This is an automated email from the ASF dual-hosted git repository.
wave pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-docs.git
The following commit(s) were added to refs/heads/main by this push:
new cf42d7a Update site organization adding two pages
cf42d7a is described below
commit cf42d7ae66cd9dbb78c801d7e4cad2b7aca9387f
Author: Dave Fisher <[email protected]>
AuthorDate: Fri Nov 14 12:36:49 2025 -0800
Update site organization adding two pages
---
.../advisory-process.md | 0
.../data-model.md | 0
.../digital-signatures.md | 0
.../distributions.md | 0
.../evaluate.md | 0
.../github-build.md | 0
.../lifecycle.md | 0
.../platform.md | 0
.../requirements.md | 0
.../svn-dist.md | 0
.../vote.md | 0
content/pages/data-model.md | 2 +-
content/pages/index.md | 2 +-
content/pages/platform.md | 2 +-
content/pages/policies.md | 4 ++++
content/pages/supply-chain.md | 4 ++++
.../pages/{trusted-release.md => trusted-releases.md} | 18 +++++++++---------
content/theme/templates/menu.html | 4 +++-
18 files changed, 23 insertions(+), 13 deletions(-)
diff --git a/apache-trusted-release/advisory-process.md
b/apache-trusted-releases/advisory-process.md
similarity index 100%
rename from apache-trusted-release/advisory-process.md
rename to apache-trusted-releases/advisory-process.md
diff --git a/apache-trusted-release/data-model.md
b/apache-trusted-releases/data-model.md
similarity index 100%
rename from apache-trusted-release/data-model.md
rename to apache-trusted-releases/data-model.md
diff --git a/apache-trusted-release/digital-signatures.md
b/apache-trusted-releases/digital-signatures.md
similarity index 100%
rename from apache-trusted-release/digital-signatures.md
rename to apache-trusted-releases/digital-signatures.md
diff --git a/apache-trusted-release/distributions.md
b/apache-trusted-releases/distributions.md
similarity index 100%
rename from apache-trusted-release/distributions.md
rename to apache-trusted-releases/distributions.md
diff --git a/apache-trusted-release/evaluate.md
b/apache-trusted-releases/evaluate.md
similarity index 100%
rename from apache-trusted-release/evaluate.md
rename to apache-trusted-releases/evaluate.md
diff --git a/apache-trusted-release/github-build.md
b/apache-trusted-releases/github-build.md
similarity index 100%
rename from apache-trusted-release/github-build.md
rename to apache-trusted-releases/github-build.md
diff --git a/apache-trusted-release/lifecycle.md
b/apache-trusted-releases/lifecycle.md
similarity index 100%
rename from apache-trusted-release/lifecycle.md
rename to apache-trusted-releases/lifecycle.md
diff --git a/apache-trusted-release/platform.md
b/apache-trusted-releases/platform.md
similarity index 100%
rename from apache-trusted-release/platform.md
rename to apache-trusted-releases/platform.md
diff --git a/apache-trusted-release/requirements.md
b/apache-trusted-releases/requirements.md
similarity index 100%
rename from apache-trusted-release/requirements.md
rename to apache-trusted-releases/requirements.md
diff --git a/apache-trusted-release/svn-dist.md
b/apache-trusted-releases/svn-dist.md
similarity index 100%
rename from apache-trusted-release/svn-dist.md
rename to apache-trusted-releases/svn-dist.md
diff --git a/apache-trusted-release/vote.md b/apache-trusted-releases/vote.md
similarity index 100%
rename from apache-trusted-release/vote.md
rename to apache-trusted-releases/vote.md
diff --git a/content/pages/data-model.md b/content/pages/data-model.md
index 9a9f666..4a59221 100644
--- a/content/pages/data-model.md
+++ b/content/pages/data-model.md
@@ -1,4 +1,4 @@
-Title: Apache Trusted Release Data Model
+Title: Apache Trusted Releases Data Model
license: https://www.apache.org/licenses/LICENSE-2.0
_This is a discussion and the actual implementation will diverge._
diff --git a/content/pages/index.md b/content/pages/index.md
index bb05752..abe0ce5 100644
--- a/content/pages/index.md
+++ b/content/pages/index.md
@@ -29,7 +29,7 @@ developed by ASF Infrastructure.
- Mailing List: [email protected] –
[archives](https://lists.apache.org/[email protected])
- Subscribe to Mailing List: [email protected]
-### Apache Trusted Release Platform (ATR)
+### Apache Trusted Releases (ATR) platform
All ASF Projects may participate in our second Alpha testing the new
automation framework.
diff --git a/content/pages/platform.md b/content/pages/platform.md
index 019d0ba..ab870b3 100644
--- a/content/pages/platform.md
+++ b/content/pages/platform.md
@@ -1,4 +1,4 @@
-Title: Apache Trusted Release Platform Services
+Title: Apache Trusted Releases platform services
license: https://www.apache.org/licenses/LICENSE-2.0
_This is a discussion and the actual implementation will diverge._
diff --git a/content/pages/policies.md b/content/pages/policies.md
new file mode 100644
index 0000000..9fd9a88
--- /dev/null
+++ b/content/pages/policies.md
@@ -0,0 +1,4 @@
+Title: Supply Chain Attacks FAQ
+license: https://www.apache.org/licenses/LICENSE-2.0
+
+We are adding a FAQ about how, when, and if the ATR can mitigate various
Supply Chain Attack scenarios,
diff --git a/content/pages/supply-chain.md b/content/pages/supply-chain.md
new file mode 100644
index 0000000..f91a4d9
--- /dev/null
+++ b/content/pages/supply-chain.md
@@ -0,0 +1,4 @@
+Title: Draft Policies around ATR process
+license: https://www.apache.org/licenses/LICENSE-2.0
+
+We will list various proposed policies and policy changes. These will be
speculative until approved.
