dev  

Messages by Date

• 2026/01/23 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [I] Move admin user list to LDAP/external configuration (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [I] Move admin user list to LDAP/external configuration (tooling-trusted-releases) via GitHub
• 2026/01/23 [I] Ensure that `TimeoutError: SSL shutdown timed out` do not happen or are not logged (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: Docker log showing GET messages every couple of seconds Alastair McFarlane
• 2026/01/23 Re: Docker log showing GET messages every couple of seconds Sean Palmer
• 2026/01/23 Re: Docker log showing GET messages every couple of seconds sebb
• 2026/01/23 Re: [I] Create SECURITY.md and security documentation (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [I] Document identification of generated source files in lightweight and RAT license checks (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: Docker log showing GET messages every couple of seconds Alastair McFarlane
• 2026/01/23 Re: Docker log showing GET messages every couple of seconds Alastair McFarlane
• 2026/01/23 Docker log showing GET messages every couple of seconds sebb
• 2026/01/23 [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/23 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Allow files to be tagged in the compose phase according to a mapping (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/22 [GH] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Retry failed email deliveries (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Ability to record +1 by release manager (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Ability to record +1 by release manager (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Consider improving logging (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] We should add `Hadolint` a Dockerfile linter, validate inline bash, written in Haskell (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Resolve the design of emptiness and nullability for form types (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Use Mailpit to improve email tests (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Improve HTML form validation error display and code quality (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Use stagex for the default container (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Use stagex for the default container (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Add tests suited to the alpha2 phase (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Speed up building the OCI container (tooling-trusted-releases) via GitHub
• 2026/01/22 [GH] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Storage interface error messages redux (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Improve performance of routes throughout (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Improve performance of routes throughout (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Ensure that error messages from the storage interface are informative (tooling-trusted-releases) via GitHub
• 2026/01/22 [GH] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/22 [GH] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/22 [GH] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/22 [GH] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Implement file type/content validation for uploads (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Implement file type/content validation for uploads (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Implement file type/content validation for uploads (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Ensure that error messages from the storage interface are informative (tooling-trusted-releases) via GitHub
• 2026/01/22 [PR] Storage interface error messages redux (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Storage interface error messages redux (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Implement file type/content validation for uploads (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Implement log injection prevention (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Allow files to be tagged in the compose phase according to a mapping (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Download rsync candidate files by a select tag (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Download rsync candidate files by a select tag (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
• 2026/01/22 [GH] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/22 [GH] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/22 [PR] Bump astral-sh/setup-uv from 6.4.3 to 7.2.0 (tooling-releases-client) via GitHub
• 2026/01/22 [PR] Bump actions/upload-artifact from 4.6.2 to 6.0.0 (tooling-releases-client) via GitHub
• 2026/01/22 [PR] Bump actions/checkout from 4.3.0 to 6.0.2 (tooling-releases-client) via GitHub
• 2026/01/22 Re: [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Update storage interface error messages (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Update storage interface error messages (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Configure session cookie security attributes (Secure, HttpOnly, SameSite) (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Configure session cookie security attributes (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Configure session cookie security attributes (Secure, HttpOnly, SameSite) (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Hide stack traces from error pages in production (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] No traceback on error html page (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
• 2026/01/22 [GH] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
• 2026/01/22 [GH] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
• 2026/01/22 [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [PR] Notify users on authentication credentials change (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Notify users when authentication credentials change (tooling-trusted-releases) via GitHub
• 2026/01/22 Re: [I] Implement structured logging for API access (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/21 [PR] No traceback on error html page (tooling-trusted-releases) via GitHub
• 2026/01/21 [PR] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
• 2026/01/21 [PR] Update storage interface error messages (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Ensure that a project can only be deleted or archived under certain conditions, and that the state is clear (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Create SECURITY.md and security documentation (tooling-trusted-releases) via GitHub
• 2026/01/21 [PR] Adding security documentation (tooling-trusted-releases) via GitHub
• 2026/01/21 [PR] Configure session cookie security attributes (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Task resource limits do not work consistently between architectures (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Task resource limits do not work consistently between architectures (tooling-trusted-releases) via GitHub
