dev  

Messages by Thread

• • Re: [I] Allow files to be excluded on upload (tooling-actions) via GitHub
  • Re: [I] Allow files to be excluded on upload (tooling-actions) via GitHub
  • Re: [I] Allow files to be excluded on upload (tooling-actions) via GitHub
• [PR] feat(security): centralize secure HTTP sessions and enforce TLS 1.2+ … (tooling-trusted-releases) via GitHub
  • Re: [PR] feat(security): centralize secure HTTP sessions and enforce TLS 1.2+ … (tooling-trusted-releases) via GitHub
  • Re: [PR] feat(security): centralize secure HTTP sessions and enforce TLS 1.2+ … (tooling-trusted-releases) via GitHub
• [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
  • Re: [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
  • Re: [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
  • Re: [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
  • Re: [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
  • Re: [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
  • Re: [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
  • Re: [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
  • Re: [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
  • Re: [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
  • Re: [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
  • Re: [I] Use validated asf_uid, not the value supplied by the user (tooling-trusted-releases) via GitHub
• [PR] Bump actions/checkout from 6.0.1 to 6.0.2 (tooling-trusted-releases) via GitHub
  • Re: [PR] Bump actions/checkout from 6.0.1 to 6.0.2 (tooling-trusted-releases) via GitHub
• [PR] Bump actions/cache from 5.0.1 to 5.0.2 (tooling-trusted-releases) via GitHub
  • Re: [PR] Bump actions/cache from 5.0.1 to 5.0.2 (tooling-trusted-releases) via GitHub
• [I] Litestream stream backups (tooling-trusted-releases) via GitHub
  • Re: [I] Litestream stream backups (tooling-trusted-releases) via GitHub
  • Re: [I] Litestream stream backups (tooling-trusted-releases) via GitHub
  • Re: [I] Litestream stream backups (tooling-trusted-releases) via GitHub
  • Re: [I] Litestream stream backups (tooling-trusted-releases) via GitHub
• [I] Guardrails for linting intentionally unused variables (tooling-trusted-releases) via GitHub
  • Re: [I] Guardrails for linting intentionally unused variables (tooling-trusted-releases) via GitHub
  • Re: [I] Guardrails for linting intentionally unused variables (tooling-trusted-releases) via GitHub
• [I] Regression: in dev mode no ldap connection means no admin functions (tooling-trusted-releases) via GitHub
  • Re: [I] Regression: in dev mode no ldap connection means no admin functions (tooling-trusted-releases) via GitHub
  • Re: [I] Regression: in dev mode no ldap connection means no admin functions (tooling-trusted-releases) via GitHub
  • Re: [I] Regression: in dev mode no ldap connection means no admin functions (tooling-trusted-releases) via GitHub
  • Re: [I] Regression: in dev mode no ldap connection means no admin functions (tooling-trusted-releases) via GitHub
• [PR] fix(security): implement centralized type-safe escaping for template substitutions (#554) (tooling-trusted-releases) via GitHub
  • Re: [PR] fix(security): implement centralized type-safe escaping for template substitutions (#554) (tooling-trusted-releases) via GitHub
  • Re: [PR] fix(security): implement centralized type-safe escaping for template substitutions (#554) (tooling-trusted-releases) via GitHub
  • Re: [PR] fix(security): implement centralized type-safe escaping for template substitutions (#554) (tooling-trusted-releases) via GitHub
• [I] Make checklist URLs consistent with the corresponding model (tooling-trusted-releases) via GitHub
  • Re: [I] Make checklist URLs consistent with the corresponding model (tooling-trusted-releases) via GitHub
  • Re: [I] Make checklist URLs consistent with the corresponding model (tooling-trusted-releases) via GitHub
  • Re: [I] Make checklist URLs consistent with the corresponding model (tooling-trusted-releases) via GitHub
• [PR] fix(security): centralize escaping for template substitutions (tooling-trusted-releases) via GitHub
  • Re: [PR] fix(security): centralize escaping for template substitutions (tooling-trusted-releases) via GitHub
  • Re: [PR] fix(security): centralize escaping for template substitutions (tooling-trusted-releases) via GitHub
