Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: Update changelog for #3350 #3401

Merged
merged 4 commits into from Mar 20, 2024
Merged

chore: Update changelog for #3350 #3401

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
0354c9e
update
laurentsimon Mar 20, 2024
32f4b91
update
laurentsimon Mar 20, 2024
57af8f9
update
laurentsimon Mar 20, 2024
6c3aedd
update
laurentsimon Mar 20, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
16 changes: 16 additions & 0 deletions README.md
View file
Open in desktop
Expand Up @@ -27,6 +27,8 @@
- [Installation](#installation)
- [Inputs](#inputs)
- [Command line examples](#command-line-examples)
- [Known Issues](#known-issues)
- [error updating to TUF remote mirror: invalid](#error-updating-to-tuf-remote-mirror-invalid)
- [Build Your Own Builder](#build-your-own-builder)
- [Project Roadmap](#project-roadmap)
- [Technical design](#technical-design)
Expand Down Expand Up @@ -199,6 +201,20 @@ The inputs of the verifier are described in [slsa-framework/slsa-verifier#availa

A command line example is provided in [slsa-framework/slsa-verifier#example](https://github.com/slsa-framework/slsa-verifier#example).

## Known Issues

### error updating to TUF remote mirror: invalid

This will occur only when generating provenance with all builders and generators.

**Affected versions:** all versions up and including v1.9.0

```shell
error updating to TUF remote mirror: invalid
```

This issue is tracked by [issue #3350](https://github.com/slsa-framework/slsa-github-generator/issues/3350). You _must_ update to the newest patch versions of each minor release to fix this issue.

## Build Your Own Builder

Use the [BYOB framework](BYOB.md) to create your own SLSA builder on GitHub. If you have an existing GitHub Action, you can use the BYOB framework to wrap it into a SLSA builder.
Expand Down