{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":346517502,"defaultBranch":"main","name":"slsa","ownerLogin":"slsa-framework","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2021-03-10T23:11:57.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/80431187?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1715969984.0","currentOid":""},"activityList":{"items":[{"before":"1121710a76fdc92c82f1dbb06bc2e028134ac5d8","after":"0a125980dcb82e3793ee86f3d486ce7b5948ea44","ref":"refs/heads/main","pushedAt":"2024-05-27T20:43:12.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: Update dependency markdownlint-cli to v0.41.0 (#1060)\n\nmarkdownlint-cli `0.40.0` -> `0.41.0`\r\n\r\nSigned-off-by: Mend Renovate ","shortMessageHtmlLink":"impl: Update dependency markdownlint-cli to v0.41.0 (#1060)"}},{"before":"9ff9f8d2209eee46c53b11684fcbee0b3d47c88d","after":null,"ref":"refs/heads/dependabot/bundler/docs/rexml-3.2.8","pushedAt":"2024-05-17T18:19:44.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"}},{"before":"2197af8d848acd068c76a81897cb0dd0578103a5","after":"1121710a76fdc92c82f1dbb06bc2e028134ac5d8","ref":"refs/heads/main","pushedAt":"2024-05-17T18:19:43.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: bump rexml from 3.2.6 to 3.2.8 (#1058)\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"impl: bump rexml from 3.2.6 to 3.2.8 (#1058)"}},{"before":null,"after":"9ff9f8d2209eee46c53b11684fcbee0b3d47c88d","ref":"refs/heads/dependabot/bundler/docs/rexml-3.2.8","pushedAt":"2024-05-16T21:28:17.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"build(deps-dev): bump rexml from 3.2.6 to 3.2.8 in /docs\n\nBumps [rexml](https://github.com/ruby/rexml) from 3.2.6 to 3.2.8.\n- [Release notes](https://github.com/ruby/rexml/releases)\n- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)\n- [Commits](https://github.com/ruby/rexml/compare/v3.2.6...v3.2.8)\n\n---\nupdated-dependencies:\n- dependency-name: rexml\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"build(deps-dev): bump rexml from 3.2.6 to 3.2.8 in /docs"}},{"before":"9c4e9d3cae882095232c693a5a54610629c0f7a3","after":"2197af8d848acd068c76a81897cb0dd0578103a5","ref":"refs/heads/main","pushedAt":"2024-05-14T09:38:15.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"joshuagl","name":"Joshua Lock","path":"/joshuagl","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/13888612?s=80&v=4"},"commit":{"message":"content: re-add threats (A) and (B) from v0.1 (#1056)\n\nRe-add the threat descriptions for (A) and (B) from v0.1 to v1.1. They\r\nare copied verbatim, except for removing the `(SLSA 4)`\r\nand `...` labels, which no longer apply to the current\r\nversion.\r\n\r\nFuture PRs will tweak the content of these threat descriptions. But for\r\nthis PR, I want to just add them as-is so that we can track cleanly in\r\nversion control.\r\n\r\nSigned-off-by: Mark Lodato ","shortMessageHtmlLink":"content: re-add threats (A) and (B) from v0.1 (#1056)"}},{"before":"15311153fe741cb1eadbd5361d3bf4ebed189b08","after":"9c4e9d3cae882095232c693a5a54610629c0f7a3","ref":"refs/heads/main","pushedAt":"2024-05-13T18:48:52.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: refactor diagram in figma (no visual change) (#1055)\n\nRefactor how the diagrams are implemented in Figma so that it's easier\r\nto edit.\r\n\r\nThere's no visual change. Two SVGs are completely unchanged, and two are\r\nmodified but only have lines reordered AFAICT. The two modified SVGs\r\nseem to be a pixel off, for a reason I cannot comprehend.\r\n\r\nExplanation: Previously the diagrams were built \"up\", starting with the\r\nsimplest and successively adding more detail. This was a pain to edit,\r\nbecause you'd first have to find which diagram was the \"master\" for the\r\nchange you wanted to make. Now there's only one \"master\" with all of the\r\ndetail, and the derived diagrams just hide detail that's not wanted.\r\nThis is much easier to edit (and understand!)\r\n\r\nAlso delete some unused diagrams that were in the figma file but never\r\nexported to SVG.