Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Trusty: Block on deprecated, expose provenance #3422

Merged
merged 3 commits into from
May 27, 2024

Conversation

puerco
Copy link
Contributor

@puerco puerco commented May 27, 2024

Summary

This PR adds support for blocking pull requests introducing pull requests.

It also adds support to show provenance data (historical and sigstore) when trusty supplies it for the new dependencies.

Fixes #3379
Fixes #3382

Change Type

Mark the type of change your PR introduces:

  • Bug fix (resolves an issue without affecting existing features)
  • Feature (adds new functionality without breaking changes)
  • Breaking change (may impact existing functionalities or require documentation updates)
  • Documentation (updates or additions to documentation)
  • Refactoring or test improvements (no bug fixes or new functionality)

Testing

Added a new test for the function that computes the provenance data

Heres the new improved section showing the deprecated flag and the provenance data:

image

Review Checklist:

  • Reviewed my own code for quality and clarity.
  • Added comments to complex or tricky code sections.
  • Updated any affected documentation.
  • Included tests that validate the fix or feature.
  • Checked that related changes are merged.

Signed-off-by: Adolfo García Veytia (puerco) <puerco@stacklok.com>
Signed-off-by: Adolfo García Veytia (puerco) <puerco@stacklok.com>
Signed-off-by: Adolfo García Veytia (puerco) <puerco@stacklok.com>
@coveralls
Copy link

Coverage Status

coverage: 52.0% (+0.02%) from 51.98%
when pulling 896f131 on puerco:deprecated
into 586144c on stacklok:main.

@puerco puerco merged commit d3478b4 into mindersec:main May 27, 2024
21 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Trusty integration: Surface provenance details Trusty Integration: Block PR on deprecated/malicious
3 participants