Alex Eagle
Alex Eagle
Hi @jacobgardner I'm doing a bit of cleanup here, seems like this is probably abandoned. We'd still love to collaborate with you!
Barely held together by twine is accurate. It's also churning more as the protobuf team has decided to deprecate rules_proto and move things into their repo.
@srikrsna-buf sorry, for some reason I don't see the normal "allow maintainers to write to the PR branch" here - I guess because this originates from an org instead of...
Hm, maybe we just need to pass all `package.json` files from 3p libraries into the esbuild action so it's able to see that field? Any idea if that would work?
We chatted about this today, have some ideas but want to start with a simple repro so we can get hands-on.
We think it's a pretty messy situation to have node-java involved (it also needs Python??) and it will be hard to make it work under Bazel the way you'd expect....
Notes from SIG meeting: this transfer was unanimously approved by a thumbs-up vote.
@nkoroste @oliviernotteghem you have some opinions on this?
@loosebazooka has a fix for slsa-verifier locally that works with the provenance statements in this release: https://github.com/slsa-framework/slsa-verifier/pull/840
@fweikert could we disable the broken slsa-verifier check for now, so this release could land? Otherwise I think I'll have to revert things from rules_lint.