These 44 commits are when the Protocol Buffers files have changed:
| Commit: | 52e4ea8 | |
|---|---|---|
| Author: | Paul Joseph | |
| Committer: | Paul Joseph | |
add slsa provenance predicate v0.1 v0.2 Signed-off-by: Paul Joseph <k.paul.joseph@gmail.com>
The documentation is generated from this commit.
| Commit: | 808ca43 | |
|---|---|---|
| Author: | Parth Patel | |
| Committer: | GitHub | |
Merge pull request #417 from kpauljoseph/in-toto-v0.2-provenance add slsa provenance predicate v0.2 protobuf
| Commit: | 6e0b70a | |
|---|---|---|
| Author: | Parth Patel | |
| Committer: | GitHub | |
Merge pull request #434 from puerco/vulnsv02-proto VulnsV2: Add missing invocation to protos and spec
| Commit: | 72054e5 | |
|---|---|---|
| Author: | Adolfo García Veytia (Puerco) | |
| Committer: | Adolfo García Veytia (Puerco) | |
Fix inconsistencies in vulnsv2 proto vs spec This commit renames the scanner database field (to db) and the scanner_metadata field (to just metadata) to match the vulns02 spec. Signed-off-by: Adolfo García Veytia (Puerco) <adolfo.garcia@uservers.net>
| Commit: | 4a4ddf5 | |
|---|---|---|
| Author: | Paul Joseph | |
| Committer: | Paul Joseph | |
add slsa provenance predicate v0.2 Signed-off-by: Paul Joseph <k.paul.joseph@gmail.com>
| Commit: | abb6190 | |
|---|---|---|
| Author: | Aditya Sirish A Yelgundhalli | |
vsa: Make verifiedLevels field repeated to match spec The specification requires the verifiedLevels field to be a list of string values rather than a single string. Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
| Commit: | 297a7fc | |
|---|---|---|
| Author: | hectorj2f | |
| Committer: | hectorj2f | |
keep v0.1 spec around Signed-off-by: hectorj2f <hector@chainguard.dev>
| Commit: | 1e238a8 | |
|---|---|---|
| Author: | hectorj2f | |
| Committer: | hectorj2f | |
fix typos Signed-off-by: hectorj2f <hector@chainguard.dev>
| Commit: | bd07c01 | |
|---|---|---|
| Author: | hectorj2f | |
rename to use vulns and avoid ambiguous types Signed-off-by: hectorj2f <hector@chainguard.dev>
| Commit: | 78d0e86 | |
|---|---|---|
| Author: | hectorj2f | |
| Committer: | hectorj2f | |
address reviewer comments Signed-off-by: hectorj2f <hector@chainguard.dev>
| Commit: | 513ee51 | |
|---|---|---|
| Author: | hectorj2f | |
| Committer: | hectorj2f | |
add repeated type to fields Signed-off-by: hectorj2f <hector@chainguard.dev>
| Commit: | f09dee4 | |
|---|---|---|
| Author: | hectorj2f | |
| Committer: | hectorj2f | |
add protobuf objects for vuln predicate type Signed-off-by: hectorj2f <hector@chainguard.dev>
| Commit: | e8c8774 | |
|---|---|---|
| Author: | Tom Hennen | |
| Committer: | GitHub | |
Merge pull request #375 from mdeicas/main Add the reference predicate
| Commit: | 1d34f0a | |
|---|---|---|
| Author: | Ben Turner | |
| Committer: | Ben Turner | |
Update link to SLSA framework proto file Update the comment to point to the updated location of the v1.0 provenance proto file in the SLSA framework repository This file was moved to a new location in the repository last month as part of https://github.com/slsa-framework/slsa/pull/939/files#diff-0d74b135d4a3da2b4ed73c88a4566d07e465dd6aee46f46f45e0ffbb7c232128 Signed-off-by: Ben Turner <ben.turner@pobox.com>
| Commit: | d63c878 | |
|---|---|---|
| Author: | Marco Deicas | |
| Committer: | Marco Deicas | |
Add reference predicate proto definition Signed-off-by: Marco Deicas <mdeicas@google.com>
| Commit: | 3e26e49 | |
|---|---|---|
| Author: | Zach Steindler | |
| Committer: | GitHub | |
Add Release Attestation (#319) * Adding proposed release attestation * Make name field explicitly a filename as it would appear on disk * fix typo * Clarify immutability, subject, and purl parsing * Soften registry requirements, add security clarification, and add releaseId * Adding proto definition, clarifying language, adding links, reflowing text * Adjusting spec to use jsonc * Reformat Fields for linter; put version back at v0.1 * Add migration example * fix formatting * fix typos * Clarify UUID generation; add container image example * Update spec/predicates/release.md Signed-off-by: Zach Steindler <steiza@github.com> Co-authored-by: Marcela Melara <marcela.melara@intel.com>