\r\n\r\nSigned-off-by: Mark Lodato ","shortMessageHtmlLink":"impl: refactor diagram in figma (no visual change) (#1055)"}},{"before":"6f2053800ae684337def2e7f3770afa66b8cb332","after":"15311153fe741cb1eadbd5361d3bf4ebed189b08","ref":"refs/heads/main","pushedAt":"2024-05-13T08:55:06.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"joshuagl","name":"Joshua Lock","path":"/joshuagl","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/13888612?s=80&v=4"},"commit":{"message":"impl: Update actions/checkout action to v4.1.5 (#1054)\n\nactions/checkout v4.1.4 -> v4.1.5\r\n\r\nSigned-off-by: Mend Renovate ","shortMessageHtmlLink":"impl: Update actions/checkout action to v4.1.5 (#1054)"}},{"before":"7b55a4e8be9123ce320be18801b2fed3e7291370","after":"6f2053800ae684337def2e7f3770afa66b8cb332","ref":"refs/heads/main","pushedAt":"2024-05-07T12:07:08.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"nonspec: clean up meeting notes page (#1053)\n\nMake the meeting notes easier to find by moving all of the old meeting\r\nnotes to a \"retired\" section and renaming the single remaining meeting\r\nto \"weekly Monday meeting\".\r\n\r\nAlso clean up the wording in the intro and use a proper Jekyll layout to\r\nfix the styling.\r\n\r\nSigned-off-by: Mark Lodato ","shortMessageHtmlLink":"nonspec: clean up meeting notes page (#1053)"}},{"before":"c1398d556eec21b7e6aedb8f10cfa6b49101bdf3","after":"7b55a4e8be9123ce320be18801b2fed3e7291370","ref":"refs/heads/main","pushedAt":"2024-05-06T13:36:01.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: Update dependency markdownlint-cli to v0.40.0 (#1052)\n\nmarkdownlint-cli `0.39.0` -> `0.40.0`\r\n\r\nSigned-off-by: Mend Renovate ","shortMessageHtmlLink":"impl: Update dependency markdownlint-cli to v0.40.0 (#1052)"}},{"before":"87919f8ed701b023c70010a447efb31d8c20a3e0","after":"c1398d556eec21b7e6aedb8f10cfa6b49101bdf3","ref":"refs/heads/main","pushedAt":"2024-05-03T16:57:49.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"content: refine dependency threats (#1046)\n\nRefine the \"dependency threats\" of the Threats & Mitigations page to\r\nbetter explain the intent and to differentiate from (H), which sounded\r\nconfusingly similar (#1039). More work is needed to refine (H), but that\r\nis left to a separate PR.\r\n\r\n- Explain that \"dependency threats\" are not distinct threats but\r\n rather threats to other pieces of software that also affect this\r\n one. In the diagram, the diagram to color (D) differently to show\r\n this, mirroring the existing dashed lines, and add \"(A-H\r\n recursively\").\r\n- State that only \"build dependencies\" are in scope for the threat\r\n model, matching existing diagram and terminology throughout SLSA.\r\n- Rename \"Use compromised dependency\" to \"Compromise build\r\n dependency\", both for consistency with other threats, which are from\r\n the adversary's point of view, and to emphasize that this is\r\n restricted to build dependencies.\r\n- Expand the text about dependency threats and give examples.\r\n Highlight both \"include\" and \"build tool\" types of dependencies, and\r\n also include both an accidental vulnerability and a malicious\r\n backdoor.\r\n\r\nSigned-off-by: Mark Lodato ","shortMessageHtmlLink":"content: refine dependency threats (#1046)"}},{"before":"ab92814d6e48f086474b05610310a30f75509944","after":"87919f8ed701b023c70010a447efb31d8c20a3e0","ref":"refs/heads/main","pushedAt":"2024-04-29T12:17:40.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: Update github-actions (#1050)\n\nactions/checkout `v4.1.1` -> `v4.1.4`\r\namannn/action-semantic-pull-request `v5.4.0` -> `v5.5.2`\r\n\r\nSigned-off-by: Mend Renovate ","shortMessageHtmlLink":"impl: Update github-actions (#1050)"}},{"before":"3c6bd4073260a1366fc386d66ef7123c4c29f9e8","after":"ab92814d6e48f086474b05610310a30f75509944","ref":"refs/heads/main","pushedAt":"2024-04-26T20:03:52.