vee1e/gittuf
1
0
Fork 0
mirror of https://github.com/vee1e/gittuf.git synced 2026-09-01 18:27:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
2617 commits 31 branches 25 tags 6.8 MiB
Commit graph

259 commits

Author SHA1 Message Date
Leng
a869511ec3 Readd gittuf trust inspect-root, add gittuf policy inspect 
Signed-off-by: Leng <lyixin466@gmail.com>
 2026-07-20 18:18:18 -04:00
patzielinski
ba4d5bc767
Merge pull request #1461 from PratGit1606/docs/fix-policy-command-docstrings 
docs: fix policy command docstrings for stage, discard, and apply
 2026-07-15 15:13:21 +00:00
PratGit1606
b6a652ede7 docs: fix policy command docstrings for stage, discard, and apply 
Signed-off-by: PratGit1606 <prathamgithub16@gmail.com>
 2026-07-14 16:43:57 -07:00
PratGit1606
9707977fd3 docs: audit and fix CLI command docstrings across all commands 
Signed-off-by: PratGit1606 <prathamgithub16@gmail.com>
 2026-07-08 12:02:33 -07:00
Pat Zielinski
4fdb67dacf
cmd: Remove dev commands 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2026-06-26 14:13:14 -04:00
Pat Zielinski
a7307354a4
cmd: Remove inspect-root command 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2026-06-26 10:51:31 -04:00
Pat Zielinski
c7d59f86d6
docs, ci: Update getting started guide and remove CI run 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2026-05-15 13:48:08 -04:00
Aditya Sirish A Yelgundhalli
90b007c93e cmd, gittuf: Add support for incrementing metadata versions 
This commit adds support for incrementing policy metadata file versions without
making any other changes.

Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
 2026-05-01 15:56:48 -04:00
Aditya Sirish A Yelgundhalli
58a4ba57d6 cmd, display: Filter rsl log for one or more references 
Support filtering the output of gittuf rsl log by one or more references.

Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
 2026-04-17 16:40:47 -04:00
Pushkar Singh
0740ca1af8 rsl/record: clarify expected Git reference argument in CLI help 
Signed-off-by: Pushkar Singh <pushkarkumarsingh1970@gmail.com>
 2026-04-08 17:00:53 +00:00
Yongjae Chung
f153de02a8
docs: add notion of principles in design doc 
Signed-off-by: Yongjae Chung <yc3028@nyu.edu>
 2026-03-30 12:20:58 -04:00
jkang2003
35c6b686be Add synopsis sections for CLI docs (issue #1133) 
Signed-off-by: jkang2003 <jkang2003@gmail.com>
 2026-03-27 17:53:50 -04:00
Pat Zielinski
1c348cceaf
docs: Update GPG reference 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2026-03-04 13:31:17 -05:00
Pat Zielinski
f9f06f4187
Prepare v0.13.0 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2026-03-03 14:43:02 -05:00
Yongjae Chung
3ecf196ba5
Move TUI to root cmds, organize TUI code 
Signed-off-by: Yongjae Chung <yc3028@nyu.edu>
 2026-01-29 10:42:11 -05:00
Pat Zielinski
f649b141d3
pkg: Move gitinterface to pkg 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2026-01-16 14:03:36 -05:00
patzielinski
70fa3636bf
Merge pull request #1125 from MI2007/propagation 
Support listing Propagation Directives
 2025-12-26 16:48:13 +00:00
MI2007
09f00c8974
gittuf: Add support for listing propagation directives 
Signed-off-by: Aditya Sirish <aditya@saky.in>
 2025-12-23 17:17:02 -05:00
patzielinski
7edda05a79
Merge pull request #1149 from tomfitzhenry/patch-1 
Fix gittuf version in dogfood documentation
 2025-12-23 16:32:17 +00:00
tomf
089227fd1e
Fix gittuf version in dogfood documentation 
`gittuf verify-ref v0.4.0` fails. I guess the RSL reset since then?

