dev  

Messages by Date

• 2026/01/20 Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Clarify the instructions to start a server and to submit a PR (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Add upper limit to email thread message processing (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Thread count (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 [I] Incorrect permissions for ssh_host_key if migrated from state (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Improve JWT secret key management - increase size and require configuration (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Improve JWT secret key management - increase size and require configuration (tooling-trusted-releases) via GitHub
• 2026/01/20 [PR] Thread count (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Use generic error messages to prevent user enumeration (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Prevent enumeration (tooling-trusted-releases) via GitHub
• 2026/01/20 [PR] Prevent enumeration (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Make it less likely that release artifacts can be accidentally modified or deleted (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Make it less likely that release artifacts can be accidentally modified or deleted (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Improve documentation for external contributors (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Block announcing a release if tagged distributions have not yet been done (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Allow files to be tagged in the compose phase according to a mapping (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Narrow exception handling in GitHub OIDC verification (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Clarify the instructions to start a server and to submit a PR (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Supply missing executables in the lint workflow (tooling-releases-client) via GitHub
• 2026/01/20 Re: [I] Supply missing executables in the lint workflow (tooling-releases-client) via GitHub
• 2026/01/20 Re: [PR] Copy SBOM models to remove interdependencies (tooling-trusted-releases) via GitHub
• 2026/01/20 [PR] Copy SBOM models to remove interdependencies (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [I] Block announcing a release if tagged distributions have not yet been done (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Bump astral-sh/setup-uv from 7.1.6 to 7.2.0 (tooling-trusted-releases) via GitHub
• 2026/01/20 Re: [PR] Bump biomejs/setup-biome from 2.6.0 to 2.7.0 (tooling-trusted-releases) via GitHub
• 2026/01/19 [PR] Bump astral-sh/setup-uv from 7.1.6 to 7.2.0 (tooling-trusted-releases) via GitHub
• 2026/01/19 [PR] Bump biomejs/setup-biome from 2.6.0 to 2.7.0 (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Narrow exception handling in GitHub OIDC verification (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Clarify the instructions to start a server and to submit a PR (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Improve error reporting when /resolve/tabulated data is unavailable (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Narrow exception handling in GitHub OIDC verification (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Organise all files into subdirectories within the state directory (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Organise all files into subdirectories within the state directory (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Write hypercorn.log somewhere other than the state directory (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Clarify the instructions to start a server and to submit a PR (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Write hypercorn.log somewhere other than the state directory (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Write hypercorn.log somewhere other than the state directory (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Improve error reporting when /resolve/tabulated data is unavailable (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [I] Integrate ATR secrets with Puppet (tooling-trusted-releases) via GitHub
• 2026/01/19 [I] Write hypercorn.log somewhere other than the state directory (tooling-trusted-releases) via GitHub
• 2026/01/19 Re: [PR] Revise README for clarifying TUI (tooling-releases-client) via GitHub
• 2026/01/19 Re: [PR] Revise README for clarifying TUI (tooling-releases-client) via GitHub
• 2026/01/19 Re: [I] What does TUI stand for? (tooling-releases-client) via GitHub
• 2026/01/19 Re: [PR] Revise README for clarifying TUI (tooling-releases-client) via GitHub
• 2026/01/19 [I] Supply missing executables in the lint workflow (tooling-releases-client) via GitHub
• 2026/01/19 Re: [PR] Revise README for clarifying TUI (tooling-releases-client) via GitHub
• 2026/01/19 [PR] Revise README for clarifying TUI (tooling-releases-client) via GitHub
• 2026/01/19 Re: [I] What does TUI stand for? (tooling-releases-client) via GitHub
• 2026/01/18 Re: [I] What does TUI stand for? (tooling-releases-client) via GitHub
• 2026/01/18 [I] What does TUI stand for? (tooling-releases-client) via GitHub
• 2026/01/17 Re: [I] Integrate ATR secrets with Puppet (tooling-trusted-releases) via GitHub
• 2026/01/17 Re: [I] Move admin user list to LDAP/external configuration (tooling-trusted-releases) via GitHub
• 2026/01/17 Re: [I] Move admin user list to LDAP/external configuration (tooling-trusted-releases) via GitHub
• 2026/01/17 Re: [I] Integrate ATR secrets with Puppet (tooling-trusted-releases) via GitHub
• 2026/01/17 Re: [I] Move admin user list to LDAP/external configuration (tooling-trusted-releases) via GitHub
• 2026/01/17 Re: [I] Integrate ATR secrets with Puppet (tooling-trusted-releases) via GitHub