\ No newline at end of file
diff --git a/content/pages/trusted-release.md
b/content/pages/trusted-releases.md
similarity index 86%
rename from content/pages/trusted-release.md
rename to content/pages/trusted-releases.md
index 6e58781..d2d791e 100644
--- a/content/pages/trusted-release.md
+++ b/content/pages/trusted-releases.md
@@ -1,11 +1,11 @@
-Title: Apache Trusted Release Platform
+Title: Apache Trusted Releases platform
license: https://www.apache.org/licenses/LICENSE-2.0
-The main project is the Apache Trusted Release Platform.
+The main project is the Apache Trusted Releases platform.
Repositories:
-- https://github.com/apache/tooling-trusted-release
+- https://github.com/apache/tooling-trusted-releases
- https://github.com/apache/tooling-releases-client
## 1. Automate the Release Process
@@ -64,22 +64,22 @@ Repositories:
## 5. Release Lifecycle Phases
- Here is a flow chart showing the [Release Lifecycle
Phases](https://github.com/apache/tooling-docs/blob/main/apache-trusted-release/lifecycle.md).
+ Here is a flow chart showing the [Release Lifecycle
Phases](https://github.com/apache/tooling-docs/blob/main/apache-trusted-releases/lifecycle.md).
## 6. Infrastructure Requirements
- Run book for releases.apache.org
- - Progress on the retirement path for `svn:dist`. See [Legacy Releases from
SVN
Dist](https://github.com/apache/tooling-docs/blob/main/apache-trusted-release/svn-dist.md)
+ - Progress on the retirement path for `svn:dist`. See [Legacy Releases from
SVN
Dist](https://github.com/apache/tooling-docs/blob/main/apache-trusted-releases/svn-dist.md)
for possible transitional states. For this first iteration _transition 2_
is preferred.
- Legacy urls for dist.apache.org, downloads.apache.org, dlcdn.apache.org,
and archive.apache.org remain supported.
- Path schemes for downloads.apache.org, dlcdn.apache.org, and
archive.apache.org remain.
## 7. Future Requirements
- - Integrate with the [Security Advisory
Process](https://github.com/apache/tooling-docs/blob/main/apache-trusted-release/advisory-process.md)
to make it easy to track applicable advisories on download pages.
- - Expand support for [Evaluating Build
Claims](https://github.com/apache/tooling-docs/blob/main/apache-trusted-release/evaluate.md)
to additional build tools.
- - Expand automated support for additional [Distribution
Channels](https://github.com/apache/tooling-docs/blob/main/apache-trusted-release/distributions.md).
- - Include a [Signing
Candidates](https://github.com/apache/tooling-docs/blob/main/apache-trusted-release/digital-signatures.md)
phase during ATR processing.
+ - Integrate with the [Security Advisory
Process](https://github.com/apache/tooling-docs/blob/main/apache-trusted-releases/advisory-process.md)
to make it easy to track applicable advisories on download pages.
+ - Expand support for [Evaluating Build
Claims](https://github.com/apache/tooling-docs/blob/main/apache-trusted-releases/evaluate.md)
to additional build tools.
+ - Expand automated support for additional [Distribution
Channels](https://github.com/apache/tooling-docs/blob/main/apache-trusted-releases/distributions.md).
+ - Include a [Signing
Candidates](https://github.com/apache/tooling-docs/blob/main/apache-trusted-releases/digital-signatures.md)
phase during ATR processing.
> There are policy implications to the automation of digital signatures.
> For now, creating digital signatures on certain artifact types must be
done prior to GPG signing and
diff --git a/content/theme/templates/menu.html
b/content/theme/templates/menu.html
index 5d712ca..83afc32 100644
--- a/content/theme/templates/menu.html
+++ b/content/theme/templates/menu.html
@@ -14,7 +14,9 @@
<ul class="dropdown-menu">
<!--<li><a class="dropdown-item" href="/blog/">Tooling
Blog</a></li>-->
<li><a class="dropdown-item" href="/team.html">About the
team</a></li>
- <li><a class="dropdown-item" href="/trusted-release.html">Trusted
Releases</a></li>
+ <li><a class="dropdown-item" href="/trusted-releases.html">Trusted
Releases</a></li>
+ <li><a class="dropdown-item" href="/supply-chain.html">Supply
Chain Attacks FAQ</a></li>
+ <li><a class="dropdown-item"
href="/policies.html">Policies</a></li>
</ul>
</li>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
