Sign in
◑
Theme
apache
/
tooling-trusted-releases
/
HEAD
31bf7f9
Fix typos
by Alastair McFarlane
· 7 hours ago
main
f41dac3
Update docs for SHA3-256 and SWHID.
by Alastair McFarlane
· 7 hours ago
215d899
#1720 - hide whole field when using template URL
by Alastair McFarlane
· 7 hours ago
004e639
Fix another rsync traversal issue
by Alastair McFarlane
· 29 hours ago
ebba32a
Fix landlock/rsync issue
by Alastair McFarlane
· 30 hours ago
production
0372f32
SBOM report fixes
by Alastair McFarlane
· 30 hours ago
13289ac
Update catalog header text
by Alastair McFarlane
· 2 days ago
3f3464c
Don't prepend incubator to podling projects when detected through dist/archive
by Alastair McFarlane
· 2 days ago
4c61294
#1717 - show matching projects on search
by Alastair McFarlane
· 2 days ago
e8642dd
Bump the codeql-action group with 2 updates
by dependabot[bot]
· 3 days ago
c58a764
Document the current browser security requirements
by Sean B. Palmer
· 3 days ago
sbp
6cf196a
Log a warning when the worker pool is full
by Sean B. Palmer
· 3 days ago
9a3f8b2
#1715 - change PURL format
by Alastair McFarlane
· 3 days ago
e67a8f0
Links updates to production site
by Alastair McFarlane
· 3 days ago
3adc33f
Disallow PubSub redirects to prevent downgrade to HTTP
by Sean B. Palmer
· 3 days ago
5c49bc0
Add comments describing email subject value validation
by Sean B. Palmer
· 3 days ago
b32ca8c
Add a template variable for linking to first round podling threads
by Sean B. Palmer
· 4 days ago
e3555d5
Add prerequisite information for running locally, update deps.
by Alastair McFarlane
· 3 days ago
ef163ce
#1708 - release manager examples
by Alastair McFarlane
· 4 days ago
4c9fa52
#1707 - broad documentation fixes
by Alastair McFarlane
· 4 days ago
9d9de4b
#1700 - audit guidance for additional headers
by Alastair McFarlane
· 4 days ago
62ed0b3
Change vote terminology in emails
by Sean B. Palmer
· 4 days ago
d63c803
Update dependencies
by Sean B. Palmer
· 4 days ago
7714802
Use updated terminology for podling votes
by Sean B. Palmer
· 4 days ago
32e7bb0
Allow any committer to vote in email voting mode
by Sean B. Palmer
· 4 days ago
5a75a07
Use clearer binding vote terminology for podling votes
by Sean B. Palmer
· 4 days ago
d8d4c7a
Test database migrations with synthetic data
by Sean B. Palmer
· 4 days ago
1881ebb
#1704 - add email templates from URL, with default fallback
by Alastair McFarlane
· 4 days ago
101f7e2
Fix bug with SHA setting on new upload
by Alastair McFarlane
· 4 days ago
b77ab6b
#1665 - remove key upload from downloads.a.o, and make page clearer on per-PMC KEYS behaviour
by Alastair McFarlane
· 4 days ago
7272610
Show options after revoking user PATs, including a new email option
by Sean B. Palmer
· 7 days ago
4e1e820
Do not include the PAT to JWT form in production
by Sean B. Palmer
· 7 days ago
a788acd
#1706 - update links out to external docs
by Alastair McFarlane
· 7 days ago
69d6ea4
Avoid network I/O during a write transaction
by Sean B. Palmer
· 7 days ago
0fc2de3
Improve and expand the user guide to uploading files
by Sean B. Palmer
· 7 days ago
4aa2560
Document file handling constraints in the developer guide
by Sean B. Palmer
· 7 days ago
1d5f991
#1705 - guide for PMCs moving to ATR
by Alastair McFarlane
· 7 days ago
de2abf8
#1666 - pull key signing requirements into a single place and document clearly
by Alastair McFarlane
· 7 days ago
baf2685
Report errors in docker start
by Alastair McFarlane
· 7 days ago
43a71a0
#1703 - remove CAP approval for release archiving
by Alastair McFarlane
· 7 days ago
4e1e6eb
#1658 - pick up user from JWT for rate limiting
by Alastair McFarlane
· 7 days ago
3a32a27
#1650 - force key strength per policy
by Alastair McFarlane
· 8 days ago
f6f5439
Update documentation relating to Playwright tests
by Sean B. Palmer
· 8 days ago
e8b25bb
Remove DHE-RSA SSL protocols
by Dave Fisher
· 8 days ago
e832b17
Check the committee membership of signing key owners
by Sean B. Palmer
· 8 days ago
8aaffae
Do not display SVN details in task errors
by Sean B. Palmer
· 8 days ago
fa536a9
Update the documentation about accessing the tutorial
by Sean B. Palmer
· 8 days ago
da8db72
Enforce IP restrictions on system JWTs
by Sean B. Palmer
· 8 days ago
b744080
Expire sessions when they are more than three days old
by Sean B. Palmer
· 8 days ago
f5b6f57
Remove SVN diagnostics from announcement errors
by Sean B. Palmer
· 8 days ago
bac86f6
Omit LDAP details from error responses
by Sean B. Palmer
· 8 days ago
0a205dd
Do not show all JWT verification failure details
by Sean B. Palmer
· 8 days ago
1e747c3
Update Mermaid to 11.17.2 with a three day cooldown
by Sean B. Palmer
· 8 days ago
9aaa229
Ensure that concurrent policy edits are not silently lost
by Sean B. Palmer
· 8 days ago
029e59a
Enforce expedited voting rules in the database schema
by Sean B. Palmer
· 8 days ago
c934c67
Use a timeout when connecting to LDAP
by Sean B. Palmer
· 8 days ago
56a09a3
Filter out empty list values
by Sean B. Palmer
· 8 days ago
074e8a3
Do not show absolute paths in error messages
by Sean B. Palmer
· 8 days ago
72aaafe
Update npm dependencies
by Sean B. Palmer
· 8 days ago
fe0cdb1
#1653, #1693 - consistent logs and add email for TP auth failures.