• 2026/01/17 Re: [I] Move admin user list to LDAP/external configuration (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Improve JWT secret key management - increase size and require configuration (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Improve JWT secret key management - increase size and require configuration (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Move admin user list to LDAP/external configuration (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Move admin user list to LDAP/external configuration (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Create SECURITY.md and security documentation (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Update `notes` (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Improve JWT secret key management - increase size and require configuration (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Clarify the instructions to start a server and to submit a PR (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Add a PR form to orient new developers (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Clarify the instructions to start a server and to submit a PR (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Clarify the instructions to start a server and to submit a PR (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Remove hardcoded authorization bypass for tooling committee (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Remove hardcoded authorization bypass for tooling committee (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Improve JWT secret key management - increase size and require configuration (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Increase JWT token ID (jti) entropy from 64 to 128 bits (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Increase JWT token ID (jti) entropy from 64 to 128 bits (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Add issuer and audience claims to JWT tokens (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [I] Add issuer and audience claims to JWT tokens (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Narrow exception handling in GitHub OIDC verification (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Create SECURITY.md and security documentation (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Escape database values before writing to database (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Implement file type/content validation for uploads (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Add upper limit to email thread message processing (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Configure request timeouts to prevent slowloris attacks (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Enable CPU and memory limits for worker processes (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Implement structured logging for API access (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Create centralized HTTP client with explicit TLS configuration (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Notify users when authentication credentials change (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Use generic error messages to prevent user enumeration (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Hide stack traces from error pages in production (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Add Strict-Transport-Security (HSTS) header (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Configure session cookie security attributes (Secure, HttpOnly, SameSite) (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Add issuer and audience claims to JWT tokens (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Improve JWT secret key management - increase size and require configuration (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Increase JWT token ID (jti) entropy from 64 to 128 bits (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Remove hardcoded authorization bypass for tooling committee (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Move admin user list to LDAP/external configuration (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Enforce MAX_CONTENT_LENGTH for upload size limits (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Implement log injection prevention (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Implement rate limiting on authentication endpoints (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [PR] Bump pyasn1 from 0.6.1 to 0.6.2 (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [PR] Bump pyasn1 from 0.6.1 to 0.6.2 (tooling-trusted-releases) via GitHub
• 2026/01/16 [PR] Bump pyasn1 from 0.6.1 to 0.6.2 (tooling-trusted-releases) via GitHub
• 2026/01/16 [I] Update `notes` (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [PR] Bump pynacl from 1.6.0 to 1.6.2 (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [PR] Bump pynacl from 1.6.0 to 1.6.2 (tooling-trusted-releases) via GitHub
• 2026/01/16 [PR] Bump pynacl from 1.6.0 to 1.6.2 (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [PR] Migrate state files with extensive checks (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [PR] Migrate state files with extensive checks (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [PR] Migrate state files with extensive checks (tooling-trusted-releases) via GitHub
• 2026/01/16 [GH] Migrate state files with extensive checks (tooling-trusted-releases) via GitHub
• 2026/01/16 [GH] Migrate state files with extensive checks (tooling-trusted-releases) via GitHub
• 2026/01/16 [PR] Migrate state files with extensive checks (tooling-trusted-releases) via GitHub
• 2026/01/16 Re: [PR] Possible recurrent jobs implementation (tooling-trusted-releases) via GitHub
• 2026/01/15 Re: [I] Evaluate ASVS v5.0.0 compliance: server side execution (tooling-trusted-releases) via GitHub
• 2026/01/15 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/15 Re: [PR] fixed issue 477 (tooling-trusted-releases) via GitHub
• 2026/01/15 Re: [PR] Document database cascade deletions (tooling-trusted-releases) via GitHub
• 2026/01/15 Re: [PR] Document database cascade deletions (tooling-trusted-releases) via GitHub
• 2026/01/15 Re: [I] Organise all files into subdirectories within the state directory (tooling-trusted-releases) via GitHub
• 2026/01/15 Re: [I] Improve error reporting when /resolve/tabulated data is unavailable (tooling-trusted-releases) via GitHub
• 2026/01/15 [GH] Possible recurrent jobs implementation (tooling-trusted-releases) via GitHub
• 2026/01/15 [GH] Possible recurrent jobs implementation (tooling-trusted-releases) via GitHub
• 2026/01/15 [GH] Possible recurrent jobs implementation (tooling-trusted-releases) via GitHub
• 2026/01/15 [GH] Possible recurrent jobs implementation (tooling-trusted-releases) via GitHub
• 2026/01/15 [GH] Possible recurrent jobs implementation (tooling-trusted-releases) via GitHub
• 2026/01/15 [GH] Possible recurrent jobs implementation (tooling-trusted-releases) via GitHub
• 2026/01/15 [I] Organise all files into subdirectories within the state directory (tooling-trusted-releases) via GitHub
• 2026/01/15 Re: [I] Organise all files into subdirectories within the state directory (tooling-trusted-releases) via GitHub
• 2026/01/15 [GH] Possible recurrent jobs implementation (tooling-trusted-releases) via GitHub
• 2026/01/15 Re: [PR] Possible recurrent jobs implementation (tooling-trusted-releases) via GitHub
• 2026/01/15 [PR] Possible recurrent jobs implementation (tooling-trusted-releases) via GitHub