```
$ gittuf verify-ref --verbose v0.4.0
time=2025-12-02T22:08:49.960+11:00 level=DEBUG msg="Loading Git repository from '.'..."
time=2025-12-02T22:08:49.960+11:00 level=DEBUG msg="Looking for Git binary in PATH..."
time=2025-12-02T22:08:49.960+11:00 level=DEBUG msg="Identifying git directory for repository..."
time=2025-12-02T22:08:49.963+11:00 level=DEBUG msg="Setting git directory for repository to '/home/tom/src/gittuf/.git'..."
time=2025-12-02T22:08:49.963+11:00 level=DEBUG msg="Identifying absolute reference path..."
time=2025-12-02T22:08:49.967+11:00 level=DEBUG msg="Verifying gittuf policies for 'refs/tags/v0.4.0'"
time=2025-12-02T22:08:49.967+11:00 level=DEBUG msg="Loading persistent cache from disk..."
time=2025-12-02T22:08:49.968+11:00 level=DEBUG msg="Persistent cache does not exist"
time=2025-12-02T22:08:49.968+11:00 level=DEBUG msg="Persistent cache not found, using regular RSL searcher..."
time=2025-12-02T22:08:49.968+11:00 level=DEBUG msg="Identifying first RSL entry for 'refs/tags/v0.4.0'..."
Error: unable to find RSL entry
```

```
$ gittuf verify-ref --verbose v0.12.0
time=2025-12-02T22:10:03.772+11:00 level=DEBUG msg="Loading Git repository from '.'..."
time=2025-12-02T22:10:03.772+11:00 level=DEBUG msg="Looking for Git binary in PATH..."
time=2025-12-02T22:10:03.772+11:00 level=DEBUG msg="Identifying git directory for repository..."
time=2025-12-02T22:10:03.775+11:00 level=DEBUG msg="Setting git directory for repository to '/home/tom/src/gittuf/.git'..."
time=2025-12-02T22:10:03.775+11:00 level=DEBUG msg="Identifying absolute reference path..."
time=2025-12-02T22:10:03.780+11:00 level=DEBUG msg="Verifying gittuf policies for 'refs/tags/v0.12.0'"
time=2025-12-02T22:10:03.780+11:00 level=DEBUG msg="Loading persistent cache from disk..."
time=2025-12-02T22:10:03.781+11:00 level=DEBUG msg="Persistent cache does not exist"
time=2025-12-02T22:10:03.781+11:00 level=DEBUG msg="Persistent cache not found, using regular RSL searcher..."
time=2025-12-02T22:10:03.781+11:00 level=DEBUG msg="Identifying first RSL entry for 'refs/tags/v0.12.0'..."
time=2025-12-02T22:10:08.640+11:00 level=DEBUG msg="Identifying latest RSL entry for 'refs/tags/v0.12.0'..."
time=2025-12-02T22:10:08.642+11:00 level=DEBUG msg="Verifying all entries..."
time=2025-12-02T22:10:08.642+11:00 level=DEBUG msg="Loading policy applicable at first entry '0040a38590d908408e730f6cc05cb4d776f45368'..."
time=2025-12-02T22:10:08.644+11:00 level=DEBUG msg="Scanning RSL for search start point using before condition..."
time=2025-12-02T22:10:08.644+11:00 level=DEBUG msg="Found entry '0040a38590d908408e730f6cc05cb4d776f45368' matching before condition..."
time=2025-12-02T22:10:08.644+11:00 level=DEBUG msg="Loading policy at entry 'db004922ef26e725e8986ffb73b80fd0ae3ee945'..."
time=2025-12-02T22:10:08.644+11:00 level=DEBUG msg="Loading persistent cache from disk..."
time=2025-12-02T22:10:08.646+11:00 level=DEBUG msg="Persistent cache does not exist"
time=2025-12-02T22:10:08.646+11:00 level=DEBUG msg="Persistent cache not found, using regular RSL searcher..."
time=2025-12-02T22:10:08.646+11:00 level=DEBUG msg="Finding first policy entry..."
time=2025-12-02T22:10:08.651+11:00 level=DEBUG msg="Requested policy's entry is the same as first policy entry"
time=2025-12-02T22:10:08.658+11:00 level=DEBUG msg="Loading policy for '' from '319238339b0424666b949ab9ccb6c46f6be03a96'..."
time=2025-12-02T22:10:08.671+11:00 level=DEBUG msg="Loaded current repository policy!"
time=2025-12-02T22:10:08.671+11:00 level=DEBUG msg="Trusting root of trust for initial policy 'db004922ef26e725e8986ffb73b80fd0ae3ee945'..."
time=2025-12-02T22:10:08.671+11:00 level=DEBUG msg="Loading attestations applicable at first entry '0040a38590d908408e730f6cc05cb4d776f45368'..."
time=2025-12-02T22:10:08.673+11:00 level=DEBUG msg="Scanning RSL for search start point using before condition..."
time=2025-12-02T22:10:08.673+11:00 level=DEBUG msg="Found entry '0040a38590d908408e730f6cc05cb4d776f45368' matching before condition..."
