Comments (2)
mikhailswift
commented on September 28, 2024
Part of this will be creating any necessary helper functions to deal with symlinks if required
from witness.
shibumi
commented on September 28, 2024
Following symlinks is not trivial. I remember that we had a few problems with this in in-toto-golang (including one CVE).
The related code for this in in-toto-golang is here: https://github.com/shibumi/in-toto-golang/blob/master/in_toto/runlib.go#L72L204
Maybe it helps.
from witness.
Related Issues (20)
- [feat]: Allow attestors to be run during multiple lifecycle states
- Integration of Witness Policy Tool into Witness with New Command `witness policy` HOT 6
- Feature Request: Implement "inspect" Command HOT 2
- command to auto-generate a witness configuration file HOT 1
- Consider Updates to Attestor Type Documentation HOT 2
- [Bug]: command-run attestor type complains about missing command HOT 2
- [Bug]: Always-run attestor type duplication HOT 2
- [Feat]: enhanced debug log level output HOT 3
- [Feat]: Custom / External Attestors HOT 1
- [Bug]: Using artifactsFrom fails when backrefs don't exist
- curl + exec install is bad practice HOT 7
- [Feat]: Define attestor types that leverage the intelligence gathered by other attestors
- [Bug]: KMS verifier flags don't get passed to the policy verifier HOT 1
- [Bug]: Incorrect cover of CLO Monitor SBOM check. HOT 3
- [Feat]: SBOM Attestors HOT 1
- [Feat]: Add support for dirhash HOT 1
- Non-working links in CONTRIBUTING.md
- [Bug]: Installer does not work on macOS
- [chore]: add documentation for omnitrail attestor
- [Feat]: write documentation for VEX attestor
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from witness.