issues  

Messages by Date

• 2026/07/10 Re: [I] Files not found for release with multiple directory (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Files not found for release with multiple directory (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Setup svn credentials to commit to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Setup svn credentials to commit to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Move svn dist commits from atr test repository to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Make banner message configurable by environment (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Setup svn credentials to commit to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Make banner message configurable by environment (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Document ATR disk layout and size requirements (tooling-trusted-releases) via GitHub
• 2026/07/10 Re: [I] Missing Centralized Documentation of Resource-Intensive Operations (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Update the tutorial (tooling-trusted-releases) via GitHub
• 2026/07/10 [I] Document SBOM workflow for users (tooling-trusted-releases) via GitHub
• 2026/07/10 [PR] Bump soupsieve from 2.8 to 2.8.4 (tooling-docs) via GitHub
• 2026/07/10 Re: [PR] Add SBOM workflows documentation (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/10 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Files not found for release with multiple directory (tooling-trusted-releases) via GitHub
• 2026/07/09 [I] Files not found for release with multiple directory (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Make banner message configurable by environment (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Make banner message configurable by environment (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [PR] [INFRA] Set up default rulesets for default and release branches (tooling-releases-client) via GitHub
• 2026/07/09 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/09 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/09 [GH] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Document ATR disk layout and size requirements (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Use pill buttons instead of links on catalog artifact UI (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Use pill buttons instead of links on catalog artifact UI (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] add MAJOR_VERSION variable to Default download path suffix (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] add MAJOR_VERSION variable to Default download path suffix (tooling-trusted-releases) via GitHub
• 2026/07/09 [I] Revisit build attestations and SLSA (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Empty __init__.py and similar files are recognized as missing licences (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Empty __init__.py and similar files are recognized as missing licences (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] No obvious way how to resolve concerns (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] No obvious way how to resolve concerns (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] No obvious way how to resolve concerns (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Document SLSA attestations (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Document reproducible builds and permission to use CI (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Document reproducible builds, signing, SBOMs, and OpenSSF (tooling-trusted-releases) via GitHub
• 2026/07/09 [I] Document SLSA attestations (tooling-trusted-releases) via GitHub
• 2026/07/09 [I] Document reproducible builds and permission to use CI (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Document reproducible builds, signing, SBOMs, and OpenSSF (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Document the scope of ATR (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Document the scope of ATR (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] GitHub OIDC JWT jti is parsed but never used for replay prevention (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] GitHub OIDC JWT jti is parsed but never used for replay prevention (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Order of tiles on Releases page (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Security (defense-in-depth) concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Security (defense-in-depth) concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] add MAJOR_VERSION variable to Default download path suffix (tooling-trusted-releases) via GitHub
• 2026/07/09 Re: [I] Security concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Security concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/09 Re: [I] Security concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/08 [I] add MAJOR_VERSION variable to Default download path suffix (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] Rework the users guide component page (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [PR] Update components (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] Security concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] Security concern about stack-traces (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/08 [I] Error 500 when trying to use `atr vote start' (tooling-releases-client) via GitHub
• 2026/07/08 [I] Specifying revision is harmful/not needed (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] Empty __init__.py and similar files are recognized as missing licences (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] No obvious way how to resolve concerns (tooling-releases-client) via GitHub
