Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Register Assured Open Source Software to monitored indexes once available #414

Open
fridex opened this issue May 24, 2022 · 2 comments
Open
Labels
kind/feature Categorizes issue or PR as related to a new feature. priority/backlog Higher priority than priority/awaiting-more-evidence. sig/stack-guidance Categorizes an issue or PR as relevant to SIG Stack Guidance.

Comments

@fridex
Copy link
Contributor

fridex commented May 24, 2022

Problem statement

See https://www.csoonline.com/article/3660799/google-to-launch-repository-service-with-security-tested-versions-of-open-source-software-packages.html

It would be great to allow users of Thoth to consume software packages from this repository. Let's register it to Thoth once it will be available. We can monitor all the releases (not only those that have been seen previously) as the index claims to be secured.

@fridex fridex added the kind/feature Categorizes issue or PR as related to a new feature. label May 24, 2022
@fridex
Copy link
Contributor Author

fridex commented May 24, 2022

/sig stack-guidance
/priority backlog

1 similar comment
@goern
Copy link
Member

goern commented Jul 20, 2022

/sig stack-guidance
/priority backlog

@sesheta sesheta added sig/stack-guidance Categorizes an issue or PR as relevant to SIG Stack Guidance. priority/backlog Higher priority than priority/awaiting-more-evidence. labels Jul 20, 2022
@codificat codificat moved this to 📋 Backlog in Planning Board Sep 24, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature Categorizes issue or PR as related to a new feature. priority/backlog Higher priority than priority/awaiting-more-evidence. sig/stack-guidance Categorizes an issue or PR as relevant to SIG Stack Guidance.
Projects
Status: 📋 Backlog
Development

No branches or pull requests

3 participants