• 2026/01/21 [PR] Notify users on authentication credentials change (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Enforce MAX_CONTENT_LENGTH for upload size limits (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [PR] Add too large a payload handler (tooling-trusted-releases) via GitHub
• 2026/01/21 [PR] Add too large a payload handler (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [PR] Removing markdown tables, linted (tooling-trusted-releases) via GitHub
• 2026/01/21 [PR] Removing markdown tables, linted (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Enforce MAX_CONTENT_LENGTH for upload size limits (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Allow files to be tagged in the compose phase according to a mapping (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Enforce MAX_CONTENT_LENGTH for upload size limits (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Enforce MAX_CONTENT_LENGTH for upload size limits (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Enforce MAX_CONTENT_LENGTH for upload size limits (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Allow files to be tagged in the compose phase according to a mapping (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Configure request timeouts to prevent slowloris attacks (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Configure request timeouts to prevent slowloris attacks (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Allow files to be tagged in the compose phase according to a mapping (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Preserve the history of configuration options that affect attestations (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Escape database values before writing to database (tooling-trusted-releases) via GitHub
• 2026/01/21 [I] Use read only permissions for attestation data once written (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Enforce MAX_CONTENT_LENGTH for upload size limits (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
• 2026/01/21 Re: [I] Narrow exception handling in GitHub OIDC verification (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Enforce MAX_CONTENT_LENGTH for upload size limits (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Escape database values before writing to database (tooling-trusted-releases) via GitHub
• 2026/01/20 Introduction: Abhishek Mishra - New Contributor Abhishek Mishra
• 2026/01/20 Re: [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] DB JDO project label is db-_jdo with an extra symbol between db and jdo (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
• 2026/01/20 [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Synch with start-atr.sh (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Update docs for 2026 (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Update docs for 2026 (tooling-trusted-releases) via GitHub
• 2026/01/20 [PR] Update docs for 2026 (tooling-trusted-releases) via GitHub
• 2026/01/20 analyze workflow failing with updated action biomejs/setup-biome sebb
• 2026/01/20 Re: [PR] Add HSTS response header (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Add Strict-Transport-Security (HSTS) header (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Synch with start-atr.sh (tooling-trusted-releases) via GitHub
• 2026/01/20 [PR] Synch with start-atr.sh (tooling-trusted-releases) via GitHub
• 2026/01/20 [PR] Add HSTS response header (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Add a PR form to orient new developers (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Add a PR form to orient new developers (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Clarify docs for getting started (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Clarify the instructions to start a server and to submit a PR (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Configure request timeouts to prevent slowloris attacks (tooling-trusted-releases) via GitHub
• 2026/01/20 [PR] Clarify docs for getting started (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Notify users when authentication credentials change (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Clarify the instructions to start a server and to submit a PR (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Add upper limit to email thread message processing (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Thread count (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Improve JWT secret key management - increase size and require configuration (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Improve JWT secret key management - increase size and require configuration (tooling-trusted-releases) via GitHub
• 2026/01/20 [PR] Thread count (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Use generic error messages to prevent user enumeration (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Prevent enumeration (tooling-trusted-releases) via GitHub
• 2026/01/20 [PR] Prevent enumeration (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Make it less likely that release artifacts can be accidentally modified or deleted (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Make it less likely that release artifacts can be accidentally modified or deleted (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Block announcing a release if tagged distributions have not yet been done (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Allow files to be tagged in the compose phase according to a mapping (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Narrow exception handling in GitHub OIDC verification (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Clarify the instructions to start a server and to submit a PR (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Supply missing executables in the lint workflow (tooling-releases-client) via GitHub
• 2026/01/20 Re: [I] Supply missing executables in the lint workflow (tooling-releases-client) via GitHub
• 2026/01/20 Re: [PR] Copy SBOM models to remove interdependencies (tooling-trusted-releases) via GitHub
• 2026/01/20 [PR] Copy SBOM models to remove interdependencies (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Block announcing a release if tagged distributions have not yet been done (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Bump astral-sh/setup-uv from 7.1.6 to 7.2.0 (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Bump biomejs/setup-biome from 2.6.0 to 2.7.0 (tooling-trusted-releases) via GitHub
• 2026/01/19 [PR] Bump astral-sh/setup-uv from 7.1.6 to 7.2.0 (tooling-trusted-releases) via GitHub
• 2026/01/19 [PR] Bump biomejs/setup-biome from 2.6.0 to 2.7.0 (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Narrow exception handling in GitHub OIDC verification (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Clarify the instructions to start a server and to submit a PR (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Improve error reporting when /resolve/tabulated data is unavailable (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Narrow exception handling in GitHub OIDC verification (tooling-trusted-releases) via GitHub

• Earlier messages
• Later messages