+
+
+{{% param description %}}
+
+
+
+
+
+Get started
+
+{{% blocks/link-down color="info" %}}
+{{% /blocks/cover %}}
+
+{{% blocks/lead color="primary" %}} **in-toto is designed to ensure the
+integrity of a software product from initiation to end-user installation. It
+does so by making it transparent to the user what steps were performed, by whom
+and in what order.** {{% /blocks/lead %}}
+
+{{% blocks/section color="dark" type="row" %}}
+
+{{% blocks/feature icon="fa-solid fa-lock" title="Software supply chain protection" url="/docs/system-overview/" %}}
+**Supply chain compromises are becoming a frequent occurrence. in-toto can help
+you protect your software supply chain.** {{% /blocks/feature %}}
+
+{{% blocks/feature icon="fa-solid fa-book" title="Open, extensible standard" url="/docs/specs/" %}}
+**in-toto is an open metadata standard that you can implement in your software's
+supply chain toolchain.** {{% /blocks/feature %}}
+
+{{% blocks/feature icon="fa-solid fa-gear" title="Extensive tooling" url="https://github.com/in-toto" %}}
+**You can use in-toto today by using our Apache-licensed libraries and tools.**
+{{% /blocks/feature %}}
+
+{{% /blocks/section %}}
+
+{{% blocks/section color="secondary" type="cncf" %}}
+
+**in-toto is a [CNCF][] [incubating][] project**.+ +[![CNCF logo][]][cncf] + +[cncf]: https://cncf.io +[cncf logo]: /images/cncf-white.svg +[incubating]: https://www.cncf.io/projects/ + +{{% /blocks/section %}} diff --git a/content/security-audit-23.md b/content/en/blog/2023/security-audit-23.md similarity index 86% rename from content/security-audit-23.md rename to content/en/blog/2023/security-audit-23.md index b09b088..3165573 100644 --- a/content/security-audit-23.md +++ b/content/en/blog/2023/security-audit-23.md @@ -1,5 +1,9 @@ --- title: Security Audit '23 +description: Explore our latest security audits and findings. +date: 2023-05-11 +author: + 'Aditya Sirish, [NYU Secure Systems Lab](https://ssl.engineering.nyu.edu)' --- We are excited to announce completion of a source code audit of the in-toto @@ -36,15 +40,16 @@ all security findings and GitHub issues for the informational findings It shall be noted that all security-relevant issues can be mitigated by a correct usage of in-toto, or by understanding its scope. In fact the issue marked high-severity was well known to us as a possible use pattern and had an -issue open for several years. Thus, our fixes consist, above all, of -clarifications in the specification and usage documentation. Below we give an +issue open for several years. Thus, our fixes consist, above all, of +clarifications in the specification and usage documentation. Below we give an overview of all security-relevant findings and our response to them. More comprehensive details can be found in the linked advisories and the [report](/2023-security-audit-report.pdf). ### File Metadata Ignored (medium severity) -Advisory: [GHSA-wqrg-wjp9-wqfq](https://github.com/in-toto/docs/security/advisories/GHSA-wqrg-wjp9-wqfq) +Advisory: +[GHSA-wqrg-wjp9-wqfq](https://github.com/in-toto/docs/security/advisories/GHSA-wqrg-wjp9-wqfq) in-toto does not verify the integrity of file metadata. This might allow attackers to provoke privilege escalation or degradation of the final product. @@ -56,9 +61,11 @@ as part of the file contents. ### Configuration Read From Local Directory (medium severity) -Advisory: [GHSA-wqrg-wjp9-wqfq](https://github.com/in-toto/in-toto/security/advisories/GHSA-wc64-c5rv-32pf) +Advisory: +[GHSA-wqrg-wjp9-wqfq](https://github.com/in-toto/in-toto/security/advisories/GHSA-wc64-c5rv-32pf) -CVE: [CVE-2023-32076](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32076) +CVE: +[CVE-2023-32076](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32076) The link generation tool of the reference implementation can be configured using RC files stored in directories following the XDG base directory specification. @@ -67,7 +74,7 @@ attacker that controls the inputs to a step may compromise the link metadata and evade detection by including such a configuration with their materials in transit, which, e.g. filter certain artifacts from being recorded. -This is a special case of “Functionaries Do Not Perform Verification”, which is +This is a special case of “Functionaries Do Not Perform Verification”, which is described below. Further, after conversations with in-toto adopters, we realized that while RC files are widely used by other systems, in-toto users typically set configurations using API parameters or CLI arguments. As such, we removed @@ -75,7 +82,8 @@ support for RC files from the reference implementation. ### Layout Replay (low severity) -Advisory: [GHSA-73jv-h86v-c2vh](https://github.com/in-toto/docs/security/advisories/GHSA-73jv-h86v-c2vh) +Advisory: +[GHSA-73jv-h86v-c2vh](https://github.com/in-toto/docs/security/advisories/GHSA-73jv-h86v-c2vh) It is possible for an attacker to replay an older, since-replaced layout that has not yet expired. @@ -90,7 +98,8 @@ conjunction with in-toto to defend against layout replay attacks. ### Link File Reuse (medium severity) -Advisory: [GHSA-6q78-j78h-pqm2](https://github.com/in-toto/docs/security/advisories/GHSA-6q78-j78h-pqm2) +Advisory: +[GHSA-6q78-j78h-pqm2](https://github.com/in-toto/docs/security/advisories/GHSA-6q78-j78h-pqm2) Link metadata files are not inherently tied to a layout, which might allow an attacker to replay steps