New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add 'profiles' for the Source Track #1142

Open

TomHennen opened this issue Sep 20, 2024 · 1 comment

Labels

Contributor

TomHennen commented Sep 20, 2024

@adityasaky suggested that it might make the source track more clear if we

Define 'profiles' for source control systems as a combination of VCS, SCP, attestation issuers, etc...
Each profile should explain how it would meet the various source level requirements
Remove many of the examples that are currently inlined with the requirements themselves

@adityasaky mentions this would be made easier once we define a source control system #1128 .

TomHennen added the source-track label

Contributor Author

TomHennen commented Sep 20, 2024

This is probably a good way to address @marcelamelara's comment here #1128 (comment)

adityasaky mentioned this issue

Is 'branch protection' only applicable for cloud-hosted SCPs? #1136

Open

TomHennen mentioned this issue

Define where source attestations are stored #1129

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment