Matthias Glastra
Matthias Glastra
## Description To be able to build a new image I had to change a few things to make building possible. ## Motivation and Context - There was a change...
**Describe the bug** Checking out the latest master I'm not able to build an new rpi image on a clean VM. **To Reproduce** I used a clean Ubuntu box and...
When attesting a git repo with lfs objects it shows files as being changed. But they are just checked out files. The attestation showing a changed state and all the...
**What steps did you take and what happened:** It looks like the check for SBOM by CLO Monitor is not correct. We do not output SBOM yet on the project...
## What this PR does / why we need it Adding the dirhash-glob arguments ## Which issue(s) this PR fixes (optional) Depends on: - [x] https://github.com/in-toto/go-witness/pull/223 Fixes: #216 and https://github.com/in-toto/go-witness/issues/65...
I am using please build and would love to see some provenance attestation data being output when I run the build. Lately the requests in open source for provenance data...
After the migration of the Helm chart from testifysec to in-toto/archivista we forgot to remove the references to testifysec from the chart. These can be removed. I spoke with @kairoaraujo...
Related to: https://github.com/in-toto/witness/pull/436 This a different approach to #65. It captures a dirhash for material and product if the dir is mentioned as an argument. ``` witness run --dirhash-glob node_modules/*...
This change addresses a problem with `--attestor-product-exclude-glob` and `--attestor-product-include-glob` they only worked for the Subject collection, but not for the Product attestation. Also it did not allow for include overwriting...
Allowing per attestor type to run all the attestors in parallel to speed up the process. - [x] Check for need of mutex in different attestors when using data from...