commits  

Messages by Date

• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.4.1 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.3.4 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.3.3 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.3.2 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: Updating docs akm
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.3.1 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.2.6 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.2.5 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.2.4 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.2.3 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.2.2 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.2.1 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.1.4 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.1.3 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.1.2 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-trusted-releases) branch dependabot/github_actions/actions/cache-5.0.5 created (now 3dc24a2d) github-bot
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 13.1.1 (secrets_and_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 15.2.5 (dependency_and_supply_chain) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 15.2.4 (dependency_and_supply_chain) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 15.2.3 (dependency_and_supply_chain) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 15.2.2 (dependency_and_supply_chain) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 15.2.1 (dependency_and_supply_chain) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 15.1.5 (dependency_and_supply_chain) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 15.1.4 (dependency_and_supply_chain) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: Whitespace akm
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 15.1.3 (dependency_and_supply_chain) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 15.1.2 (dependency_and_supply_chain) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 15.1.1 (dependency_and_supply_chain) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 3.1.1 (browser_security_headers) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 2.4.2 (rate_limiting_and_dos) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 2.4.1 (rate_limiting_and_dos) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.3.5 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.3.4 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.3.3 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.3.2 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.3.1 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.2.2 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.2.1 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.1.5 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.1.4 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.1.3 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.1.2 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 12.1.1 (tls_and_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.3.2 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.3.1 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.2.8 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.2.7 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.2.6 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.2.5 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.2.4 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.2.2 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.2.1 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.2.3 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.1.2 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L3 audit: 17.1.1 (webrtc_media_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS req full coverage, flipping reasoning params akm
• 2026/04/21 (tooling-trusted-releases) branch main updated (9fd67730 -> d1168345) sbp
• 2026/04/21 (tooling-trusted-releases) branch sbp updated (2fdc039e -> d1168345) sbp
• 2026/04/21 (tooling-trusted-releases) 01/01: Make tags immutable sbp
• 2026/04/21 (tooling-trusted-releases) branch fix-server-crash-on-missing-keys deleted (was b3e0ec5b) wave
• 2026/04/21 (tooling-trusted-releases) branch main updated: Fix env var for expected secret crashes server (#1181) wave
