This repository has been archived by the owner on Apr 9, 2024. It is now read-only.
Releases: project-oak/transparent-release
Releases · project-oak/transparent-release
SLSA v1 support
This release deprecates and removes amber, and adds support for SLSA v1 provenances.
What's Changed
- Remove builder by @rbehjati in #223
- Remove the Amber provenance format by @rbehjati in #225
- Refactor package common by @rbehjati in #226
- Parse SLSA v1 provenances to the internal representation by @rbehjati in #227
- Add Endorsement in Confidential Computing use case by @rbehjati in #228
- Improve package names by @rbehjati in #230
Full Changelog: v0.1.0...v1.0.0
v0.1.0
In the version the transparent-release project offers the following command-line tools:
- The builder, for building binaries using a Docker image and based on an input config file. The builder also generates an Amber provenance statement.
- The verifier, for verifying Amber provenances.
- The fuzzbinder, for generating fuzzing claims for a repo, based on fuzzing reports from a given date.