Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement certificate transparency monitoring reusable workflow and update documentation #538

Merged
merged 4 commits into from
Nov 21, 2024

Conversation

linus-sun
Copy link
Collaborator

@linus-sun linus-sun commented Nov 15, 2024

Summary

Per changes outlined in this doc, this PR implements the certificate transparency monitoring reusable workflow file, runnable via GitHub Actions, and updates the README to demonstrate how to run the reusable certificate transparency monitoring workflow.

Release Note

Certificate transparency logs have become monitorable via the ct_reusable_monitoring.yml workflow

Documentation

README is updated to reflect how to use the ct_reusable_monitoring workflow

Copy link

codecov bot commented Nov 15, 2024

Codecov Report

Attention: Patch coverage is 0% with 12 lines in your changes missing coverage. Please review.

Project coverage is 57.73%. Comparing base (d271ec7) to head (d94d8d7).
Report is 175 commits behind head on main.

Files with missing lines Patch % Lines
cmd/ct_monitor/main.go 0.00% 8 Missing ⚠️
pkg/ct/monitor.go 0.00% 4 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #538      +/-   ##
==========================================
- Coverage   64.02%   57.73%   -6.29%     
==========================================
  Files           4       18      +14     
  Lines         303     1486    +1183     
==========================================
+ Hits          194      858     +664     
- Misses         78      544     +466     
- Partials       31       84      +53     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.


🚨 Try these New Features:

@linus-sun linus-sun force-pushed the linussun/ct-workflow-file branch 2 times, most recently from 263721b to 3fb765b Compare November 20, 2024 04:27
@linus-sun linus-sun force-pushed the linussun/ct-workflow-file branch from 3fb765b to 80ab154 Compare November 20, 2024 19:06
@linus-sun linus-sun marked this pull request as ready for review November 20, 2024 19:11
contents: read

env:
UPLOADED_LOG_NAME: checkpoint
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to update the env var names based on the new defaults, correct?

README.md Outdated
- certSubject: https://github\.com/actions/starter-workflows/blob/main/\.github/workflows/lint\.yaml@.*
issuers:
- https://token\.actions\.githubusercontent\.com
subjects:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remove example of subjects and fingerprints?

Copy link
Contributor

@haydentherapper haydentherapper left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, just two small comments

@linus-sun linus-sun force-pushed the linussun/ct-workflow-file branch from 80ab154 to 27cf0a8 Compare November 21, 2024 00:04
@@ -40,8 +40,8 @@ permissions:
contents: read

env:
UPLOADED_LOG_NAME: checkpoint
LOG_FILE: checkpoint_log.txt
UPLOADED_LOG_NAME: ct_checkpoint
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

whoops, I think we flipped these! These should remain the same, and we should change the other.

@linus-sun linus-sun force-pushed the linussun/ct-workflow-file branch from 27cf0a8 to 3729b36 Compare November 21, 2024 20:59
Co-authored-by: Hayden B <[email protected]>
Signed-off-by: Linus Sun <[email protected]>
Signed-off-by: linus-sun <[email protected]>
@linus-sun linus-sun force-pushed the linussun/ct-workflow-file branch from 3729b36 to d94d8d7 Compare November 21, 2024 21:07
@haydentherapper haydentherapper merged commit 29ffa40 into sigstore:main Nov 21, 2024
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants