checksum-apache-rat updated (f39c3c65 -> 9d7b7db3) wave
• 2026/02/23 (tooling-trusted-releases) 01/01: Refactor Dockerfile to streamline Apache RAT installation wave
• 2026/02/23 (tooling-trusted-releases) branch docker-checksum-apache-rat created (now f39c3c65) wave
• 2026/02/23 (tooling-trusted-releases) branch sbp updated: Fix a problem with the download script sbp
• 2026/02/23 (tooling-trusted-releases) branch main updated (9e18e43e -> efc597e4) sbp
• 2026/02/23 (tooling-trusted-releases) 01/01: Add a database model for the quarantined upload phase sbp
• 2026/02/23 (tooling-trusted-releases) branch sbp updated (fcd75e75 -> efc597e4) sbp
• 2026/02/23 (tooling-trusted-releases) 01/01: Add a database model for the quarantined upload phase sbp
• 2026/02/23 (tooling-trusted-releases) branch sbp updated (dd2d1b23 -> fcd75e75) sbp
• 2026/02/23 (tooling-trusted-releases) branch sbp updated (e77fbe04 -> dd2d1b23) sbp
• 2026/02/23 (tooling-trusted-releases) 01/01: Add a database model for the quarantined upload phase sbp
• 2026/02/23 (tooling-actions) branch main updated: Rename old builds and update to new njord bundle based workflow arm
• 2026/02/23 (tooling-trusted-releases) branch sbp updated (5e288b2d -> e77fbe04) sbp
• 2026/02/23 (tooling-trusted-releases) 01/01: Add a database model for the quarantined upload phase sbp
• 2026/02/23 (tooling-trusted-releases) branch main updated: #725 - make sure failures are logged from PAT failure and they include the user arm
• 2026/02/23 (tooling-trusted-releases) 01/01: #725 - make sure failures are logged from PAT failure and they include the user arm
• 2026/02/23 (tooling-trusted-releases) branch arm created (now 0912c5c2) arm
• 2026/02/23 (tooling-trusted-releases) 02/05: Change attestable hashes to dict and reuse to resolve TOCTOU of check result. Use attestable hashes for check reports. Add version to cache key. Add file hash to hash and signature check and github SHA to source_tree. arm
• 2026/02/23 (tooling-trusted-releases) 05/05: Refactor check get logic to a shared method and remove some extra places where we still used release_name or version. Remove bulk-delete of check results. Update documentation. arm
• 2026/02/23 (tooling-trusted-releases) branch arm deleted (was aaff904c) arm
• 2026/02/23 (tooling-trusted-releases) 03/05: Move github model into general models out of SBOM models arm

• Earlier messages
• Later messages