by Alastair McFarlane
· 8 days ago
859a423
#1437 - documentation updates
by Alastair McFarlane
· 11 days ago
1aca36c
#1621 - update syft
by Alastair McFarlane
· 9 days ago
76c0746
Update dependencies
by Sean B. Palmer
· 9 days ago
99156ba
Bump astral-sh/setup-uv from 10.1.0 to 10.2.0
by dependabot[bot]
· 10 days ago
5ee0546
Bump apache/infrastructure-actions/allowlist-check from 1.0.3 to 1.0.4
by dependabot[bot]
· 10 days ago
6855f00
Bump the codeql-action group with 2 updates
by dependabot[bot]
· 10 days ago
43f4c2c
Update the tutorial
by Sean B. Palmer
· 9 days ago
d4ce1cc
Support a legacy storage audit format
by Sean B. Palmer
· 10 days ago
8275f04
#1504 - fix e2e tests and update workflow
by Alastair McFarlane
· 9 days ago
1339a0f
#1504 - fix e2e tests and create workflow to run them
by Alastair McFarlane
· 9 days ago
b9351d6
#1636 - show asfyaml warning on edit
by Alastair McFarlane
· 9 days ago
f02024b
#1382 - a few updates after cross-checking
by Alastair McFarlane
· 9 days ago
d514830
#1382 - update docs for trusted publishing and link from within the app
by Alastair McFarlane
· 9 days ago
e16f921
Include exception detail in log
by Alastair McFarlane
· 10 days ago
3413a87
Fix duplicate keys for incubator releases
by Alastair McFarlane
· 10 days ago
825406f
Seal the daily audit logs automatically
by Sean B. Palmer
· 10 days ago
478b04f
#1635 - change path for checking revprops
by Alastair McFarlane
· 10 days ago
d318a3c
#1591 - pin pre-commit hooks and make a few fixes
by Alastair McFarlane
· 10 days ago
3a68126
Make audit log files group readable
by Sean B. Palmer
· 10 days ago
f3aa6d9
Write unified daily audit logs
by Sean B. Palmer
· 11 days ago
cda6768
Add a module to build daily audit logs
by Sean B. Palmer
· 11 days ago
36ab484
Add a module for log sealing using SLH-DSA signatures
by Sean B. Palmer
· 11 days ago
191367f
Preserve timezone information across models
by Sean B. Palmer
· 11 days ago
6ad5f6e
Add a regression test for distribution date timezone preservation
by Sean B. Palmer
· 11 days ago
ec438f3
Preserve timezone information when parsing distribution upload dates
by Sean B. Palmer
· 11 days ago
9defffd
Add dependencies for log sealing
by Sean B. Palmer
· 11 days ago
b35583b
Update dependencies
by Sean B. Palmer
· 11 days ago
c01e00b
Ensure that log timestamps are consistently formatted
by Sean B. Palmer
· 11 days ago
f6615b6
#1624 - Move commit hash to upload form since it's set by other methods already
by Alastair McFarlane
· 11 days ago
cc6f072
Ensure that OpenPGP serialisation does not drift from our requirements
by Sean B. Palmer
· 2 weeks ago
eed485e
Make OpenPGP formatting compatible with GnuPG in pages and endpoints
by Sean B. Palmer
· 2 weeks ago
5c4c92a
Make KEYS output compatible with GnuPG
by Sean B. Palmer
· 2 weeks ago
e9a32c7
#1616 - Update module docs
by Alastair McFarlane
· 2 weeks ago
625be4f
Add rule type descriptions
by Alastair McFarlane
· 2 weeks ago
67c0c32
Add SHA to more pages
by Alastair McFarlane
· 2 weeks ago
1e417d6
Restore ability for staging to poll dist/atr while production still checks downloads.a.o
by Alastair McFarlane
· 2 weeks ago
b674283
Add warning on manual upload after TP, and advise on re-updating SHA after upload.
by Alastair McFarlane
· 2 weeks ago
11409f5
Update action pin
by Alastair McFarlane
· 2 weeks ago
1223839
#1624 - allow setting explicit commit SHA in TP upload flow
by Alastair McFarlane
· 2 weeks ago
391252d
Move dist watcher rules to catalog admin page
by Alastair McFarlane
· 2 weeks ago
Next »