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"lehors","name":"Arnaud J Le Hors","path":"/lehors","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6464618?s=80&v=4"},"commit":{"message":"fix: fixing typos (#1049)\n\nThis PR fixes several typos I spotted in the project.","shortMessageHtmlLink":"fix: fixing typos (#1049)"}},{"before":"af3479bbb35528df91dda5a76ecf7f62ce23cb8c","after":"3c6bd4073260a1366fc386d66ef7123c4c29f9e8","ref":"refs/heads/main","pushedAt":"2024-04-11T10:02:43.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"lehors","name":"Arnaud J Le Hors","path":"/lehors","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/6464618?s=80&v=4"},"commit":{"message":"impl: add a script to easily diff two built sites (#1045)\n\nWhenever we get a pull request to update a dependency, I run a diff to\r\nmake sure it doesn't break anything. This script simplifies that process\r\nsince it now works on archives download from Netlify, and it no longer\r\nrequires copy/pasting commands.\r\n\r\nThis could easily be turned into a stand-alone script outside SLSA -\r\nseems like a generally useful tool!\r\n\r\nSigned-off-by: Mark Lodato \r\n\r\n---------\r\n\r\nSigned-off-by: Mark Lodato \r\nSigned-off-by: Arnaud J Le Hors \r\nCo-authored-by: Arnaud J Le Hors ","shortMessageHtmlLink":"impl: add a script to easily diff two built sites (#1045)"}},{"before":"33aa651a1a8957c6474852769578bbc420db3acc","after":null,"ref":"refs/heads/dependabot/bundler/docs/nokogiri-1.15.6","pushedAt":"2024-04-10T23:54:35.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"}},{"before":"8d332c09f27e219c5348bc26f702cfdb1db5d88a","after":"af3479bbb35528df91dda5a76ecf7f62ce23cb8c","ref":"refs/heads/main","pushedAt":"2024-04-10T23:54:34.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: bump nokogiri from 1.15.5 to 1.15.6 in /docs (#1038)\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"impl: bump nokogiri from 1.15.5 to 1.15.6 in /docs (#1038)"}},{"before":"48051e5fe0385433272bd98367858d58d1eb8459","after":"8d332c09f27e219c5348bc26f702cfdb1db5d88a","ref":"refs/heads/main","pushedAt":"2024-04-09T17:43:37.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: Update dependency github-pages to v231 (#1033)\n\nSigned-off-by: Mend Renovate ","shortMessageHtmlLink":"impl: Update dependency github-pages to v231 (#1033)"}},{"before":"5df8615b0d5f77140b3c972e9457b5fcfc279dd1","after":"48051e5fe0385433272bd98367858d58d1eb8459","ref":"refs/heads/main","pushedAt":"2024-04-09T16:11:42.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"kpk47","name":null,"path":"/kpk47","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1079282?s=80&v=4"},"commit":{"message":"nonspec: Update meeting schedule on the community page. (#1044)\n\nWe've agreed to cancel the monthly community meeting and roll it into\r\nthe weekly specification SIG meeting. Additionally, the tooling SIG has\r\nnot met regularly for some time. This PR makes the following changes to\r\nthe community page to reflect our new schedule:\r\n- Archive the meeting notes for both the community meeting and the\r\ntooling SIG meeting.\r\n- Direct contributors to the weekly specification meeting.\r\n\r\n---------\r\n\r\nSigned-off-by: kpk47 \r\nSigned-off-by: kpk47 <1079282+kpk47@users.noreply.github.com>\r\nCo-authored-by: Arnaud J Le Hors ","shortMessageHtmlLink":"nonspec: Update meeting schedule on the community page. (#1044)"}},{"before":"05649cfe87109f4c1ccee5413f524dc0194a0efe","after":null,"ref":"refs/heads/dependabot/bundler/docs/nokogiri-1.16.2","pushedAt":"2024-03-19T00:49:01.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"33aa651a1a8957c6474852769578bbc420db3acc","ref":"refs/heads/dependabot/bundler/docs/nokogiri-1.15.6","pushedAt":"2024-03-19T00:48:57.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"build(deps-dev): bump nokogiri from 1.15.5 to 1.15.6 in /docs\n\nBumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.15.5 to 1.15.6.\n- [Release notes](https://github.com/sparklemotion/nokogiri/releases)\n- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.15.5...v1.15.6)\n\n---\nupdated-dependencies:\n- dependency-name: nokogiri\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"build(deps-dev): bump nokogiri from 1.15.5 to 1.15.6 in /docs"}},{"before":"74452a85d2d388971896c20a7b1b453aef1f045d","after":"5df8615b0d5f77140b3c972e9457b5fcfc279dd1","ref":"refs/heads/main","pushedAt":"2024-02-13T15:34:56.