time=2025-12-02T22:10:08.688+11:00 level=DEBUG msg="Identifying all entries in range..."
time=2025-12-02T22:10:08.689+11:00 level=DEBUG msg="Verifying entry '0040a38590d908408e730f6cc05cb4d776f45368'..."
time=2025-12-02T22:10:08.689+11:00 level=DEBUG msg="Checking if entry is for policy staging reference..."
time=2025-12-02T22:10:08.690+11:00 level=DEBUG msg="Checking if entry is for policy reference..."
time=2025-12-02T22:10:08.690+11:00 level=DEBUG msg="Checking if entry is for attestations reference..."
time=2025-12-02T22:10:08.690+11:00 level=DEBUG msg="Verifying changes..."
time=2025-12-02T22:10:08.690+11:00 level=DEBUG msg="Entry is for a Git tag, using tag verification workflow..."
time=2025-12-02T22:10:08.694+11:00 level=DEBUG msg="Searching for RSL entry for 'refs/tags/v0.12.0' before entry '0040a38590d908408e730f6cc05cb4d776f45368'..."
time=2025-12-02T22:10:08.695+11:00 level=DEBUG msg="Scanning RSL for search start point using before condition..."
time=2025-12-02T22:10:08.696+11:00 level=DEBUG msg="Found entry '0040a38590d908408e730f6cc05cb4d776f45368' matching before condition..."
time=2025-12-02T22:10:08.701+11:00 level=DEBUG msg="Finding reference authorization attestations for 'refs/tags/v0.12.0' from '0000000000000000000000000000000000000000' to 'f2cf979646c6f997c225b735538197b2e810c02d'..."
time=2025-12-02T22:10:08.701+11:00 level=DEBUG msg="Initializing path cache in policy..."
time=2025-12-02T22:10:08.702+11:00 level=DEBUG msg="Verifying signature of Git object with ID '0040a38590d908408e730f6cc05cb4d776f45368'..."
time=2025-12-02T22:10:08.756+11:00 level=DEBUG msg="Public key 'e32941299cb8c0d93dcf27acb83110d012545604' belonging to principal 'adityasaky' successfully used to verify signature of Git object '0040a38590d908408e730f6cc05cb4d776f45368', counting 'adityasaky' towards threshold..."
time=2025-12-02T22:10:08.756+11:00 level=DEBUG msg="Verifying signature of Git object with ID 'adcd85d558bef6d9d1f8eecd8de1708e786ec344'..."
time=2025-12-02T22:10:08.765+11:00 level=DEBUG msg="Public key 'e32941299cb8c0d93dcf27acb83110d012545604' belonging to principal 'adityasaky' successfully used to verify signature of Git object 'adcd85d558', counting 'adityasaky' towards threshold..."
time=2025-12-02T22:10:08.765+11:00 level=DEBUG msg="Verifying if tip of reference matches expected value from RSL..."
time=2025-12-02T22:10:08.767+11:00 level=DEBUG msg="Verification successful!"
```

Signed-off-by: Aditya Sirish <aditya@saky.in>
 2025-12-22 23:28:49 -05:00
Aditya Sirish
562a54e2da
Merge pull request #1156 from gittuf/update-docs 
docs: Update with instructions for existing repos
 2025-12-16 14:11:31 -05:00
Pat Zielinski
28e1d707e4
docs: Update with instructions for existing repos 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2025-12-16 13:59:54 -05:00
Aditya Sirish A Yelgundhalli
ab2b7ff18f sandbox: Fix lint issue 
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
 2025-12-16 13:37:18 -05:00
Aditya Sirish
81e33051c7
Merge pull request #1079 from gittuf/update-lua-docs 
docs: Add API type to Lua documentation
 2025-12-15 18:39:12 -05:00
rithwik
053854fcd8 feat(tui): support running in read-only mode when no signing key provided (closes #1000) 
Signed-off-by: rithwik <rithwik.amajala@gmail.com>
 2025-11-19 19:19:57 -05:00
Pat Zielinski
a43806092d
docs: Add API type to Lua documentation 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2025-10-27 13:16:42 -04:00
patzielinski
e1dfa9d0ea
Merge pull request #947 from fr0m-scratch/add-sandbox-api 
luasandbox: added two apis for `luasandbox`
 2025-10-24 03:15:10 +00:00
Jamal Cao
e2bd7d34b6 sandbox: added gitGetStagedFilePaths api to luasandbox 
Added `gitGetStagedFilePaths` to retrive paths of all staged filesthat yet committed.