• [PR] Clean up SSL shutdown noise in logs (tooling-trusted-releases) via GitHub
  • Re: [PR] Clean up SSL shutdown noise in logs (tooling-trusted-releases) via GitHub
  • Re: [PR] Clean up SSL shutdown noise in logs (tooling-trusted-releases) via GitHub
• Poetry in BAT, uv in ATR: should these continue to differ? sebb
  • Re: Poetry in BAT, uv in ATR: should these continue to differ? tison
  • Re: Poetry in BAT, uv in ATR: should these continue to differ? Sean Palmer
• [I] Read enisa sbom landscape analysis (tooling-trusted-releases) via GitHub
  • Re: [I] Read enisa sbom landscape analysis (tooling-trusted-releases) via GitHub
  • Re: [I] Read enisa sbom landscape analysis (tooling-trusted-releases) via GitHub
  • Re: [I] Read enisa sbom landscape analysis (tooling-trusted-releases) via GitHub
  • Re: [I] Read enisa sbom landscape analysis (tooling-trusted-releases) via GitHub
  • Re: [I] Read enisa sbom landscape analysis (tooling-trusted-releases) via GitHub
  • Re: [I] Read enisa sbom landscape analysis (tooling-trusted-releases) via GitHub
• [I] Ensure that `TimeoutError: SSL shutdown timed out` do not happen or are not logged (tooling-trusted-releases) via GitHub
  • Re: [I] Ensure that `TimeoutError: SSL shutdown timed out` do not happen or are not logged (tooling-trusted-releases) via GitHub
  • Re: [I] Ensure that `TimeoutError: SSL shutdown timed out` do not happen or are not logged (tooling-trusted-releases) via GitHub
  • Re: [I] Ensure that `TimeoutError: SSL shutdown timed out` do not happen or are not logged (tooling-trusted-releases) via GitHub
  • Re: [I] Ensure that `TimeoutError: SSL shutdown timed out` do not happen or are not logged (tooling-trusted-releases) via GitHub
  • Re: [I] Ensure that `TimeoutError: SSL shutdown timed out` do not happen or are not logged (tooling-trusted-releases) via GitHub
  • Re: [I] Ensure that `TimeoutError: SSL shutdown timed out` do not happen or are not logged (tooling-trusted-releases) via GitHub
  • Re: [I] Ensure that `TimeoutError: SSL shutdown timed out` do not happen or are not logged (tooling-trusted-releases) via GitHub
  • Re: [I] Ensure that `TimeoutError: SSL shutdown timed out` do not happen or are not logged (tooling-trusted-releases) via GitHub
  • Re: [I] Ensure that `TimeoutError: SSL shutdown timed out` do not happen or are not logged (tooling-trusted-releases) via GitHub
• Re: [I] Document identification of generated source files in lightweight and RAT license checks (tooling-trusted-releases) via GitHub
• Docker log showing GET messages every couple of seconds sebb
  • Re: Docker log showing GET messages every couple of seconds Alastair McFarlane
  • Re: Docker log showing GET messages every couple of seconds Alastair McFarlane
  • Re: Docker log showing GET messages every couple of seconds sebb
  • Re: Docker log showing GET messages every couple of seconds Sean Palmer
  • Re: Docker log showing GET messages every couple of seconds Alastair McFarlane
• [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
  • Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
  • Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
  • Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
  • Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
  • Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
  • Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
  • Re: [PR] Only change perms if necessary (tooling-trusted-releases) via GitHub
• Re: [I] Retry failed email deliveries (tooling-trusted-releases) via GitHub
  • Re: [I] Retry failed email deliveries (tooling-trusted-releases) via GitHub
  • Re: [I] Retry failed email deliveries (tooling-trusted-releases) via GitHub
  • Re: [I] Retry failed email deliveries (tooling-trusted-releases) via GitHub
• Re: [I] Ability to record +1 by release manager (tooling-trusted-releases) via GitHub
  • Re: [I] Ability to record +1 by release manager (tooling-trusted-releases) via GitHub
• Re: [I] Consider improving logging (tooling-trusted-releases) via GitHub
  • Re: [I] Consider improving logging (tooling-trusted-releases) via GitHub
  • Re: [I] Consider improving logging (tooling-trusted-releases) via GitHub
  • Re: [I] Consider improving logging (tooling-trusted-releases) via GitHub
  • Re: [I] Consider improving logging (tooling-trusted-releases) via GitHub
