issues  

Messages by Date

• 2026/07/14 Re: [I] Allow checksum generation without signature (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Fix the embargoed release wording (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [PR] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [PR] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Document ATR disk layout and size requirements (tooling-trusted-releases) via GitHub
• 2026/07/14 Re: [I] Runtime container runs as root (UID 0) while parsing attacker-influenced release artifacts (tooling-trusted-releases) via GitHub
• 2026/07/14 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 [I] Generated SBOM missing spec information for CDX check (tooling-trusted-releases) via GitHub
• 2026/07/14 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/14 [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [I] The `atr vote start` command does not use predefined templates (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr vote start` command does not use predefined templates (tooling-releases-client) via GitHub
• 2026/07/13 Re: [PR] Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [I] Remove the downloads area feature (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (tooling-actions) via GitHub
• 2026/07/13 [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (tooling-actions) via GitHub
• 2026/07/13 Re: [I] Client SBOM functionality (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Allow checksum generation without signature (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Reclassify SBOMs as artifacts and add new check (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Enhance SBOM report (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Client SBOM functionality (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Bump org.junit:junit-bom from 6.1.1 to 6.1.2 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [PR] Bump org.apache.maven.resolver:maven-resolver-api from 1.9.27 to 2.0.20 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [PR] Bump com.diffplug.spotless:spotless-maven-plugin from 3.7.0 to 3.8.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [PR] Bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [PR] Bump org.junit:junit-bom from 6.1.1 to 6.1.2 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 [PR] Bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 [tooling-atr-maven-plugin] via GitHub
• 2026/07/13 Re: [PR] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/13 [PR] Bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [I] Client HEAD broke against server [main] (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Client HEAD broke against server [arm] (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] Client HEAD broke against server [main] (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [I] The `atr check concerns` does not acknowledge "no concerns" (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr vote start` command does not use predefined templates (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr check concerns` does not acknowledge "no concerns" (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr check status` --verbose flag has no effect (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr check concerns` requires revision (tooling-releases-client) via GitHub
• 2026/07/13 Re: [I] The `atr check concerns` requires revision (tooling-releases-client) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 [I] When required resources are down what happens (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/13 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/12 [I] The `atr vote start` command does not use predefined templates (tooling-releases-client) via GitHub
• 2026/07/12 [I] The `atr check concerns` does not acknowledge "no concerns" (tooling-releases-client) via GitHub
• 2026/07/12 Re: [I] The `atr check status` --verbose flag has no effect (tooling-releases-client) via GitHub
• 2026/07/12 [I] The `atr check status` --verbose flag has no effect (tooling-releases-client) via GitHub
• 2026/07/12 [I] The `atr check concerns` requires revision (tooling-releases-client) via GitHub
• 2026/07/11 Re: [I] Signing SBOMs (tooling-trusted-releases) via GitHub
• 2026/07/11 Re: [PR] Bump actions/setup-java from 5.3.0 to 5.5.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/11 Re: [PR] Bump org.junit:junit-bom from 6.1.0 to 6.1.1 [tooling-atr-maven-plugin] via GitHub
• 2026/07/11 Re: [PR] Bump org.apache:apache from 38 to 39 [tooling-atr-maven-plugin] via GitHub
• 2026/07/11 Re: [PR] Bump org.eclipse.sisu:sisu-maven-plugin from 1.0.0 to 1.0.1 [tooling-atr-maven-plugin] via GitHub
• 2026/07/11 Re: [PR] Bump com.palantir.javaformat:palantir-java-format from 2.93.0 to 2.94.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/11 Re: [I] Signing SBOMs (tooling-trusted-releases) via GitHub
• 2026/07/11 Re: [PR] Bump org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2 [tooling-atr-maven-plugin] via GitHub
• 2026/07/10 Re: [I] Remove the downloads area feature (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/10 [PR] Adjust downloads menu target (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Runtime container runs as root (UID 0) while parsing attacker-influenced release artifacts (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Remove the downloads area feature (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Do not allow arbitrary committers to publish to SVN (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Build ATR production server (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Fix the embargoed release wording (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Move SVN_DIST_PUBLIC_URL to the configuration (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Move SVN_DIST_PUBLIC_URL to the configuration (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Beta announcement with notes for PMCS which use repository.apache.org (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Beta announcement with notes for PMCS which use repository.apache.org (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [PR] Bump soupsieve from 2.8 to 2.8.4 (tooling-docs) via GitHub
