Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Provenance v1.0: initial draft #525

Merged
merged 47 commits into from
Jan 20, 2023
Merged

Provenance v1.0: initial draft #525

merged 47 commits into from
Jan 20, 2023

Commits on Nov 1, 2022

  1. WIP 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    b20437c View commit details
    Browse the repository at this point in the history

  2. WIP: finished proto for v1.0 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    2a3eb61 View commit details
    Browse the repository at this point in the history

  3. WIP: inputArtifacts, parameters 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    ad7e823 View commit details
    Browse the repository at this point in the history

  4. WIP 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    cdecf52 View commit details
    Browse the repository at this point in the history

  5. WIP: apply feedback 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    2ef3659 View commit details
    Browse the repository at this point in the history

  6. WIP: replace proto extension with Markdown link 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    e7dd1e0 View commit details
    Browse the repository at this point in the history

  7. Update example to use latest version of proto 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    c3089de View commit details
    Browse the repository at this point in the history

  8. artifacts: go back to map, uri 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    25c78c3 View commit details
    Browse the repository at this point in the history

  9. WIP: topLevelInputs and buildDependencies 

    Move all top-level inputs to their own field so that it is clear what
must be verified. Move resolvedDependencies outside since it's not
top-level.

Create new buildDependencies containing resolvedDependencies and
environment. This way buildDefinition is complete.

Revert field names to their v0.2 names, since the name change isn't
worth the switch.

Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    1015166 View commit details
    Browse the repository at this point in the history

  10. WIP: make examples more realistic 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    861d844 View commit details
    Browse the repository at this point in the history

  11. WIP: add cue file 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    f499fad View commit details
    Browse the repository at this point in the history

  12. WIP: add Tekton example and TODO 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    cec3785 View commit details
    Browse the repository at this point in the history

  13. WIP: merge everything into markdown file 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    82a3c28 View commit details
    Browse the repository at this point in the history

  14. WIP: remove extra divs 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    df6bec9 View commit details
    Browse the repository at this point in the history

  15. WIP: rewrite intro 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    668f41a View commit details
    Browse the repository at this point in the history

  16. WIP: rename Artifact to ArtifactReference 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    5a96d3a View commit details
    Browse the repository at this point in the history

  17. Use headings in change history 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    c397e76 View commit details
    Browse the repository at this point in the history

  18. Make draft URL work 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    f1adaf3 View commit details
    Browse the repository at this point in the history

  19. fix lint errors 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 1, 2022
    Configuration menu
    Copy the full SHA
    f5a4b06 View commit details
    Browse the repository at this point in the history

Commits on Nov 4, 2022

  1. Address PR feedback 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 4, 2022
    Configuration menu
    Copy the full SHA
    b661ee1 View commit details
    Browse the repository at this point in the history

Commits on Nov 7, 2022

  1. Add builderDependencies 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 7, 2022
    Configuration menu
    Copy the full SHA
    5aab59b View commit details
    Browse the repository at this point in the history

Commits on Nov 9, 2022

  1. WIP: lowercase purl, move TODO 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 9, 2022
    Configuration menu
    Copy the full SHA
    78ae06f View commit details
    Browse the repository at this point in the history

Commits on Nov 11, 2022

  1. WIP 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 11, 2022
    Configuration menu
    Copy the full SHA
    11459e6 View commit details
    Browse the repository at this point in the history

Commits on Nov 15, 2022

  1. WIP: refactor - external vs system parameters 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 15, 2022
    Configuration menu
    Copy the full SHA
    5d1e791 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'main' into provenance-refactor 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 15, 2022
    Configuration menu
    Copy the full SHA
    32f9d2f View commit details
    Browse the repository at this point in the history

  3. WIP: fix typo in URL 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 15, 2022
    Configuration menu
    Copy the full SHA
    d044c3d View commit details
    Browse the repository at this point in the history

  4. WIP: add todo 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 15, 2022
    Configuration menu
    Copy the full SHA
    3ae85a9 View commit details
    Browse the repository at this point in the history

  5. Use the generic SLSA generator for the example. 

    The "go" example was too confusing because the interface isn't actually
a GitHub Actions workflow.

Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 15, 2022
    Configuration menu
    Copy the full SHA
    e60f742 View commit details
    Browse the repository at this point in the history

Commits on Nov 30, 2022

  1. Make builder.version a map 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 30, 2022
    Configuration menu
    Copy the full SHA
    479b7b3 View commit details
    Browse the repository at this point in the history

  2. Replace .artifacts[name] with [name].artifact. 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Nov 30, 2022
    Configuration menu
    Copy the full SHA
    9ca7346 View commit details
    Browse the repository at this point in the history

Commits on Dec 1, 2022

  1. Replace map with array of name/value pairs 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Dec 1, 2022
    Configuration menu
    Copy the full SHA
    d63f6ba View commit details
    Browse the repository at this point in the history

Commits on Dec 8, 2022

  1. Revert "Replace map with array of name/value pairs" 

    This reverts commit d63f6ba.
    @MarkLodato
    MarkLodato committed Dec 8, 2022
    Configuration menu
    Copy the full SHA
    03a0660 View commit details
    Browse the repository at this point in the history

Commits on Jan 4, 2023

  1. Update provenance build model 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 4, 2023
    Configuration menu
    Copy the full SHA
    0ca0d69 View commit details
    Browse the repository at this point in the history

  2. Merge branch 'main' into provenance-refactor 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 4, 2023
    Configuration menu
    Copy the full SHA
    8b32358 View commit details
    Browse the repository at this point in the history

  3. Disable lint for blank lines betwen blockqutoes 

    We often use multiple adjacent blockquotes for TODOs or warnings. This
is perfectly valid Markdown. The lint marks it as a possible mistake,
but as long as the reviewer verifies that it renders correctly, this
gets in the way more than it helps.

Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 4, 2023
    Configuration menu
    Copy the full SHA
    622c0b5 View commit details
    Browse the repository at this point in the history

  4. proto nits: consistent required/optional syntax 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 4, 2023
    Configuration menu
    Copy the full SHA
    77d5814 View commit details
    Browse the repository at this point in the history

Commits on Jan 5, 2023

  1. More iteration on model 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 5, 2023
    Configuration menu
    Copy the full SHA
    a18326b View commit details
    Browse the repository at this point in the history

Commits on Jan 6, 2023

  1. Move github actions to separate file; revise text 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    3b728b4 View commit details
    Browse the repository at this point in the history

Commits on Jan 17, 2023

  1. Only include major version in provenance URL. 

    Also move to a subdirectory (1) since we now have multiple files and (2)
to make relative includes work correclty whether or not the URL has a
trailing slash.

Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 17, 2023
    Configuration menu
    Copy the full SHA
    a4494fb View commit details
    Browse the repository at this point in the history

Commits on Jan 18, 2023

  1. WIP: move to Markdown 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 18, 2023
    Configuration menu
    Copy the full SHA
    31094f7 View commit details
    Browse the repository at this point in the history

  2. Finish Markdown conversion, add other param types 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 18, 2023
    Configuration menu
    Copy the full SHA
    472ba94 View commit details
    Browse the repository at this point in the history

  3. address comments 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 18, 2023
    Configuration menu
    Copy the full SHA
    fdce758 View commit details
    Browse the repository at this point in the history

  4. Merge branch 'main' into provenance-refactor 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 18, 2023
    Configuration menu
    Copy the full SHA
    268a64d View commit details
    Browse the repository at this point in the history

  5. fix mdlint 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 18, 2023
    Configuration menu
    Copy the full SHA
    aba878e View commit details
    Browse the repository at this point in the history

Commits on Jan 19, 2023

  1. add TODO about creating other build types 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 19, 2023
    Configuration menu
    Copy the full SHA
    1987abf View commit details
    Browse the repository at this point in the history

Commits on Jan 20, 2023

  1. Fix typos in provenance v1.0 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 20, 2023
    Configuration menu
    Copy the full SHA
    40aeb77 View commit details
    Browse the repository at this point in the history

  2. drop .md from link 

    Signed-off-by: Mark Lodato <lodato@google.com>
    @MarkLodato
    MarkLodato committed Jan 20, 2023
    Configuration menu
    Copy the full SHA
    4210074 View commit details
    Browse the repository at this point in the history