• Re: [I] We should add `Hadolint` a Dockerfile linter, validate inline bash, written in Haskell (tooling-trusted-releases) via GitHub
• Re: [I] Resolve the design of emptiness and nullability for form types (tooling-trusted-releases) via GitHub
• Re: [I] Use Mailpit to improve email tests (tooling-trusted-releases) via GitHub
  • Re: [I] Use Mailpit to improve email tests (tooling-trusted-releases) via GitHub
  • Re: [I] Use Mailpit to improve email tests (tooling-trusted-releases) via GitHub
• Re: [I] Use stagex for the default container (tooling-trusted-releases) via GitHub
  • Re: [I] Use stagex for the default container (tooling-trusted-releases) via GitHub
• Re: [I] Add tests suited to the alpha2 phase (tooling-trusted-releases) via GitHub
• Re: [I] Speed up building the OCI container (tooling-trusted-releases) via GitHub
• Re: [I] Improve performance of routes throughout (tooling-trusted-releases) via GitHub
  • Re: [I] Improve performance of routes throughout (tooling-trusted-releases) via GitHub
• [PR] Storage interface error messages redux (tooling-trusted-releases) via GitHub
  • Re: [PR] Storage interface error messages redux (tooling-trusted-releases) via GitHub
  • Re: [PR] Storage interface error messages redux (tooling-trusted-releases) via GitHub
• Re: [I] Download rsync candidate files by a select tag (tooling-trusted-releases) via GitHub
  • Re: [I] Download rsync candidate files by a select tag (tooling-trusted-releases) via GitHub
• [PR] Bump astral-sh/setup-uv from 6.4.3 to 7.2.0 (tooling-releases-client) via GitHub
  • Re: [PR] Bump astral-sh/setup-uv from 6.4.3 to 7.2.0 (tooling-releases-client) via GitHub
  • Re: [PR] Bump astral-sh/setup-uv from 6.4.3 to 7.2.0 (tooling-releases-client) via GitHub
• [PR] Bump actions/upload-artifact from 4.6.2 to 6.0.0 (tooling-releases-client) via GitHub
  • Re: [PR] Bump actions/upload-artifact from 4.6.2 to 6.0.0 (tooling-releases-client) via GitHub
• [PR] Bump actions/checkout from 4.3.0 to 6.0.2 (tooling-releases-client) via GitHub
  • Re: [PR] Bump actions/checkout from 4.3.0 to 6.0.2 (tooling-releases-client) via GitHub
• [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
  • Re: [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
  • Re: [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
  • [GH] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
  • [GH] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
  • Re: [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
  • Re: [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
  • Re: [PR] Allow projects to specify a tagging spec, allow rsync of tag (tooling-trusted-releases) via GitHub
• [PR] No traceback on error html page (tooling-trusted-releases) via GitHub
  • Re: [PR] No traceback on error html page (tooling-trusted-releases) via GitHub
• [PR] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
  • Re: [PR] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
  • Re: [PR] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
• [PR] Update storage interface error messages (tooling-trusted-releases) via GitHub
  • Re: [PR] Update storage interface error messages (tooling-trusted-releases) via GitHub
  • Re: [PR] Update storage interface error messages (tooling-trusted-releases) via GitHub
• [PR] Adding security documentation (tooling-trusted-releases) via GitHub
  • [GH] Adding security documentation (tooling-trusted-releases) via GitHub
  • [GH] Adding security documentation (tooling-trusted-releases) via GitHub
  • [GH] Adding security documentation (tooling-trusted-releases) via GitHub
  • [GH] Adding security documentation (tooling-trusted-releases) via GitHub
  • [GH] Adding security documentation (tooling-trusted-releases) via GitHub
  • [GH] Adding security documentation (tooling-trusted-releases) via GitHub
  • [GH] Adding security documentation (tooling-trusted-releases) via GitHub
  • Re: [PR] Adding security documentation (tooling-trusted-releases) via GitHub
  • Re: [PR] Adding security documentation (tooling-trusted-releases) via GitHub
  • [GH] Adding security documentation (tooling-trusted-releases) via GitHub
  • Re: [PR] Adding security documentation (tooling-trusted-releases) via GitHub
  • Re: [PR] Adding security documentation (tooling-trusted-releases) via GitHub
• [PR] Configure session cookie security attributes (tooling-trusted-releases) via GitHub