| Commit: | 474f261 | |
|---|---|---|
| Author: | Parth Patel | |
| Committer: | GitHub | |
create vsa v1 proto and corresponding generated code (#302) Signed-off-by: pxp928 <parth.psu@gmail.com>
| Commit: | 2eae997 | |
|---|---|---|
| Author: | Marcela Melara | |
| Committer: | Marcela Melara | |
Define annotations field type in ResourceDescriptor proto as Struct Signed-off-by: Marcela Melara <marcela.melara@intel.com>
| Commit: | 7aefca3 | |
|---|---|---|
| Author: | Joshua Lock | |
| Committer: | GitHub | |
Merge pull request #257 from joshuagl/joshuagl/proto-field-case Use lower_camel_case consistently for fields in protobuf definitions
| Commit: | 93687d4 | |
|---|---|---|
| Author: | Joshua Lock | |
| Committer: | Joshua Lock | |
fix(proto): fix resource descriptor field names Convert from lowerCamelCase to lower_snake_case. This is the protobuf convention and recommended by the style guide: https://protobuf.dev/programming-guides/style/#message-field-names Signed-off-by: Joshua Lock <joshua.lock@uk.verizon.com>
| Commit: | 5cebcc8 | |
|---|---|---|
| Author: | Joshua Lock | |
| Committer: | Joshua Lock | |
fix(proto): fix statement field names Convert from lowerCamelCase to lower_snake_case. This is the protobuf convention and recommended by the style guide: https://protobuf.dev/programming-guides/style/#message-field-names Signed-off-by: Joshua Lock <joshua.lock@uk.verizon.com>
| Commit: | 6dcab7f | |
|---|---|---|
| Author: | Joshua Lock | |
| Committer: | Joshua Lock | |
fix(proto): fix VSA field names Convert from lowerCamelCase to lower_snake_case. This is the protobuf convention and recommended by the style guide: https://protobuf.dev/programming-guides/style/#message-field-names Signed-off-by: Joshua Lock <joshua.lock@uk.verizon.com>
| Commit: | a31f523 | |
|---|---|---|
| Author: | Joshua Lock | |
Change annotations fields in ResourceDecriptor from objects to values This change expands support from objects to all JSON values. This allows maximum flexibility for producers and better matches the implicit reading of the spec many, including the SLSA project, had. Fixes: #242 Signed-off-by: Joshua Lock <joshua.lock@uk.verizon.com>
| Commit: | bd8c0c7 | |
|---|---|---|
| Author: | Marcela Melara | |
| Committer: | GitHub | |
Merge branch 'main' into add-scai-protos
| Commit: | df58e24 | |
|---|---|---|
| Author: | Marcela Melara | |
| Committer: | Marcela Melara | |
Update the SLSA provenance predicate to v1 Signed-off-by: Marcela Melara <marcela.melara@intel.com>
| Commit: | f59e32f | |
|---|---|---|
| Author: | Marcela Melara | |
| Committer: | Marcela Melara | |
Add SCAI protobuf definition Signed-off-by: Marcela Melara <marcela.melara@intel.com>
| Commit: | d6090c0 | |
|---|---|---|
| Author: | Aditya Sirish | |
| Committer: | Aditya Sirish | |
Add test result proto Also makes title of the predicate singular Signed-off-by: Aditya Sirish <aditya@saky.in>
| Commit: | f37f9f4 | |
|---|---|---|
| Author: | Aditya Sirish | |
| Committer: | Aditya Sirish | |
Use ResourceDescriptor for statement subjects Update proto definitions, docs/validation etc to reflect this change. Signed-off-by: Aditya Sirish <aditya@saky.in>
| Commit: | b68f899 | |
|---|---|---|
| Author: | Aditya Sirish | |
| Committer: | Aditya Sirish | |
Define v0.3 of the link predicate Updates materials to use list of ResourceDescriptor objects, introduces a protobuf definition for the link predicate. Also adds predicate field definitions alongside pointer to in-toto specification. Signed-off-by: Aditya Sirish <aditya@saky.in>
| Commit: | 9294e52 | |
|---|---|---|
| Author: | Aditya Sirish | |
| Committer: | Aditya Sirish | |
Add Java bindings Signed-off-by: Aditya Sirish <aditya@saky.in>
| Commit: | eb548b4 | |
|---|---|---|
| Author: | Aditya Sirish | |
Fix VSA dir structure and package name Signed-off-by: Aditya Sirish <aditya@saky.in>
| Commit: | ca0748f | |
|---|---|---|
| Author: | Marcela Melara | |
| Committer: | Marcela Melara | |