• 2026/04/21 (tooling-trusted-releases) branch main updated (b37d774f -> 2fdc039e) sbp
• 2026/04/21 (tooling-trusted-releases) branch sbp updated: Remove unnecessary duplication of identities to authorise sbp
• 2026/04/21 (tooling-trusted-releases) branch sbp updated (51b41566 -> b37d774f) sbp
• 2026/04/21 (tooling-trusted-releases) branch main updated (2d3dbbdc -> b37d774f) sbp
• 2026/04/21 (tooling-trusted-releases) branch main updated (52bcebee -> 2d3dbbdc) arm
• 2026/04/21 (tooling-trusted-releases) branch sbp updated (2978ce24 -> 51b41566) sbp
• 2026/04/21 (tooling-trusted-releases) 01/01: Warn if Python TLS defaults change sbp
• 2026/04/21 (tooling-trusted-releases) branch arm updated: #1038 - Switch admin elementresponse pages to add template UI arm
• 2026/04/21 (tooling-trusted-releases) branch main updated (007ca385 -> 52bcebee) arm
• 2026/04/21 (tooling-trusted-releases) branch arm updated: #1183 - overwrite file in new revision when uploading a file with the same name as an earlier revision, preserving files in previous revisions. arm
• 2026/04/21 (tooling-trusted-releases) branch project_archival updated (70c8fd4b -> a84f41e8) arm
• 2026/04/21 (tooling-agents) branch main updated: Add consolidated audit report (L1) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: Add security issues (L1) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 10.4.5 (authentication_authorization) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 10.4.4 (authentication_authorization) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 10.4.3 (authentication_authorization) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: Clear repo from data store before downloading for new run akm
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 10.4.2 (authentication_authorization) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 10.4.1 (authentication_authorization) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 2.3.1 (business_logic_voting) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 15.3.1 (data_minimization_exposure) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 14.3.1 (data_minimization_exposure) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 2.2.2 (web_input_validation) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: Notate what severity threshold was applied akm
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 2.2.1 (web_input_validation) asf-tooling
• 2026/04/21 (tooling-trusted-releases) 04/04: #510 - Tests for archived projects, and restrictions on actions *on* archived projects. arm
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 2.1.1 (web_input_validation) asf-tooling
• 2026/04/21 (tooling-trusted-releases) branch project_archival updated (5f40e55d -> 70c8fd4b) arm
• 2026/04/21 (tooling-trusted-releases) 01/04: #510 - add archive button arm
• 2026/04/21 (tooling-trusted-releases) 02/04: #510 - allow projects to be archived arm
• 2026/04/21 (tooling-trusted-releases) 03/04: Fix test for revoke button arm
• 2026/04/21 (tooling-trusted-releases) branch arm updated (8fe9234b -> 007ca385) arm
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 1.5.1 (web_input_validation) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 1.3.2 (web_input_validation) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: Adding default for level akm
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 1.3.1 (web_input_validation) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 1.2.5 (web_input_validation) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 1.2.4 (web_input_validation) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 1.2.3 (web_input_validation) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 1.2.2 (web_input_validation) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: Publish to subdir if subdir is in input akm
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 1.2.1 (web_input_validation) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 11.4.1 (vote_encryption_storage) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 11.3.2 (vote_encryption_storage) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 11.3.1 (vote_encryption_storage) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 13.4.1 (dependency_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 15.2.1 (dependency_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 15.1.1 (dependency_configuration) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 14.2.1 (admin_tallying_operations) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 12.2.2 (tls_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 12.2.1 (tls_transport_security) asf-tooling
