#776 - implement 50k character limit for vote comment and support passing form errors through a cache in the form module instead of via flash in the session
32 files changed
tree: 153de75ccf9d5ff5f2adf0cf371f7c7387dc69fb
  1. .github/
  2. atr/
  3. bootstrap/
  4. licenses/
  5. migrations/
  6. patches/
  7. playwright/
  8. scripts/
  9. tests/
  10. typestubs/
  11. .asf.yaml
  12. .dockerignore
  13. .editorconfig
  14. .gitignore
  15. .pre-commit-config.yaml
  16. .pre-commit-heavy.yaml
  17. .pre-commit-light.yaml
  18. .python-version
  19. .stylelintignore
  20. .stylelintrc.json
  21. alembic.ini
  22. Alpha-signup.md
  23. BUILD.md
  24. codeql-config.yml
  25. CONTRIBUTING.md
  26. DEVELOPMENT.md
  27. docker-compose.yml
  28. Dockerfile.alpine
  29. GOVERNANCE.md
  30. LICENSE
  31. Makefile
  32. NOTICE
  33. pip-audit.requirements
  34. pyproject.toml
  35. README.md
  36. SECURITY.md
  37. start-atr.sh
  38. start-dev.sh
  39. SUPPORT.md
  40. tsconfig.json
  41. uv.lock
README.md

Apache Trusted Releases (ATR)

A prototype service for verifying and distributing Apache releases securely.

NOTE: New contributors must introduce themselves on the development mailing list first, to deter spam. Contributions are very welcome, but please do not submit a PR until you have introduced yourself.

Status

This repository contains code developed by the Apache Software Foundation (ASF) Tooling team.

As of January 2026, this code is available for internal ASF feedback only. The project is in alpha development and subject to significant changes.

We welcome feedback and discussion, but note that many known issues and design refinements are already scheduled for future iterations. Please review our issue tracker and inline comments before filing new issues.

Alpha test deployment: https://release-test.apache.org/

Note: This repository is not yet an officially maintained or endorsed ASF project. It does not represent final technical or policy decisions for future ASF Tooling products. The code is provided without guarantees regarding stability, security, or backward compatibility.

Quick start

Run with Docker Compose (recommended):

git clone https://github.com/apache/tooling-trusted-releases.git
cd tooling-trusted-releases
mkdir -p state
docker compose up --build

Then visit https://127.0.0.1:8080/ (accept the self-signed certificate).

See DEVELOPMENT.md for additional options including running without containers.

Documentation

DocumentDescription
DEVELOPMENT.mdQuick start guide for developers
BUILD.mdBuild instructions and Make targets
CONTRIBUTING.mdHow to contribute code
SUPPORT.mdGetting help and reporting issues
GOVERNANCE.mdProject governance

Online documentation: https://release-test.apache.org/docs/

Getting involved

Community feedback is encouraged! If you are an ASF committer or contributor interested in Trusted Releases:

  1. Try it out – The alpha test server allows you to experiment with the release process.

  2. Introduce yourself on the development mailing list: dev@tooling.apache.org

    Subscribe by sending email with empty subject and body to dev-subscribe@tooling.apache.org and replying to the automated response (per the ASF mailing list how-to).

  3. Share ideas or file issues: Use the GitHub Issues page to report bugs, suggest features, or discuss improvements.

  4. Chat with us: #apache-trusted-releases on ASF Slack

Contributing

See CONTRIBUTING.md for detailed contribution guidelines.

Key resources for contributors:

License

This project is licensed under the Apache License, Version 2.0.


Part of the Apache Tooling Initiative. For more information about the ASF, visit https://www.apache.org/.