• 2026/07/08 [I] No obvious way how to resolve concerns (tooling-releases-client) via GitHub
• 2026/07/08 Re: [I] Empty __init__.py and similar files are recognized as missing licences (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] The atr client returns json response by default rather than human readable messages (tooling-releases-client) via GitHub
• 2026/07/08 [I] Empty __init__.py and similar files are recognized as missing licences (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] SPDX licences are not recognized properly by ATR (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] Use pill buttons instead of links on catalog artifact UI (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] The atr client does not allow to set PAT token from stdin (tooling-releases-client) via GitHub
• 2026/07/08 [PR] Update components (tooling-trusted-releases) via GitHub
• 2026/07/08 [PR] #1370 - support import and export of PMC CSVs (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [PR] Bump actions/setup-java from 5.3.0 to 5.4.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/08 [PR] Bump actions/setup-java from 5.3.0 to 5.5.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/08 Re: [PR] Bump actions/setup-java from 5.3.0 to 5.4.0 [tooling-atr-maven-plugin] via GitHub
• 2026/07/08 Re: [I] Move svn dist commits from atr test repository to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] Move svn dist commits from atr test repository to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] Make banner message configurable by environment (tooling-trusted-releases) via GitHub
• 2026/07/08 [I] Beta documentation updates (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] Move svn dist commits from atr test repository to dist/release (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] Wrong mailing address for DB-JDO votes (tooling-trusted-releases) via GitHub
• 2026/07/08 Re: [I] Wrong mailing address for DB-JDO votes (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] Document ATR disk layout and size requirements (tooling-trusted-releases) via GitHub
• 2026/07/07 [I] Order of tiles on Releases page (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] Committee release catalog schema and model complete (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] Catalog and seed attic releases (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] Catalog and seed attic releases (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] KEYS and artifact signature import (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] KEYS and artifact signature import (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] Catalog and seed non-attic projects and releases (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] Catalog and seed non-attic projects and releases (tooling-trusted-releases) via GitHub
• 2026/07/07 [I] Apply project and artifact catalog seeds (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] Release archival actions (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] Ensure that a release can only be deleted or archived, and that the state is clear (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] Ensure that a release can only be deleted or archived, and that the state is clear (tooling-trusted-releases) via GitHub
• 2026/07/07 [I] Release archival actions (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] Add committee permissions (tooling-trusted-releases) via GitHub
• 2026/07/07 Re: [I] Add committee permissions (tooling-trusted-releases) via GitHub
• 2026/07/06 [I] Admin page for seeding Projects and Artifact Catalog (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] Ensure that a release can only be deleted or archived, and that the state is clear (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] Ensure that a release can only be deleted or archived, and that the state is clear (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] Ensure that a release can only be deleted or archived, and that the state is clear (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] Ensure that a release can only be deleted or archived, and that the state is clear (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] Irreversible filesystem move + prior-revision deletion happen before the DB promotion CAS (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] Irreversible filesystem move + prior-revision deletion happen before the DB promotion CAS (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [PR] Bump actions/cache from 5.0.4 to 6.1.0 (tooling-actions) via GitHub
• 2026/07/06 Re: [PR] Bump actions/setup-java from 5.3.0 to 5.4.0 (tooling-actions) via GitHub
• 2026/07/06 Re: [PR] Bump astral-sh/setup-uv from 8.0.0 to 8.2.0 (tooling-actions) via GitHub
• 2026/07/06 Re: [PR] Bump actions/setup-python from 6.2.0 to 6.3.0 (tooling-actions) via GitHub
• 2026/07/06 Re: [PR] Bump actions/cache from 5.0.4 to 5.0.5 (tooling-actions) via GitHub
• 2026/07/06 Re: [PR] Bump actions/cache from 5.0.4 to 5.0.5 (tooling-actions) via GitHub
• 2026/07/06 [PR] Bump actions/cache from 5.0.4 to 6.1.0 (tooling-actions) via GitHub
• 2026/07/06 [PR] Bump actions/setup-java from 5.3.0 to 5.4.0 (tooling-actions) via GitHub
• 2026/07/06 [PR] Bump actions/setup-python from 6.2.0 to 6.3.0 (tooling-actions) via GitHub
• 2026/07/06 Re: [I] Irreversible filesystem move + prior-revision deletion happen before the DB promotion CAS (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [PR] Bump actions/cache from 5.0.5 to 6.1.0 (tooling-releases-client) via GitHub
