Commit graph

608 commits

Author SHA1 Message Date
Pat Zielinski
07c87fa656 gitinterface: Add utilities helpful for gittuf hooks
Signed-off-by: Pat Zielinski <70954403+patzielinski@users.noreply.github.com>
Co-authored-by: Jamal Cao <jamaltheodds@gmail.com>
2025-03-06 23:18:09 -05:00
patzielinski
4f3b0cf24b
Merge pull request #841 from yongjae354/list-globalrules
gittuf: add command list-globalrules
2025-03-05 18:57:05 +00:00
Yongjae Chung
dfd67f142a add cmd list-global-rules
Signed-off-by: Yongjae Chung <yongjae354@berkeley.edu>
2025-03-05 13:27:50 -05:00
Aditya Sirish A Yelgundhalli
3e7e688406
gittuf: Update how sync and propagation workflows interact
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-03-05 11:21:29 -05:00
Aditya Sirish A Yelgundhalli
0de2972b48
cmd: Add persistent options for attest
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-20 18:13:32 -05:00
Aditya Sirish A Yelgundhalli
3639e23219
*: Add gittuf sync
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-20 17:56:07 -05:00
Pat Zielinski
6da61db538 tuf: Fix issues raised by linter
Signed-off-by: Pat Zielinski <70954403+patzielinski@users.noreply.github.com>
2025-02-20 17:18:26 -05:00
patzielinski
f0d75ae32c
Merge pull request #844 from gittuf/gitinterface-fetch-single-object
gitinterface: Support fetching single object
2025-02-20 18:45:08 +00:00
Aditya Sirish A Yelgundhalli
692f95930d
gitinterface: Support fetching single object
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-20 13:41:27 -05:00
patzielinski
cbdf19b90d
Merge pull request #815 from gittuf/add-guppie-metadata
[GUPPIEs] *: Add GUPPIEs to gittuf metadata
2025-02-20 18:11:04 +00:00
Pat Zielinski
a992164355 tuf: Add GUPPIEs to gittuf metadata
Signed-off-by: Pat Zielinski <70954403+patzielinski@users.noreply.github.com>
Co-authored-by: yashobapat <f20210006@goa.bits-pilani.ac.in>
2025-02-20 12:39:05 -05:00
Aditya Sirish A Yelgundhalli
4719129e24
gitinterface: Add GetObjectType
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-20 12:15:45 -05:00
Aditya Sirish A Yelgundhalli
2dc047ec98
*: Remove some unnecessary pieces
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-18 10:54:27 -05:00
Aditya Sirish A Yelgundhalli
03e363a527
*: Move attest functionality out of dev
This commit moves GitHub-specific attestations out of developer mode. In
addition, it drops the authorize subcommand of dev, which was deprecated in the
last release.

Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-18 09:18:57 -05:00
Aditya Sirish A Yelgundhalli
8b2d9967ed
policy: Check policy ref matches RSL during Apply
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-12 15:58:47 -05:00
Aditya Sirish A Yelgundhalli
58bde0d547
policy: Load and commit controller metadata
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-12 11:16:21 -05:00
Aditya Sirish A Yelgundhalli
0a4f65ae7d
policy: Use wrapper type for state metadata
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-11 17:17:52 -05:00
Aditya Sirish A Yelgundhalli
e1099796ea
policy: Support verifying initial root signatures
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-10 14:47:36 -05:00
Aditya Sirish A Yelgundhalli
68c8e7658c
rsl: Add option for searching for propagation entry
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-10 10:39:45 -05:00
Aditya Sirish
b066892c2b
Merge pull request #807 from gittuf/reference-updater
*: Add ReferenceUpdaterEntry interface
2025-02-07 15:55:11 -05:00
Aditya Sirish A Yelgundhalli
b75f01a275
*: Add ReferenceUpdaterEntry interface
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-07 15:54:50 -05:00
patzielinski
003aa7ca6a
Merge pull request #806 from gittuf/reference-updater
rsl: Group ref and propagation entries
2025-02-07 18:44:41 +00:00
Aditya Sirish A Yelgundhalli
97ddfb53a7
rsl: Group ref and propagation entries
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-07 13:36:11 -05:00
Aditya Sirish A Yelgundhalli
8de3134974
tuf: Update propagation location for policy
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-07 13:27:49 -05:00
Aditya Sirish A Yelgundhalli
e6d888b2ca
tuf: Add support for multi-repository policies
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-06 15:26:47 -05:00
Aditya Sirish A Yelgundhalli
3d9ec638b3
*: Add propagation flow to certain RSL workflows
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-05 15:35:16 -05:00
patzielinski
20cca96c14
Merge pull request #797 from gittuf/transport-ctx
transport: Plumb context through to transport
2025-02-05 19:58:48 +00:00
Aditya Sirish A Yelgundhalli
0da9e4b228
transport: Plumb context through to transport
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-05 14:47:42 -05:00
patzielinski
9b75be0764
Merge pull request #796 from gittuf/display-propagations
display: Support propagation entries in rsl log
2025-02-05 19:47:13 +00:00
Aditya Sirish A Yelgundhalli
e051b6113b
display: Support propagation entries in rsl log
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-05 14:40:29 -05:00
Aditya Sirish A Yelgundhalli
9c9d735f40
gittuf: Add propagation workflow
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-05 14:38:58 -05:00
Aditya Sirish A Yelgundhalli
53415df623
rsl: Add initial propagation workflow
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-05 11:21:11 -05:00
Aditya Sirish A Yelgundhalli
202ba09c5a
rsl: Add support for propagation entries
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-05 11:07:52 -05:00
patzielinski
d88dac3119
Merge pull request #786 from gittuf/tuf-propagations
tuf: Add field for propagation directives to root
2025-02-05 15:56:26 +00:00
Aditya Sirish A Yelgundhalli
00fb1658f4
*: Add and remove propagation workflows from metadata
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-05 10:46:02 -05:00
Aditya Sirish A Yelgundhalli
23b3282539
gitinterface: Add subtree workflow
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-04 16:48:38 -05:00
Aditya Sirish A Yelgundhalli
779ad12f1f
gitinterface: Add support for setting symref
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-04 15:11:58 -05:00
patzielinski
fcc1270339
Merge pull request #682 from yongjae354/remove-principal
gittuf: add remove-persons/principal flow
2025-02-04 19:24:44 +00:00
Yongjae Chung
09395b18d8 Add remove-principal
Signed-off-by: Yongjae Chung <yongjae354@berkeley.edu>
2025-02-04 13:57:21 -05:00
Aditya Sirish A Yelgundhalli
6f76045ff2
gitinterface: Add support for file statuses
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-04 13:05:30 -05:00
Aditya Sirish A Yelgundhalli
7700ca07be
gitinterface: Add IsBare() to repository
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-04 11:36:39 -05:00
Aditya Sirish A Yelgundhalli
2923704fa0
gitinterface: Support bare clones
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-04 11:18:02 -05:00
Horiodino
3d0be301a4
added Discard to clear the changes currently staged
Signed-off-by: Horiodino <holiodin@gmail.com>

updated Docs

Signed-off-by: Horiodino <holiodin@gmail.com>
2025-02-03 14:56:17 +05:30
patzielinski
f6876cad32
Merge pull request #776 from gittuf/fix-rsl-log
Fix rsl log buffering
2025-02-02 19:42:58 +00:00
Aditya Sirish
79efbf235f
gitinterface: Support types for tree entries
Signed-off-by: Aditya Sirish <aditya@saky.in>
2025-02-02 14:07:34 -05:00
Aditya Sirish
3236696c98
*: Extend TreeBuilder to reuse existing trees
If an intermediate tree already exists and we know this ahead of time,
we should use it without recreating it with all of its contents resolved
and written recursively. This commit adds support for such cases and
renames TreeBuilder's APIs to generalize away from accepting blob IDs
only.

Signed-off-by: Aditya Sirish <aditya@saky.in>
2025-02-02 12:06:18 -05:00
Aditya Sirish
a1d2f339e4
gitinterface: Add repository.HasObject
Signed-off-by: Aditya Sirish <aditya@saky.in>
2025-02-01 18:20:39 -05:00
Aditya Sirish
749b7df97c
*: Add support for coloring log output
Signed-off-by: Aditya Sirish <aditya@saky.in>
2025-02-01 17:58:11 -05:00
Aditya Sirish
c3148721b9
rsl: Fix gittuf rsl log buffering
This commit fixes how gittuf rsl log loads RSL entries to print.
Earlier, all entries were loaded into memory first and then printed.
This commit switches over to a buffered write approach, meaning the user
starts seeing output right away.

Signed-off-by: Aditya Sirish <aditya@saky.in>
Co-authored-by: Hao Tran <haoanhtran7@gmail.com>
2025-02-01 17:51:37 -05:00
Aditya Sirish A Yelgundhalli
16d9e1d9ce
*: Move reference authorizations out of dev mode
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-01-31 13:45:23 -05:00