• 2026/04/21 (tooling-agents) branch main updated: ASVS L1 audit: 12.1.1 (tls_transport_security) asf-tooling
• 2026/04/20 (tooling-agents) branch main updated: Fixing file paths akm
• 2026/04/20 (tooling-agents) branch main updated: Added orchestration to readme akm
• 2026/04/20 (tooling-agents) branch main updated: Adding tiny readme akm
• 2026/04/20 (tooling-agents) branch main updated: Moving json to the right filename akm
• 2026/04/20 (tooling-agents) branch main updated: Fixing json getting md-suffixed akm
• 2026/04/20 (tooling-agents) branch main updated: CI scan: executive brief (apache) asf-tooling
• 2026/04/20 (tooling-agents) branch main updated: CI scan: combined review (apache) asf-tooling
• 2026/04/20 (tooling-trusted-releases) branch main updated (2978ce24 -> 007ca385) sbp
• 2026/04/20 (tooling-trusted-releases) 01/01: Add rpgp-py as a dependency sbp
• 2026/04/20 (tooling-trusted-releases) branch altera updated (68695a33 -> 007ca385) sbp
• 2026/04/20 (tooling-trusted-releases) branch main updated (f2fc09ab -> 2978ce24) sbp
• 2026/04/20 (tooling-trusted-releases) branch main updated (24072a50 -> f2fc09ab) sbp
• 2026/04/20 (tooling-actions) branch dependabot/github_actions/actions/cache-5.0.5 created (now c255edd) github-bot
• 2026/04/20 (tooling-releases-client) branch dependabot/github_actions/actions/upload-artifact-7.0.1 created (now d0c06d8) github-bot
• 2026/04/20 (tooling-releases-client) branch dependabot/github_actions/actions/cache-5.0.5 created (now 79ee1ac) github-bot
• 2026/04/20 (tooling-agents) branch main updated: Severity inclusive redact, adding skip prefetch akm
• 2026/04/20 (tooling-trusted-releases) branch altera updated (f094416f -> 68695a33) sbp
• 2026/04/20 (tooling-trusted-releases) 01/01: Add rpgp-py as a dependency sbp
• 2026/04/20 (tooling-trusted-releases) branch sbp updated: Only generate SHA-512 files when there is an artifact signature sbp
• 2026/04/20 (tooling-trusted-releases) 02/02: #510 - Tests for archived projects, and restrictions on actions *on* archived projects. arm
• 2026/04/20 (tooling-trusted-releases) 01/02: Fix test for revoke button arm
• 2026/04/20 (tooling-trusted-releases) branch project_archival updated (9ba6a595 -> 5f40e55d) arm
• 2026/04/20 (tooling-trusted-releases) branch main updated (a29d96d6 -> 24072a50) sbp
• 2026/04/20 (tooling-trusted-releases) branch sbp updated: Add release file generation provenance to the database sbp
• 2026/04/20 (tooling-trusted-releases) branch sbp updated (4d06dd3c -> 24072a50) sbp
• 2026/04/20 (tooling-trusted-releases) 01/01: Add provenance data for generated files to attestable classes sbp
• 2026/04/20 (tooling-trusted-releases) branch sbp updated: Add provenance data for generated file to attestable classes sbp
• 2026/04/20 (tooling-trusted-releases) branch main updated (f094416f -> a29d96d6) sbp
• 2026/04/20 (tooling-trusted-releases) 01/01: Use one unique version number for each set of nested attestable models sbp
• 2026/04/20 (tooling-trusted-releases) branch sbp updated (a850cc49 -> a29d96d6) sbp
• 2026/04/20 (tooling-trusted-releases) branch main updated (45b07246 -> f094416f) sbp
• 2026/04/20 (tooling-trusted-releases) 01/01: Use one unique version number for each set of nested attestable models sbp
• 2026/04/20 (tooling-trusted-releases) branch sbp updated (c067a4de -> a850cc49) sbp
• 2026/04/20 (tooling-trusted-releases) branch altera updated: Update dependencies sbp
• 2026/04/20 (tooling-trusted-releases) branch project_archival updated: #510 - allow projects to be archived arm
• 2026/04/19 (tooling-agents) branch main updated: Fixing redaction and tabulation akm
• 2026/04/19 (tooling-agents) branch main updated: Updating readmes akm
• 2026/04/19 (tooling-agents) branch main updated: Fixes for rust wrapper akm
• 2026/04/19 (tooling-agents) branch main updated: Splitting redacted severity out akm
• 2026/04/17 (tooling-trusted-releases) branch main updated (a64f137b -> 45b07246) sbp
• 2026/04/17 (tooling-trusted-releases) branch altera updated: Clarify the purpose of the function to prevent confusing UI display sbp
• 2026/04/17 (tooling-trusted-releases) branch main updated (c067a4de -> a64f137b) sbp
