Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[request] Support npm package provenance #2230

Open
3 tasks done
kellymears opened this issue Apr 20, 2023 · 0 comments
Open
3 tasks done

[request] Support npm package provenance #2230

kellymears opened this issue Apr 20, 2023 · 0 comments
Assignees
@kellymears
Labels
in-progress Active work

Comments

@kellymears
Copy link
Member

Agreement

The feature

bud.js should support npm package provenance

Use case

No response

Notes

https://github.blog/2023-04-19-introducing-npm-package-provenance/
@kellymears kellymears self-assigned this Apr 20, 2023
@kellymears kellymears added the planned Planned work label May 11, 2023
@kellymears kellymears mentioned this issue May 12, 2023
Merged
@kellymears kellymears added in-progress Active work and removed planned Planned work labels May 12, 2023
kodiakhq bot pushed a commit that referenced this issue May 12, 2023
@kellymears
🔐 security: support npm package provenance (#2259)
045b31f 
Support npm package provenance

See: 
- #2230
- https://docs.npmjs.com/generating-provenance-statements

## Type of change

**NONE: internal change**
@kellymears kellymears mentioned this issue May 22, 2023
Merged
kodiakhq bot pushed a commit that referenced this issue May 22, 2023
@kellymears
⚙️ fix(internal): remove provenance (#2285)
9c6704f 
The `--provenance` experiment did not turn out great. We'll try again when there is official support for yarn.

## References
- #2230

## Type of change

**PATCH: backwards compatible change**
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@kellymears kellymears

Labels
in-progress Active work
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@kellymears