  • Re: [PR] Configure session cookie security attributes (tooling-trusted-releases) via GitHub
• Re: [I] Task resource limits do not work consistently between architectures (tooling-trusted-releases) via GitHub
  • Re: [I] Task resource limits do not work consistently between architectures (tooling-trusted-releases) via GitHub
  • Re: [I] Task resource limits do not work consistently between architectures (tooling-trusted-releases) via GitHub
  • Re: [I] Task resource limits do not work consistently between architectures (tooling-trusted-releases) via GitHub
• [PR] Notify users on authentication credentials change (tooling-trusted-releases) via GitHub
  • Re: [PR] Notify users on authentication credentials change (tooling-trusted-releases) via GitHub
• [PR] Add too large a payload handler (tooling-trusted-releases) via GitHub
  • Re: [PR] Add too large a payload handler (tooling-trusted-releases) via GitHub
• [PR] Removing markdown tables, linted (tooling-trusted-releases) via GitHub
  • Re: [PR] Removing markdown tables, linted (tooling-trusted-releases) via GitHub
• Re: [I] Preserve the history of configuration options that affect attestations (tooling-trusted-releases) via GitHub
  • Re: [I] Preserve the history of configuration options that affect attestations (tooling-trusted-releases) via GitHub
  • Re: [I] Preserve the history of configuration options that affect attestations (tooling-trusted-releases) via GitHub
  • Re: [I] Preserve the history of configuration options that affect attestations (tooling-trusted-releases) via GitHub
  • Re: [I] Preserve the history of configuration options that affect attestations (tooling-trusted-releases) via GitHub
  • Re: [I] Preserve the history of configuration options that affect attestations (tooling-trusted-releases) via GitHub
• [I] Use read only permissions for attestation data once written (tooling-trusted-releases) via GitHub
  • Re: [I] Use read only permissions for attestation data once written (tooling-trusted-releases) via GitHub
  • Re: [I] Use read only permissions for attestation data once written (tooling-trusted-releases) via GitHub
• Introduction: Abhishek Mishra - New Contributor Abhishek Mishra
• [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
  • Re: [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
  • Re: [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
  • Re: [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
  • Re: [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
  • Re: [I] BLOCKER: State is blown out for release-test.apache.org (tooling-trusted-releases) via GitHub
• [PR] Update docs for 2026 (tooling-trusted-releases) via GitHub
  • Re: [PR] Update docs for 2026 (tooling-trusted-releases) via GitHub
  • Re: [PR] Update docs for 2026 (tooling-trusted-releases) via GitHub
• analyze workflow failing with updated action biomejs/setup-biome sebb
• [PR] Synch with start-atr.sh (tooling-trusted-releases) via GitHub
  • Re: [PR] Synch with start-atr.sh (tooling-trusted-releases) via GitHub
  • Re: [PR] Synch with start-atr.sh (tooling-trusted-releases) via GitHub
• [PR] Add HSTS response header (tooling-trusted-releases) via GitHub
  • Re: [PR] Add HSTS response header (tooling-trusted-releases) via GitHub
• [PR] Clarify docs for getting started (tooling-trusted-releases) via GitHub
  • Re: [PR] Clarify docs for getting started (tooling-trusted-releases) via GitHub
• [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
  • Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
  • Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
  • Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
  • Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
  • Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
  • Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• [PR] Thread count (tooling-trusted-releases) via GitHub
  • Re: [PR] Thread count (tooling-trusted-releases) via GitHub
• [PR] Prevent enumeration (tooling-trusted-releases) via GitHub
  • Re: [PR] Prevent enumeration (tooling-trusted-releases) via GitHub
• Re: [I] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
  • Re: [I] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
  • Re: [I] Improve documentation for external contributors (tooling-trusted-releases) via GitHub

• Earlier messages
• Later messages