Update documentation; update package directory structure and names Signed-off-by: Marcela Melara <marcela.melara@intel.com> Add versioned subdirectory to vsa predicate proto Signed-off-by: Marcela Melara <marcela.melara@intel.com> Remove minor version from protos directory structure; update go package name Signed-off-by: Marcela Melara <marcela.melara@intel.com> Add disclaimer to documentation about protos stability pre v1.1; add how to Signed-off-by: Marcela Melara <marcela.melara@intel.com> Update directory structure and imports Signed-off-by: Marcela Melara <marcela.melara@intel.com>
| Commit: | e9bf2b6 | |
|---|---|---|
| Author: | Marcela Melara | |
| Committer: | Marcela Melara | |
Move protos to their own directory for more consistency between bindings packages Signed-off-by: Marcela Melara <marcela.melara@intel.com>
| Commit: | b21f99d | |
|---|---|---|
| Author: | Tom Hennen | |
Package proto io.intoto -> io.in_toto Signed-off-by: Tom Hennen <tomhennen@google.com>
| Commit: | e61b310 | |
|---|---|---|
| Author: | Tom Hennen | |
Proto packages should be io.intoto... Signed-off-by: Tom Hennen <tomhennen@google.com>
| Commit: | e99cc7e | |
|---|---|---|
| Author: | Tom Hennen | |
| Committer: | Tom Hennen | |
Add proto and example for ResourceDescriptor Also updates go protos. We're supposed to create these anytime we update protos. It looks like the vsa one was supposed to move when we put it in a subfolder, but we missed it. Moving it now. Signed-off-by: Tom Hennen <tomhennen@google.com>
| Commit: | 16f7176 | |
|---|---|---|
| Author: | Tom Hennen | |
| Committer: | Tom Hennen | |
v1.0-draft -> v1.0 refs #130 Signed-off-by: Tom Hennen <tomhennen@google.com>
| Commit: | 61d535b | |
|---|---|---|
| Author: | Tom Hennen | |
Remove .0 from the _type uri Any minor changes should be backwards compatible so there's no need to identify type in the statement and it could actually be harmful. Leaving it as is in docs and such because the text could change with point releases. refs #130 Signed-off-by: Tom Hennen <tomhennen@google.com>
| Commit: | 7992d17 | |
|---|---|---|
| Author: | Tom Hennen | |
Add protobuf for Statements and SLSA's VSA (as an example). This includes an example program that uses the protos written in Go, as well as the Go code generated from those protos ([as is standard practice for Go](https://go.dev/doc/articles/go_command#:~:text=and%20then%20check%20those%20generated%20source%20files%20into%20your%20repository)). refs #130 Signed-off-by: Tom Hennen <tomhennen@google.com>
| Commit: | f8ae54a | |
|---|---|---|
| Author: | Mark Lodato | |
| Committer: | Mark Lodato | |
Better document schema; remove proto files.
This commit does not contain any .proto files.
| Commit: | 9c61d18 | |
|---|---|---|
| Author: | Mark Lodato | |
| Committer: | Mark Lodato | |
Merge branch 'ite-6' of ITE This imports the history of [ITE-6] into the new attestation repo. Commit IDs have changed from the ITE repo because the history only includes ITE-6. Original commit 410d15599f034ce30166c65ef5986e309759b706 maps to the parent commit, efdc8704a3219b6ca7f4cd1f63cb62f2c84a3fae. [ITE-6]: https://github.com/in-toto/ITE/pull/15
| Commit: | 3afb80a | |
|---|---|---|
| Author: | Mark Lodato | |
Refactor Envelope and Statement wording and URI. Most importantly, use "Statement" in the type URI instead of "Attestation".
| Commit: | a1da0d9 | |
|---|---|---|
| Author: | Mark Lodato | |
| Committer: | Mark Lodato | |
Make subject.name required. This simplifies the model to allow consumers to rely on its existence.
| Commit: | be8fa95 | |
|---|---|---|
| Author: | Mark Lodato | |
| Committer: | Mark Lodato | |
Refactor to make layering more distinct. - Reference SLSA. - Split into a distinct `predicateType` + `predicate` based on the SLSA attestation model. - Convert `subject` and `materials` to lists of objects, rather than maps from URI to DigestSet, so that (1) we can more naturally extend with more fields, such as media type, and (2) to allow easier indexing. - Add a proto definition of the Statement layer. - Move the curl example to README (no need for a duplicate YAML file.) - Switch to lowerCamelCase, which is already used by signing-spec.