Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixed the copyright to SLSA #42

Conversation

naveensrinivasan
Copy link
Contributor

@naveensrinivasan naveensrinivasan commented Apr 7, 2022

Fixed the copyright to SLSA

Signed-off-by: naveensrinivasan 172697+naveensrinivasan@users.noreply.github.com

Fixes #41

Fixed the copyright to SLSA

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
Copy link

@inferno-chromium inferno-chromium left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you, many of the slsa-verifier files might need fixing as well. Also, please see if you see missing copyright header in some.

Copy link
Contributor

@laurentsimon laurentsimon left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you Naveen, always on top of things!
If you're interested in helping out on this repo, you're welcome. We have some e2e test to set up here too before the big v1 release. And there are some cool adversarial tests to setup, with malicious dev workflow trying to manipulate artifacts downloaded by the reusable workflow :-)

@naveensrinivasan
Copy link
Contributor Author

Thank you Naveen, always on top of things!
If you're interested in helping out on this repo, you're welcome. We have some e2e test to set up here too before the big v1 release. And there are some cool adversarial tests to setup, with malicious dev workflow trying to manipulate artifacts downloaded by the reusable workflow :-)

Cool! I would love to do that.

@laurentsimon
Copy link
Contributor

laurentsimon commented Apr 7, 2022

Thank you Naveen, always on top of things!
If you're interested in helping out on this repo, you're welcome. We have some e2e test to set up here too before the big v1 release. And there are some cool adversarial tests to setup, with malicious dev workflow trying to manipulate artifacts downloaded by the reusable workflow :-)

Cool! I would love to do that.

Awesome! See slsa-framework/slsa-github-generator#75 and slsa-framework/slsa-verifier#30 for things we need to do before the first official release

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Copyright still points GOSST team.
3 participants