• 2026/01/15 Re: [I] DB JDO project label is db-_jdo with an extra symbol between db and jdo (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] DB JDO project label is db-_jdo with an extra symbol between db and jdo (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Clarify and constrain permitted ASF TLP version numbers (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Ordering of private vs public functions (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Ordering of private vs public functions (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Allow release managers to be designated (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Improve HTML form validation error display and code quality (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Improve HTML form validation error display and code quality (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] DB JDO project label is db-_jdo with an extra symbol between db and jdo (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] DB JDO project label is db-_jdo with an extra symbol between db and jdo (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] DB JDO project label is db-_jdo with an extra symbol between db and jdo (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Promotion permissions for phase transitions and distributions (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Allow release managers to be designated (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Release policy improvements for ATR (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Release policy improvements for ATR (tooling-trusted-releases) via GitHub
• 2026/01/14 [I] FAQs on ATR for legal release policy (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Release policy improvements for ATR (tooling-trusted-releases) via GitHub
• 2026/01/14 [I] Incubator documentation for release management (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Promotion permissions for phase transitions and distributions (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Promotion permissions for phase transitions and distributions (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Release policy improvements for ATR (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Release policy improvements for ATR (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Promotion permissions for phase transitions and distributions (tooling-trusted-releases) via GitHub
• 2026/01/14 [I] Infra documentation additions to describe using ATR in release creation (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Review permissions for all actions in ATR (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Document the layout of the filesystem (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Infra documentation changes for the Release Manager role (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Infra documentation changes for the Release Manager role (tooling-trusted-releases) Andrew Wetmore
• 2026/01/14 [I] Infra documentation changes for Download pages (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Infra documentation changes for the Release Manager role (tooling-trusted-releases) Andrew Wetmore
• 2026/01/14 Re: [I] Infra documentation changes for the Release Manager role (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Document the layout of the filesystem (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Document the layout of the filesystem (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Infra documentation changes for the Release Manager role (tooling-trusted-releases) via GitHub
• 2026/01/14 [I] Infra documentation changes for the Release Manager role (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Allow release managers to be designated (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Finish option to automatically archive prior release (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Allow release managers to be designated (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Ensure that ATR can be developed on musl based Linux distributions (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Ensure that ATR can be developed on musl based Linux distributions (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Ensure that ATR can be developed on musl based Linux distributions (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Improve error reporting when /resolve/tabulated data is unavailable (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Improve error reporting when /resolve/tabulated data is unavailable (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [PR] Document database cascade deletions (tooling-trusted-releases) via GitHub
• 2026/01/14 [I] Promotion permissions for phase transitions and distributions (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Allow release managers to be designated (tooling-trusted-releases) via GitHub
• 2026/01/14 [I] Add a PR form to orient new developers (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Add a PR form to orient new developers (tooling-trusted-releases) via GitHub
• 2026/01/14 [I] Document the layout of the filesystem (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Make it less likely that release artifacts can be accidentally modified or deleted (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Document database cascades (tooling-trusted-releases) via GitHub
• 2026/01/14 [I] Allow release managers to be designated (tooling-trusted-releases) via GitHub
• 2026/01/14 [PR] Document database cascade deletions (#517) (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Do not allow revision serial numbers to be reallocated (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Do not allow revision serial numbers to be reallocated (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Review permissions for all actions in ATR (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Ensure that ATR can be developed on musl based Linux distributions (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Ensure that ATR can be developed on musl based Linux distributions (tooling-trusted-releases) via GitHub
• 2026/01/14 [I] Ensure that ATR can be developed on musl based Linux distributions (tooling-trusted-releases) via GitHub
• 2026/01/14 Re: [I] Updated Readme (tooling-actions) via GitHub
• 2026/01/14 Re: [I] Updated Readme (tooling-actions) via GitHub
• 2026/01/14 Re: [I] Updated Readme (tooling-actions) via GitHub
• 2026/01/14 Re: [I] Updated Readme (tooling-actions) via GitHub
• 2026/01/14 Re: [I] Updated Readme (tooling-actions) via GitHub
• 2026/01/14 [I] Updated Readme (tooling-actions) via GitHub
• 2026/01/14 Re: [I] Do not allow revision serial numbers to be reallocated (tooling-trusted-releases) via GitHub
• 2026/01/14 [I] Document database cascades (tooling-trusted-releases) via GitHub

• Earlier messages
• Later messages