Skip to content

blog: slsa generator and verifier v1 release#398

Merged
inferno-chromium merged 14 commits into
slsa-framework:mainfrom
asraa:slsa-v1-release
Jun 21, 2022
Merged

blog: slsa generator and verifier v1 release#398
inferno-chromium merged 14 commits into
slsa-framework:mainfrom
asraa:slsa-v1-release

Conversation

@asraa
Copy link
Copy Markdown
Contributor

@asraa asraa commented Jun 13, 2022

Signed-off-by: Asra Ali asraa@google.com

Adds a blog post (scheduled for 6/20) on the v1 release of the SLSA GitHub generator workflows and verifier CLI.

cc @laurentsimon @ianlewis @MarkLodato @joshuagl @josepalafox

@netlify
Copy link
Copy Markdown

netlify Bot commented Jun 13, 2022 •
edited
Loading

✅ Deploy Preview for slsa ready!

Name Link
🔨 Latest commit c954cc8
🔍 Latest deploy log https://app.netlify.com/sites/slsa/deploys/62b1f039fd11ee000974a5a0
😎 Deploy Preview https://deploy-preview-398--slsa.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

laurentsimon
laurentsimon reviewed Jun 13, 2022
View reviewed changes
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
@inferno-chromium inferno-chromium requested a review from a team June 13, 2022 18:42
laurentsimon
laurentsimon reviewed Jun 13, 2022
View reviewed changes
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
laurentsimon
laurentsimon approved these changes Jun 13, 2022
View reviewed changes
Copy link
Copy Markdown
Contributor

@laurentsimon laurentsimon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

ianlewis
ianlewis approved these changes Jun 13, 2022
View reviewed changes
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
joshuagl
joshuagl approved these changes Jun 14, 2022
View reviewed changes
Copy link
Copy Markdown
Member

@joshuagl joshuagl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, thanks!

Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
@inferno-chromium
Copy link
Copy Markdown
Contributor

inferno-chromium commented Jun 15, 2022

This is ready to be rebased (since another blog post was merged), also please incorporate @joshuagl suggestions. Then we can ask the slsa committee for review.

mlieberman85
mlieberman85 reviewed Jun 15, 2022
View reviewed changes
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
@asraa asraa force-pushed the slsa-v1-release branch from 3bed2dc to cca3877 Compare June 15, 2022 22:16
@asraa
Copy link
Copy Markdown
Contributor Author

asraa commented Jun 15, 2022

Addressed, rebased and fixed lint!

pxp928
pxp928 reviewed Jun 15, 2022
View reviewed changes
Comment thread docs/_posts/2022-06-20-slsa-workflows.md
@inferno-chromium inferno-chromium requested a review from a team June 16, 2022 03:32
joshuagl
joshuagl reviewed Jun 16, 2022
View reviewed changes
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
@dlorenc
Copy link
Copy Markdown

dlorenc commented Jun 16, 2022

Nice post!

MarkLodato
MarkLodato reviewed Jun 16, 2022
View reviewed changes
Comment thread docs/_posts/2022-06-20-slsa-workflows.md
@@ -0,0 +1,157 @@
---
Copy link
Copy Markdown
Member

@MarkLodato MarkLodato Jun 16, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For some reason this is not showing up at https://deploy-preview-398--slsa.netlify.app/blog, even though it did build from cca3877.

Could you try building locally to see if it shows up there?

Copy link
Copy Markdown
Contributor

@laurentsimon laurentsimon Jun 18, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@inferno-chromium @asraa this seems to be the last blocker. Anyone familiar with netlify?

Copy link
Copy Markdown
Contributor

@inferno-chromium inferno-chromium Jun 18, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am guessing this is because of the future date, try with today's date and i think it will work.

Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
Comment thread docs/_posts/2022-06-20-slsa-workflows.md Outdated
Comment thread docs/_posts/2022-06-20-slsa-workflows.md
@laurentsimon laurentsimon mentioned this pull request Jun 16, 2022
Merged
23 tasks
@inferno-chromium inferno-chromium mentioned this pull request Jun 16, 2022
Closed
@laurentsimon laurentsimon mentioned this pull request Jun 17, 2022
Closed
laurentsimon
laurentsimon reviewed Jun 18, 2022
View reviewed changes
Comment thread docs/_posts/2022-06-20-slsa-workflows.md
chipzoller
chipzoller reviewed Jun 18, 2022
View reviewed changes
Comment thread docs/_posts/2022-06-20-slsa-github-workflows.md
asraa and others added 9 commits June 20, 2022 09:50
@asraa
blog post: slsa generator and verifier v1 release
d2d9cad 
Signed-off-by: Asra Ali <asraa@google.com>
@asraa
update
c620043 
Signed-off-by: Asra Ali <asraa@google.com>
@asraa
make updates
e1c0de0 
Signed-off-by: Asra Ali <asraa@google.com>
@asraa
fix lint
166ac20 
Signed-off-by: Asra Ali <asraa@google.com>
@laurentsimon @asraa
Rename 2022-06-20-slsa-workflows.md to 2022-06-20-slsa-github-workflo…
7a6cd1d 
…ws.md

Signed-off-by: Asra Ali <asraa@google.com>
@laurentsimon @asraa
Remove v0.2 from provenance URL
fd3269e 
Signed-off-by: Asra Ali <asraa@google.com>
@laurentsimon @asraa
Update 2022-06-20-slsa-github-workflows.md
09808ca 
Signed-off-by: Asra Ali <asraa@google.com>
@laurentsimon @asraa
Change Golang to Go
d005595 
Signed-off-by: Asra Ali <asraa@google.com>
@laurentsimon @asraa
Update 2022-06-20-slsa-github-workflows.md
a355789 
Signed-off-by: Asra Ali <asraa@google.com>
@asraa asraa force-pushed the slsa-v1-release branch from c198c1b to a355789 Compare June 20, 2022 14:50
@asraa
Add info on availability of starter workflow this week
c5a8b20 
Signed-off-by: Asra Ali <asraa@google.com>
@asraa
Copy link
Copy Markdown
Contributor Author

asraa commented Jun 20, 2022 •
edited
Loading

Fixed DCO, and looks like the preview is live, it seems like it was the date issue
https://deploy-preview-398--slsa.netlify.app/blog

EDIT: It looks like the coloring on shell code comments turns up bad -- the words are too close to the background color. Any advice on the best way to change that? Color theme in the config yaml? I don't want to change the theme D:

asraa added 3 commits June 20, 2022 20:14
@asraa
update version info
77561f1 
Signed-off-by: Asra Ali <asraa@google.com>
@asraa
add image
9564448 
Signed-off-by: Asra Ali <asraa@google.com>
@asraa
update the starter workflow
ffd27e8 
Signed-off-by: Asra Ali <asraa@google.com>
@asraa
Copy link
Copy Markdown
Contributor Author

asraa commented Jun 21, 2022

This is ready for merge!
cc @laurentsimon @inferno-chromium

@inferno-chromium inferno-chromium merged commit 5941f28 into slsa-framework:main Jun 21, 2022
@inferno-chromium
Copy link
Copy Markdown
Contributor

inferno-chromium commented Jun 21, 2022

Merged based on Joshua's LGTM and comments from Mark, Mike addressed. In future, we will make sure LGTMs are got from atleast one more reviewer. There is a talk from Asra, Laurent today, so this needs to be merged to reference that.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@MarkLodato MarkLodato MarkLodato left review comments

@mlieberman85 mlieberman85 mlieberman85 left review comments

@ianlewis ianlewis ianlewis approved these changes

+5 more reviewers

@inferno-chromium inferno-chromium inferno-chromium left review comments

@joshuagl joshuagl joshuagl approved these changes

@chipzoller chipzoller chipzoller left review comments

@laurentsimon laurentsimon laurentsimon approved these changes

@pxp928 pxp928 pxp928 left review comments

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

10 participants

@asraa @inferno-chromium @dlorenc @ianlewis @MarkLodato @mlieberman85 @joshuagl @chipzoller @laurentsimon @pxp928