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: fix comparison instructions (#1032)\n\nCommit 74452a8 added instructions to compare builds, but it had a few\r\nbugs:\r\n\r\n- Did not work on MacOS due to differences between BSD `sed` (Mac) and\r\n GNU `sed` (Linux)\r\n - To edit in-place without a backup file, GNU sed uses `-i` (no\r\n parameter) and BSD sed uses `-i ''`. There is no cross-platform way\r\n to do this. So instead, just use a backup file (`-i.bak`) then\r\n delete it afterward.\r\n - `\\+` is a GNU extension to basic regexp. Switch to extended regexp\r\n (`-r`) which works on GNU sed and modern BSD sed.\r\n- Incorrectly edited all dates instead of just the first. Only the first\r\n is the build timestamp (`site.time` in Jekyll). The rest are\r\n deterministic and should not be scrubbed. Use the `1` sed range to\r\n fix.\r\n- Did not note that the bash `**/*` syntax requires `shopt -s globstar`.\r\n\r\nSigned-off-by: Mark Lodato ","shortMessageHtmlLink":"impl: fix comparison instructions (#1032)"}},{"before":"0dca911f713a5a843eae627d33e2e6948105bc6e","after":"74452a85d2d388971896c20a7b1b453aef1f045d","ref":"refs/heads/main","pushedAt":"2024-02-13T13:25:27.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: add instructions on how to diff builds (#1031)\n\nIt's not completely straightforward to compare two versions of the built\r\nsite (`_site`) since you need to scrub commit IDs and timestamps. This\r\ncommit adds a new section to docs/README.md explaining how to do this.\r\n\r\nThis is useful to do when upgrading to new versions of dependencies\r\n(e.g. #1028) or changing templates, where you want to make sure there\r\nare no unexpected changes.\r\n\r\nIdeally this could be done automatically as part of our CI/CD (GitHub\r\nActions or Netlify), but this is a simple first step.\r\n\r\nSigned-off-by: Mark Lodato ","shortMessageHtmlLink":"impl: add instructions on how to diff builds (#1031)"}},{"before":"0f7b4897aa18733c1ea2c450a652964caac91d80","after":"05649cfe87109f4c1ccee5413f524dc0194a0efe","ref":"refs/heads/dependabot/bundler/docs/nokogiri-1.16.2","pushedAt":"2024-02-12T20:31:19.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"build(deps-dev): bump nokogiri from 1.15.3 to 1.16.2 in /docs\n\nBumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.15.3 to 1.16.2.\n- [Release notes](https://github.com/sparklemotion/nokogiri/releases)\n- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.15.3...v1.16.2)\n\n---\nupdated-dependencies:\n- dependency-name: nokogiri\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"build(deps-dev): bump nokogiri from 1.15.3 to 1.16.2 in /docs"}},{"before":"5442b2e7d9d32c4fcdda0447a5b451f8ed9d6db5","after":"0dca911f713a5a843eae627d33e2e6948105bc6e","ref":"refs/heads/main","pushedAt":"2024-02-12T20:30:18.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: Update dependency github-pages to v229 (#1028)\n\nSigned-off-by: Mend Renovate ","shortMessageHtmlLink":"impl: Update dependency github-pages to v229 (#1028)"}},{"before":"53992b6a3497b3f470bc8e04d4f5ae1d48a8ecf7","after":"5442b2e7d9d32c4fcdda0447a5b451f8ed9d6db5","ref":"refs/heads/main","pushedAt":"2024-02-12T14:41:50.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: Update actions/setup-node action to v4.0.2 (#1027)\n\nSigned-off-by: Mend Renovate ","shortMessageHtmlLink":"impl: Update actions/setup-node action to v4.0.2 (#1027)"}},{"before":"2d57c6bc484708322f5bbc7a859a452106c17140","after":"53992b6a3497b3f470bc8e04d4f5ae1d48a8ecf7","ref":"refs/heads/main","pushedAt":"2024-02-09T13:43:17.