Billy Lynch

Idea: Pipeline Mutexes

28

This was an idea that @k floated to me awhile back, but I finally got around to making an issue to discuss. What I'm curious about: - Is this a...

Check: return non-zero status code for unknown licenses.

1

Previously if an unknown license was detected, an error message was printed, but the command would still return 0, indicating success for many CI tools. This fixes the behavior to...

Check returns exit code 0 when LICENSE is not found

2

# Expected behavior `go-licenses check` returns non-zero exit code when it cannot find a valid license so that tools/scripts can report error. # Actual behavior Exit code 0 is returned....

github: Use noreply email if public email is private.

2

#### Overview This change adds an option to Dex to return these emails instead of fetching their primary email. Since this only appears to work for public and Enterprise Cloud...

github: Use noreply email if public email not set.

2

### Preflight Checklist - [X] I agree to follow the [Code of Conduct](https://github.com/dexidp/dex/blob/master/.github/CODE_OF_CONDUCT.md) that this project adheres to. - [X] I have searched the [issue tracker](https://www.github.com/dexidp/dex/issues) for an issue that...

Verify: require cert to match committer?

7

This could be a disruptive change to users, so looking for feedback before we commit to this - should we require by default that the cert contained in the git...

**Description** It would be great to wire up [viper](https://pkg.go.dev/github.com/spf13/viper) or something similar to have file based configuration for gitsign (i.e. `~/.gitsign`) rather than needing to export a bunch of environment...

**Description** If the [`user.signingKey`](https://git-scm.com/docs/git-config#Documentation/git-config.txt-usersigningKey) git config option is set, this value will be set as an argument to `gitsign`: user.signingKey Value | gitsign args ----------------------|-------------- | `gitsign --status-fd=2 -bsau Billy...

Idea: gitsign attest

5

**Description** ~~This is an idea I've had rattling in my mind for awhile that I figured I'd finally write down.~~ Not an original idea! see https://github.com/sigstore/cosign/issues/865 for initial discussion. It...

Add RFC3161 timestamps to signatures?

9

**Description** [We should be able to add RFC3161 signed timestamps into signatures pretty easily](https://pkg.go.dev/github.com/github/smimesign/ietf-cms#SignedData.AddTimestamps). Rekor does provide a timestamping authority today, but it's currently going through some changes that we...