This is the first beta release of gittuf! While some sharp edges remain, a lot of work has gone into enabling policy schema changes in a backwards compatible way.

Changelog

Added

• Added a sync workflow that updates gittuf metadata as needed before making policy changes
• Added functionality to list and update global rules
• Added support to the API for loading repositories in a specified directory
• Added features and workflows to support deploying gittuf over multiple repositories
• Added gittuf hooks, which enable support for user-defined checks in gittuf metadata that are run in a sandboxed lua environment

Updated

• Set v02 of gittuf's metadata as the default
• Made Fulcio support no longer restricted to developer mode
• Updated the policy staging and apply workflows to now use the sync workflow
• Updated gitinterface to now support systems with different locales than en_US
• Updated gittuf's roadmap
• Updated various dependencies and CI workflows

Contributors

This release includes work by @Yasho-Bapat, @yongjae354, @fr0m-scratch, @Horiodino, @wlynch, @patzielinski, and @adityasaky. Dependency updates are courtesy of @dependabot.