• 2026/04/17 (tooling-trusted-releases) branch altera updated: Remove remnants of access checking from the POST decorator sbp
• 2026/04/17 (tooling-trusted-releases) branch sbp updated (7598fe31 -> c067a4de) sbp
• 2026/04/17 (tooling-trusted-releases) branch main updated (2ce0384d -> c067a4de) sbp
• 2026/04/17 (tooling-trusted-releases) branch main updated (a2d0cb58 -> 2ce0384d) sbp
• 2026/04/17 (tooling-trusted-releases) branch altera updated: Tighten types for phase fields and add tests sbp
• 2026/04/17 (tooling-trusted-releases) branch fix-server-crash-on-missing-keys updated (3f69c3a2 -> b3e0ec5b) sbp
• 2026/04/17 (tooling-trusted-releases) branch fix-server-crash-on-missing-keys created (now 3f69c3a2) wave
• 2026/04/17 (tooling-trusted-releases) 01/01: Fix env var for expected secret crashes server wave
• 2026/04/17 (tooling-trusted-releases) branch main updated (f909ff88 -> a2d0cb58) sbp
• 2026/04/17 (tooling-trusted-releases) branch altera updated: Remove an unused function related to GnuPG sbp
• 2026/04/17 (tooling-trusted-releases) branch altera updated: Add nbf to fields checked during JWT verification sbp
• 2026/04/17 (tooling-trusted-releases) branch main updated (9a4c0a95 -> f909ff88) sbp
• 2026/04/17 (tooling-trusted-releases) branch altera updated: Document the lack of adaptive response to authentication failures sbp
• 2026/04/17 (tooling-trusted-releases) branch main updated (fd82f481 -> 9a4c0a95) sbp
• 2026/04/17 (tooling-trusted-releases) branch altera updated: Add documentation about business logic sbp
• 2026/04/17 (tooling-trusted-releases) branch project_archival created (now 0c0330b2) arm
• 2026/04/17 (tooling-trusted-releases) 01/01: #510 - add archive button arm
• 2026/04/17 (tooling-trusted-releases) branch main updated (7598fe31 -> fd82f481) sbp
• 2026/04/17 (tooling-trusted-releases) 01/01: Add a new branch to CI checks sbp
• 2026/04/17 (tooling-trusted-releases) branch altera created (now fd82f481) sbp
• 2026/04/17 (tooling-trusted-releases) branch main updated (ca9d1469 -> 7598fe31) sbp
• 2026/04/17 (tooling-trusted-releases) branch main updated (0abf5722 -> ca9d1469) sbp
• 2026/04/17 (tooling-trusted-releases) branch sbp updated: Improve error treatment when fetching mailing list threads sbp
• 2026/04/17 (tooling-trusted-releases) branch main updated (8fe9234b -> 0abf5722) sbp
• 2026/04/17 (tooling-trusted-releases) branch sbp updated: Update dependencies sbp
• 2026/04/17 (tooling-trusted-releases) branch sbp updated (8d9c8067 -> 0abf5722) sbp
• 2026/04/17 (tooling-trusted-releases) 01/01: Improve the documentation for moving files sbp
• 2026/04/17 (tooling-trusted-releases) branch main updated (8d9c8067 -> 8fe9234b) arm
• 2026/04/17 (tooling-trusted-releases) branch quarantine_expansion updated (02aa5b7e -> 590caf60) arm
• 2026/04/17 (tooling-trusted-releases) branch quarantine_expansion created (now 02aa5b7e) arm
• 2026/04/17 (tooling-trusted-releases) 01/01: #1177 - allow zip format archives (jar, war, apk, vsix, whl, nar, nbm) to be quarantine checked arm
• 2026/04/17 (tooling-trusted-releases) branch arm updated (31d133a6 -> 8fe9234b) arm
• 2026/04/17 (tooling-trusted-releases) 01/01: #510 - any PMC member can delete a project arm
• 2026/04/16 (tooling-agents) branch main updated: Adding rustopyian constructinator akm
• 2026/04/16 (tooling-agents) branch main updated: Adding titles akm
• 2026/04/16 (tooling-trusted-releases) branch main updated (a75f5bb0 -> 8d9c8067) sbp
• 2026/04/16 (tooling-trusted-releases) branch sbp updated: Classify npm archives as binaries based on archive content sbp
• 2026/04/16 (tooling-trusted-releases) branch arm updated: #510 - any PMC member can delete a project arm
• 2026/04/16 (tooling-trusted-releases) branch main updated (840fd7a6 -> a75f5bb0) sbp
• 2026/04/16 (tooling-trusted-releases) branch sbp updated (d1a81c39 -> a75f5bb0) sbp
• 2026/04/16 (tooling-trusted-releases) 01/01: Check that ssh connections are still active sbp
• 2026/04/16 (tooling-trusted-releases) branch main updated (8243af49 -> 840fd7a6) arm
• 2026/04/16 (tooling-trusted-releases) branch exarch_changes deleted (was 9fb6891d) arm
• 2026/04/16 (tooling-trusted-releases) branch arm updated: #997 and #1022 - rework extraction and quarantine logic to rely on exarch arm
• 2026/04/16 (tooling-trusted-releases) branch arm updated (ac8b1d35 -> 8243af49) arm

• Earlier messages