• 2026/07/06 Re: [PR] Bump actions/setup-python from 6.2.0 to 6.3.0 (tooling-releases-client) via GitHub
• 2026/07/06 Re: [I] Redirect a uniform release artifact url pattern into the ASF's preferred urls (tooling-trusted-releases) via GitHub
• 2026/07/06 [PR] Bump actions/cache from 5.0.5 to 6.1.0 (tooling-releases-client) via GitHub
• 2026/07/06 [PR] Bump actions/setup-python from 6.2.0 to 6.3.0 (tooling-releases-client) via GitHub
• 2026/07/06 Re: [I] Alpha3 Track (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] Track per-project security metadata in ATR (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] save "Download Path Suffix" configuration (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] Do not allow keys to be deleted if they have been used to sign a release (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] Do not allow keys to be deleted if they have been used to sign a release (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] validate_distribution_ssh_register targets a class missing from the Results union, so it always fails (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] Wrong mailing address for DB-JDO votes (tooling-trusted-releases) via GitHub
• 2026/07/06 Re: [I] validate_distribution_ssh_register targets a class missing from the Results union, so it always fails (tooling-trusted-releases) via GitHub
• 2026/07/05 Re: [I] Several committee guards are missing (tooling-trusted-releases) via GitHub
• 2026/07/05 Re: [I] Several committee guards are missing (tooling-trusted-releases) via GitHub
• 2026/07/05 [I] Several committee guards are missing (tooling-trusted-releases) via GitHub
• 2026/07/05 [I] pending→confirmed transition discards upload_date/api_url/web_url (tooling-trusted-releases) via GitHub
• 2026/07/05 [I] Irreversible filesystem move + prior-revision deletion happen before the DB promotion CAS (tooling-trusted-releases) via GitHub
• 2026/07/05 [I] validate_distribution_ssh_register targets a class missing from the Results union, so it always fails (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] Wrong mailing address for DB-JDO votes (tooling-trusted-releases) via GitHub
• 2026/07/03 [I] Wrong mailing address for DB-JDO votes (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] Add mandatory announcement field for download page URL if not already available (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] Add mandatory announcement field for download page URL if not already available (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] tooling-actions HEAD broke against server [sbp] (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] tooling-actions HEAD broke against server [sbp] (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] Add tests for Tooling actions to the server (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] Add tests for Tooling actions to the server (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] Send email when releases are made or seen (tooling-trusted-releases) via GitHub
• 2026/07/03 [I] tooling-actions HEAD broke against server [sbp] (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] Send email when releases are made or seen (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] {{KEYS_FILE}} in release template resolves to missing KEYS file (dist.apache.org path 404) (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] {{KEYS_FILE}} in release template resolves to missing KEYS file (dist.apache.org path 404) (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] KEYS and artifact signature import (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] KEYS and artifact signature import (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] Resolve airflow-providers versioning in dist watcher and history catalog scripts (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] Resolve airflow-providers versioning in dist watcher and history catalog scripts (tooling-trusted-releases) via GitHub
• 2026/07/03 Re: [I] {{KEYS_FILE}} in release template resolves to missing KEYS file (dist.apache.org path 404) (tooling-trusted-releases) via GitHub
• 2026/07/01 [I] Concurrent Session Policy Not Documented (tooling-trusted-releases) via GitHub
• 2026/07/01 [I] Runtime container runs as root (UID 0) while parsing attacker-influenced release artifacts (tooling-trusted-releases) via GitHub
• 2026/07/01 [I] to_uri_list Accepts Dangerous URI Schemes (javascript:, data:) Without Allowlist (tooling-trusted-releases) via GitHub
• 2026/07/01 [I] GitHub OIDC JWT jti is parsed but never used for replay prevention (tooling-trusted-releases) via GitHub
• 2026/07/01 Re: [I] Catalog and seed non-attic projects and releases (tooling-trusted-releases) via GitHub
• 2026/07/01 Re: [I] Catalog and seed non-attic projects and releases (tooling-trusted-releases) via GitHub
• 2026/07/01 [I] Email detected releases to a mailing list (tooling-trusted-releases) via GitHub
• 2026/07/01 Re: [I] Catalog and seed non-attic projects and releases (tooling-trusted-releases) via GitHub
• 2026/07/01 Re: [I] Project mapping analysis (tooling-trusted-releases) via GitHub
• 2026/07/01 [I] Catalog and seed attic releases (tooling-trusted-releases) via GitHub
• 2026/07/01 Re: [I] Project mapping analysis (tooling-trusted-releases) via GitHub
• 2026/07/01 Re: [I] Watch svn dist releases and catalog changes to projects and releases (tooling-trusted-releases) via GitHub
• 2026/07/01 Re: [I] Watch svn dist releases and catalog changes to projects and releases (tooling-trusted-releases) via GitHub

• Earlier messages
• Later messages