• 2026/07/10 [I] Add management options for KEYS files, and remove regenerate all (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Signing SBOMs (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Integrate ATR secrets with Puppet (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Integrate ATR secrets with Puppet (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Document ATR disk layout and size requirements (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Move SVN_DIST_PUBLIC_URL to the configuration (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Files not found for release with multiple directory (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Files not found for release with multiple directory (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Setup svn credentials to commit to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Setup svn credentials to commit to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Move svn dist commits from atr test repository to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Make banner message configurable by environment (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Setup svn credentials to commit to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Make banner message configurable by environment (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Document ATR disk layout and size requirements (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Missing Centralized Documentation of Resource-Intensive Operations (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Update the tutorial (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Document SBOM workflow for users (tooling-trusted-releases) via GitHub
• 2026/07/10 [PR] Bump soupsieve from 2.8 to 2.8.4 (tooling-docs) via GitHub
• 2026/07/10 Re: [PR] Add SBOM workflows documentation (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Files not found for release with multiple directory (tooling-trusted-releases) via GitHub
• 2026/07/09 [I] Files not found for release with multiple directory (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Make banner message configurable by environment (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Make banner message configurable by environment (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [PR] [INFRA] Set up default rulesets for default and release branches (tooling-releases-client) via GitHub
• 2026/07/09 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/09 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/09 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Document ATR disk layout and size requirements (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Use pill buttons instead of links on catalog artifact UI (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Use pill buttons instead of links on catalog artifact UI (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] add MAJOR_VERSION variable to Default download path suffix (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] add MAJOR_VERSION variable to Default download path suffix (tooling-trusted-releases) via GitHub
• 2026/07/09 [I] Revisit build attestations and SLSA (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Empty __init__.py and similar files are recognized as missing licences (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Empty __init__.py and similar files are recognized as missing licences (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] No obvious way how to resolve concerns (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] No obvious way how to resolve concerns (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] No obvious way how to resolve concerns (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Document SLSA attestations (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Document reproducible builds and permission to use CI (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Document reproducible builds, signing, SBOMs, and OpenSSF (tooling-trusted-releases) via GitHub
• 2026/07/09 [I] Document SLSA attestations (tooling-trusted-releases) via GitHub
• 2026/07/09 [I] Document reproducible builds and permission to use CI (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Document reproducible builds, signing, SBOMs, and OpenSSF (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Document the scope of ATR (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Document the scope of ATR (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] GitHub OIDC JWT jti is parsed but never used for replay prevention (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] GitHub OIDC JWT jti is parsed but never used for replay prevention (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Order of tiles on Releases page (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Security (defense-in-depth) concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Security (defense-in-depth) concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] add MAJOR_VERSION variable to Default download path suffix (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Security concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Security concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Security concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/08 [I] add MAJOR_VERSION variable to Default download path suffix (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] Rework the users guide component page (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [PR] Update components (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] Security concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] Security concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/08 [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/08 [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] Empty __init__.py and similar files are recognized as missing licences (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] No obvious way how to resolve concerns (tooling-releases-client) via GitHub
• 2026/07/08 [I] No obvious way how to resolve concerns (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] Empty __init__.py and similar files are recognized as missing licences (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/08 [I] Empty __init__.py and similar files are recognized as missing licences (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] Use pill buttons instead of links on catalog artifact UI (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/08 [PR] Update components (tooling-trusted-releases) via GitHub
• 2026/07/08 [PR] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [PR] Bump actions/setup-java from 5.3.0 to 5.4.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/08 [PR] Bump actions/setup-java from 5.3.0 to 5.5.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/08 Re: [PR] Bump actions/setup-java from 5.3.0 to 5.4.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/08 Re: [I] Move svn dist commits from atr test repository to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] Move svn dist commits from atr test repository to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] Make banner message configurable by environment (tooling-trusted-releases) via GitHub

• Earlier messages
• Later messages