example-package
example-package copied to clipboard
slsa-framework
This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more. ## Awaiting Schedule These updates are awaiting their schedule. Click on a checkbox to...
![forking-renovate[bot] avatar](https://avatars.githubusercontent.com/in/7402?v=4 "forking-renovate[bot] avatar"){kind=avatar}
Followup to https://github.com/slsa-framework/example-package/pull/350 Fixes the tests to correctly edit the payload file, so that this particular test fill fail as expected. - https://github.com/slsa-framework/example-package/blob/e60c8d2444ef0e946b6dcf29528ef444b9d2e7fc/.github/workflows/scripts/e2e-verify.common.sh#L540 We may also want to do the...
Bootstrap scripts often have race conditions where two runs push changes to the repo at the same time causing the push to fail. `e2e-bootstrap.sh` implements retries to help alleviate the...
Because `upload-artifact` and `download-artifact` are not compatible across v3-v4 major bump, we need to upgrade them across all repos at the same time, instead of when Renovate opens a PR...
These scripts can trigger a `push`, `release`, or `workflow_dispatch` event but they can do that depending on the e2e workflow file name. So we should be able to merge them....
Sometime "push to tag" test badges show an incorrect status. **Status badge:**  **Workflow runs:** 
It seems that badges for workflows triggered by `create` events don't correctly show the right status. It's really not clear to me how the status is derived. For example the...
https://github.com/slsa-framework/example-package/actions/runs/5498370673 This causes the status badge for this test to show that it's failing.
Tests often fail with the following error. This seems to be due to [`go install`](https://github.com/slsa-framework/example-package/blob/7d18190b5538def004fb4be8d6f26969b0485155/.github/workflows/scripts/e2e-verify.common.sh#L554) failing to install the verifier binary. When re-run the tests typically pass. ``` **** Provenance...