John

Alignment with Verifiable Credentials

1

Would be good to explore if there is overlap or alignment possibilities.

`-R` is used everywhere else in `gh` to specify a repository other than from the current working directory. It would be nice to align with the rest of the `gh`...

Policy engine workflow for building and testing 2nd party plugins

1

- TODO - [x] beta attestation API - [x] test cases - https://github.com/search?q=org%3Aintel+path%3Apyproject.toml&type=code - These are existing intel repos which are pep-518 comparable, so they should build with the `build`...

- Use existing `github_api.py` to patch 2nd party plugins

- **Revert "best practices: oss scorecard: pindeps: Commit requirements-lock.txt files"** - **best practices: ossf scorecard: Fix pinning per Pedro suggestion with --require-hashes** - **best practices: oss scorecard: pindeps: Commit requirements-lock.txt...

Export host ssh key for use with doctl compute ssh

1

Originally reported here: https://github.com/digitalocean/do-agent/issues/305 ## Describe the problem When we start a droplet and ssh in for the first time we are prompted to validate the host key. If the...

infra: funding: Come up with a way to fund infra from community

7

- https://docs.tea.xyz/tea-white-paper/white-paper#staking-to-secure-the-software-supply-chain - https://twitter.com/pdxjohnny/status/1446114123561848836 - #1241

- TODO - [ ] Async comms summary - [ ] Lists - [ ] Lists of lists and how we can use them to leverage AI's conceptual grouping capabilities...

- #1400 - Future - [ ]