Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Break release into smaller chunks. #268

Merged
merged 4 commits into from
Aug 8, 2022
Merged

Conversation

vaikas
Copy link
Contributor

@vaikas vaikas commented Aug 7, 2022

Summary

Fix #252

Release Note

  • Release artifact has been broken into smaller chunks release-[ctlog,fulcio,rekor,trillian,tuf].yaml files.
  • Add hack/setup-scaffolding.sh as a release artifact that can be used to install the whole sigstore.

Documentation

After the release gets created, update getting-started.md with the updated instructions.

@vaikas vaikas requested a review from cpanato August 7, 2022 09:31
return nil, errors.New("no blocked hashes in YAML")
}

blockedKeys := make(blockedKeys, len(list.BlockedHashes)+len(list.BlockedHashesHex))

Check failure

Code scanning / CodeQL

Size computation for allocation may overflow

This operation, which is used in an [allocation](1), involves a potentially large [value](2) and might overflow.
return nil, errors.New("no blocked hashes in YAML")
}

blockedKeys := make(blockedKeys, len(list.BlockedHashes)+len(list.BlockedHashesHex))

Check failure

Code scanning / CodeQL

Size computation for allocation may overflow

This operation, which is used in an [allocation](1), involves a potentially large [value](2) and might overflow.
case "true":
cfg.tls = &tls.Config{}
case "skip-verify", "preferred":
cfg.tls = &tls.Config{InsecureSkipVerify: true}

Check failure

Code scanning / CodeQL

Disabled TLS certificate check

InsecureSkipVerify should not be used in production code.
@cpanato
Copy link
Member

cpanato commented Aug 8, 2022

need a rebase

lgtm :) thanks for doing that

@vaikas
Copy link
Contributor Author

vaikas commented Aug 8, 2022

Thanks! Yeah, I built this on top of this:
#267

So, kind of want that going in first, and then I'll rebase this on top of that.

vaikas added 3 commits August 8, 2022 10:57
release-ctlog.yaml
release-fulcio.yaml
release-rekor.yaml
release-trillian.yaml
release-tuf.yaml

Also release setup-scaffolding.sh script.

Signed-off-by: Ville Aikas <[email protected]>
Signed-off-by: Ville Aikas <[email protected]>
Signed-off-by: Ville Aikas <[email protected]>
@vaikas
Copy link
Contributor Author

vaikas commented Aug 8, 2022

Thanks @cpanato PTAL when you get a moment, little easier to review now :)

Copy link
Member

@cpanato cpanato left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thank you

@vaikas vaikas merged commit 9473e9a into sigstore:main Aug 8, 2022
@vaikas vaikas deleted the issue-252 branch August 8, 2022 08:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Make the release artifacts more granular.
2 participants