Skip to content

feat: support disabling slsa-verifier's --source-tag#3725

Merged
suzuki-shunsuke merged 2 commits into
mainfrom
feat-support-disable-source-tag
Apr 4, 2025
Merged

feat: support disabling slsa-verifier's --source-tag#3725
suzuki-shunsuke merged 2 commits into
mainfrom
feat-support-disable-source-tag

Conversation

@suzuki-shunsuke

@suzuki-shunsuke suzuki-shunsuke commented Apr 4, 2025

Copy link
Copy Markdown
Member

Close #3613

slsa_provenance:
  type: github_release
  asset: multiple.intoto.jsonl
  source_tag: "-"

If source_tag is -, --source-tag isn't set.

@suzuki-shunsuke suzuki-shunsuke force-pushed the feat-support-disable-source-tag branch from 2ffadb5 to d2d92b9 Compare April 4, 2025 13:11
@suzuki-shunsuke suzuki-shunsuke added this to the v2.47.3 milestone Apr 4, 2025
@suzuki-shunsuke

Copy link
Copy Markdown
Member Author

@suzuki-shunsuke suzuki-shunsuke merged commit 88d24d9 into main Apr 4, 2025
@suzuki-shunsuke suzuki-shunsuke deleted the feat-support-disable-source-tag branch April 4, 2025 13:35
@github-project-automation github-project-automation Bot moved this to Done in main Apr 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request security slsa

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SLSA provenance verify tag problem with jreleaser/jreleaser

1 participant