Signed-off-by: Jamal Cao <jamaltheodds@gmail.com>
 2025-10-23 15:12:24 -07:00
sathas1301
ddc7a6af5b Update get-started 
Signed-off-by: sathas1301 <satwik.dondapatii77@gmail.com>
 2025-10-13 19:51:55 -04:00
Aditya Sirish
8f5837fba0
Merge pull request #1114 from gittuf/fix-getting-started 
docs: Fix some nits in the getting started doc
 2025-10-09 15:08:20 -04:00
Pat Zielinski
360eb328c9 docs: Add attestations extraction method to documentation 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2025-10-08 23:52:04 -04:00
Pat Zielinski
0b86f33001 docs: Fix some nits in the getting started doc 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2025-10-08 13:25:37 -04:00
Jamal Cao
d9c36df296 *: Add update flow for GUPPIEs 
Signed-off-by: Jamal Cao <jamaltheodds@gmail.com>
 2025-10-02 02:12:48 -07:00
Pat Zielinski
5bf8612d3c docs: Update getting started doc with beta status 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2025-09-25 15:41:14 -04:00
Pat Zielinski
7699322871 docs: Update roadmap 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2025-09-11 09:42:09 -04:00
Pat Zielinski
e0978ac7f5 docs: Update roadmap 
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2025-09-11 09:27:53 -04:00
Syed Mohammed Sylani
1cab1b8ada docs: add Long description to cache main command 
Signed-off-by: Syed Mohammed Sylani <sylanmohammed@gmail.com>
 2025-08-01 15:27:47 -04:00
Syed Mohammed Sylani
9df9a5d0c4 docs: add long descriptions for add-root-key and GitHub App approval commands 
Signed-off-by: Syed Mohammed Sylani <sylanmohammed@gmail.com>
 2025-08-01 14:50:30 -04:00
Aditya Sirish
a96954baad
Merge pull request #1026 from shivpratikhande/local-cache 
added support for resetting the local persistent cache #1023
 2025-08-01 14:25:11 -04:00
shivpratikhande
77839228c4 added support for resetting the local persistent cache #1023 
Signed-off-by: shivpratikhande <shivpratikhande2017@gmail.com>
 2025-08-01 12:56:58 -04:00
Aditya Sirish
e2ad2a515b
Merge pull request #1064 from Sylani-55/docs/add-attest-subcommands-long-desc 
docs: add Long descriptions to attest apply and authorize subcommands
 2025-08-01 12:41:29 -04:00
Syed Mohammed Sylani
88236fa3a5 docs: add Long descriptions to attest apply and authorize subcommands 
Signed-off-by: Syed Mohammed Sylani <sylanmohammed@gmail.com>
 2025-08-01 12:36:50 -04:00
Aditya Sirish
52c36deff0
Merge pull request #1051 from Sylani-55/docs/add-long-descriptions-commands 
docs: add long descriptions for skip-rewritten, sync, and trust commands
 2025-08-01 12:34:24 -04:00
Aditya Sirish
e32fa51707
Merge pull request #975 from Sylani-55/apply-long-doc 
docs: add Long description to attest apply commandApply long doc
 2025-08-01 12:28:07 -04:00
Aditya Sirish
a75ef4a630
Merge pull request #958 from Krishna-Sharma-g/main 
feat: Implement update-person command for gittuf policy
 2025-08-01 12:24:34 -04:00
Pat Zielinski
4b334b0737 docs: add detailed long descriptions for trust commands 
Co-authored-by: Syed Mohammed Sylani <sylanmohammed@gmail.com>
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2025-07-31 18:43:32 -04:00
Pat Zielinski
ac4074c83f docs: add Long description to apply 
Co-authored-by: Syed Mohammed Sylani <sylanmohammed@gmail.com>
Signed-off-by: Pat Zielinski <git@patzielinski.com>
 2025-07-30 13:52:42 -04:00
Aditya Sirish
145fb54004
Merge pull request #821 from QH89/update_propagation_directive 
update_propagation_directive
 2025-07-24 15:30:58 -04:00
Aditya Sirish
3e399fd2f5
Merge pull request #1028 from gittuf/move-functionality-out-of-devmode 
Move functionality out of devmode
 2025-06-23 10:27:05 -04:00
Duke Mai
91def537bb
Fix subject-verb agreement in installation instructions 
Signed-off-by: Duke Mai <ducmai.network@gmail.com>
Signed-off-by: Aditya Sirish <aditya@saky.in>
 2025-06-22 10:20:48 -04:00