Divy Srivastava 9b5d2f8c1b feat(publish): provenance attestation (#22573) ... Supply chain security for JSR. ``` $ deno publish --provenance Successfully published @divy/test_provenance@0.0.3 Provenance transparency log available at https://search.sigstore.dev/?logIndex=73657418 ``` 0. Package has been published. 1. Fetches the version manifest and verifies it's matching with uploaded files and exports. 2. Builds the attestation SLSA payload using Github actions env. 3. Creates an ephemeral key pair for signing the github token (aud=sigstore) and DSSE pre authentication tag. 4. Requests a X.509 signing certificate from Fulcio using the challenge and ephemeral public key PEM. 5. Prepares a DSSE envelop for Rekor to witness. Posts an intoto entry to Rekor and gets back the transparency log index. 6. Builds the provenance bundle and posts it to JSR.		2024-02-28 07:58:02 +05:30
..
bare_node_builtins	feat(publish): support sloppy imports and bare node built-ins (#22588)	2024-02-27 15:13:16 +00:00
deno_jsonc	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
has_slow_types	feat(unstable/lint): no-slow-types for JSR packages (#22430)	2024-02-19 15:28:41 +00:00
invalid_import	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
invalid_path	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
javascript_decl_file	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
javascript_missing_decl_file	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
jsr_jsonc	feat(publish): discover jsr.json and jsr.jsonc files (#22587)	2024-02-27 08:27:21 +00:00
missing_deno_json	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
node_specifier	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
package_json	feat: infer dependencies from package.json (#22563)	2024-02-23 15:56:49 +01:00
sloppy_imports	feat(publish): support sloppy imports and bare node built-ins (#22588)	2024-02-27 15:13:16 +00:00
successful	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
symlink	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
unanalyzable_dynamic_import	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
workspace	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
allow_slow_types.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
bare_node_builtins.out	feat(publish): support sloppy imports and bare node built-ins (#22588)	2024-02-27 15:13:16 +00:00
deno_jsonc.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
dry_run.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
has_slow_types.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
invalid_import.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
invalid_path.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
javascript_decl_file.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
javascript_missing_decl_file.out	feat(unstable/lint): no-slow-types for JSR packages (#22430)	2024-02-19 15:28:41 +00:00
missing_deno_json.out	feat(publish): discover jsr.json and jsr.jsonc files (#22587)	2024-02-27 08:27:21 +00:00
no_token.out	chore: move cli/tests/ -> tests/ (#22369)	2024-02-10 20:22:13 +00:00
node_specifier.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
package_json.out	feat: infer dependencies from package.json (#22563)	2024-02-23 15:56:49 +01:00
sloppy_imports.out	fix(unstable): sloppy imports should resolve .d.ts files during types resolution (#22602)	2024-02-27 18:30:21 +00:00
successful.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
successful_no_check.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
successful_provenance.out	feat(publish): provenance attestation (#22573)	2024-02-28 07:58:02 +05:30
symlink.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
unanalyzable_dynamic_import.out	feat(publish): support sloppy imports and bare node built-ins (#22588)	2024-02-27 15:13:16 +00:00
workspace.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00
workspace_individual.out	feat(publish): type check on publish (#22506)	2024-02-21 08:35:25 -05:00