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: use consistent \"only-leading\" table syntax (#1025)\n\nFixes #1023 by using a consistent Markdown syntax for tables with a\r\nleading `|` but no trailing trailing `|`. Change the markdown lint\r\nconfig to require this in all files. Example:\r\n\r\n```markdown\r\n| Key | Value\r\n| --- | -----\r\n| One | A\r\n| Two | B\r\n```\r\n\r\nSigned-off-by: Mark Lodato ","shortMessageHtmlLink":"impl: use consistent \"only-leading\" table syntax (#1025)"}},{"before":"a68027fa428fa7f061682953d49f36a2db861857","after":"2d57c6bc484708322f5bbc7a859a452106c17140","ref":"refs/heads/main","pushedAt":"2024-02-07T19:08:12.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"arewm","name":"Andrew McNamara","path":"/arewm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/16674323?s=80&v=4"},"commit":{"message":"fix(typo): add missing \"to\" (#1026)\n\nSigned-off-by: Mark Lodato ","shortMessageHtmlLink":"fix(typo): add missing \"to\" (#1026)"}},{"before":"ef7e3379c518d05c1f0b43a6c4831c931f29fe3c","after":"a68027fa428fa7f061682953d49f36a2db861857","ref":"refs/heads/main","pushedAt":"2024-02-06T21:25:25.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: Update dependency markdownlint-cli to v0.39.0 (#1021)\n\nUpdate markdownlint-cli `0.38.0` ->`0.39.0`\r\n\r\nSigned-off-by: Mend Renovate ","shortMessageHtmlLink":"impl: Update dependency markdownlint-cli to v0.39.0 (#1021)"}},{"before":"6a8d9cb8ee0f129576ddfc6684fc4cf4dfbfe701","after":"ef7e3379c518d05c1f0b43a6c4831c931f29fe3c","ref":"refs/heads/main","pushedAt":"2024-02-06T21:23:10.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"MarkLodato","name":"Mark Lodato","path":"/MarkLodato","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/58860?s=80&v=4"},"commit":{"message":"impl: use consistent Markdown sytnax for tables (#1024)\n\nAddress markdownlint warning about inconsistent markdown syntax for\r\ntables. We almost always use a trailing `|`, so add that to the few\r\nplaces where it's missing. Also disable the lint warning on Liquid\r\ntemplates that markdownlint fails to parse properly.\r\n\r\nThis unblocks upgrading to markdownlint-cli v0.39 (#1021).\r\n\r\nA future PR might switch to leading-only syntax (#1023), but that is\r\noutside the scope of this PR.\r\n\r\nSigned-off-by: Mark Lodato ","shortMessageHtmlLink":"impl: use consistent Markdown sytnax for tables (#1024)"}},{"before":null,"after":"0f7b4897aa18733c1ea2c450a652964caac91d80","ref":"refs/heads/dependabot/bundler/docs/nokogiri-1.16.2","pushedAt":"2024-02-06T03:36:00.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"build(deps-dev): bump nokogiri from 1.15.3 to 1.16.2 in /docs\n\nBumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.15.3 to 1.16.2.\n- [Release notes](https://github.com/sparklemotion/nokogiri/releases)\n- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.15.3...v1.16.2)\n\n---\nupdated-dependencies:\n- dependency-name: nokogiri\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"build(deps-dev): bump nokogiri from 1.15.3 to 1.16.2 in /docs"}},{"before":"eca224b4c92b978649efe37026f2923eb1c2e570","after":"6a8d9cb8ee0f129576ddfc6684fc4cf4dfbfe701","ref":"refs/heads/main","pushedAt":"2024-01-09T11:15:33.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"joshuagl","name":"Joshua Lock","path":"/joshuagl","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/13888612?s=80&v=4"},"commit":{"message":"editorial: Separate producer from platform requirements in Levels (#1009)\n\nThis PR adds a separate \"Build Platform Requirements\" row in each table\r\nof levels.md, more clearly defining what SW producers vs. build platform\r\nare responsible for at each level. To be clear, the requirements\r\nthemselves have not changed, but rather the row in which they appear.\r\n\r\nThis change more closely matches the current separation in\r\nrequirements.md, and also facilitates adding requirements for each role\r\nin higher/newer Build Track levels.\r\n\r\nSigned-off-by: Marcela Melara \r\nCo-authored-by: Andrew McNamara ","shortMessageHtmlLink":"editorial: Separate producer from platform requirements in Levels (#1009"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEVTkeJwA","startCursor":null,"endCursor":null}},"title":"Activity ยท slsa-framework/slsa"}