by replacing link files with ones from an earlier @@ -104,7 +113,8 @@ ITE-3 are designed to prevent unallowed metadata reuse. ### Functionaries Do Not Perform Verification (high severity) -Advisory: [GHSA-p86f-xmg6-9q4x](https://github.com/in-toto/docs/security/advisories/GHSA-p86f-xmg6-9q4x) +Advisory: +[GHSA-p86f-xmg6-9q4x](https://github.com/in-toto/docs/security/advisories/GHSA-p86f-xmg6-9q4x) An attacker, who controls the product in transit, may compromise the whole supply chain and stay undetected, by modifying only the product in transit, and @@ -121,7 +131,8 @@ we have added, can be found in the advisory. ### Several PGP Issues (varying severity) -Advisory: [GHSA-jjgp-whrp-gq8m](https://github.com/in-toto/in-toto/security/advisories/GHSA-jjgp-whrp-gq8m) +Advisory: +[GHSA-jjgp-whrp-gq8m](https://github.com/in-toto/in-toto/security/advisories/GHSA-jjgp-whrp-gq8m) PGP keys in the reference implementation are not validated when verifying metadata signatures. More specifically, in-toto does not check if the validity diff --git a/content/en/blog/_index.md b/content/en/blog/_index.md new file mode 100644 index 0000000..31d2911 --- /dev/null +++ b/content/en/blog/_index.md @@ -0,0 +1,5 @@ +--- +title: Blog +menu: { main: { weight: 50 } } +outputs: [HTML, RSS] +--- diff --git a/content/en/community/_index.md b/content/en/community/_index.md new file mode 100644 index 0000000..3feeca4 --- /dev/null +++ b/content/en/community/_index.md @@ -0,0 +1,8 @@ +--- +title: Community +menu: { main: { weight: 40 } } +cascade: + type: docs +--- + +{{% community-lists %}} diff --git a/content/en/docs/_index.md b/content/en/docs/_index.md new file mode 100644 index 0000000..c8971d8 --- /dev/null +++ b/content/en/docs/_index.md @@ -0,0 +1,31 @@ +--- +title: Documentation +linkTitle: Docs +menu: { main: { weight: 10 } } +--- + +Welcome to the in-toto documentation. This resource hub will guide you through +understanding and implementing in-toto to secure your software supply chains. + +## in-toto Technical Specification + +Dive into the [in-toto Technical Specification](/docs/specs) for detailed +insights into the framework's design principles and architecture. This section +lays the foundation for understanding how in-toto ensures software integrity. + +## Basic Demo + +Explore the [Basic Demo](https://github.com/in-toto/demo) to see in-toto in +action. This step-by-step guide demonstrates practical applications of the +framework, helping you connect theoretical concepts with real-world scenarios. + +## Python Reference Implementation + +Check out the +[Python Reference Implementation Docs](https://in-toto.readthedocs.io/) for +comprehensive documentation on using in-toto with Python. This section includes +installation instructions, API references, and usage examples to facilitate +seamless integration into your Python projects. + +Together, these sections provide a structured and user-friendly guide to +mastering in-toto. diff --git a/content/en/docs/demo.md b/content/en/docs/demo.md new file mode 100644 index 0000000..837329b --- /dev/null +++ b/content/en/docs/demo.md @@ -0,0 +1,21 @@ +--- +title: in-toto demo +linkTitle: Demo +weight: 8 +--- + +In this demo, we will use in-toto to secure a software supply chain with a very +simple workflow. Bob is a developer for a project, Carl packages the software, +and Alice oversees the project. Using in-toto's terminology: + +- **Alice** is the project owner - she creates and signs the software supply + chain layout with her private key. +- **Bob** and **Carl** are project functionaries - they carry out the steps of + the software supply chain as defined in the layout. + +For the sake of demonstrating in-toto, you will perform all parts of the +software supply chain. This means you will execute commands on behalf of Alice, +Bob, and Carl, as well as the client who verifies the final product. + +For further steps, please refer to the +[demo](https://github.com/in-toto/demo/blob/main/README.md). diff --git a/content/en/docs/faq.md b/content/en/docs/faq.md new file mode 100644 index 0000000..07b8e57 --- /dev/null +++ b/content/en/docs/faq.md @@ -0,0 +1,27 @@ +--- +title: Frequently asked questions +linkTitle: FAQ +weight: 10 +--- + +### Why the name “in-toto”? + +in-toto is Latin for "as a whole." We chose the name because our objective with +in-toto is to build a system to protect the whole software supply chain. + +### What is the difference between in-toto and The Update Framework? + +[The Update Framework](https://theupdateframework.io) (TUF) provides a framework +that can be used to secure update systems, i.e. the "last mile," whereas in-toto +lets you verify the whole software supply chain. TUF and in-toto can play +together very well, as you can use TUF to deliver updates and their +corresponding in-toto metadata. + +### Is Python 3 supported? + +Yes, Python 3 is supported with in-toto. + +### Is there a timeline for the support of Python 2.7? + +We have released the final version of in-toto, v1.0.1, that supports Python 2. +Our next release, at the end of April 2021, will drop support for Python 2. diff --git a/content/en/docs/getting-started/_index.md b/content/en/docs/getting-started/_index.md new file mode 100644 index 0000000..2c791e1 --- /dev/null +++ b/content/en/docs/getting-started/_index.md @@ -0,0 +1,220 @@ +--- +title: Getting Started +weight: 2 +--- + +## Introduction + +in-toto provides a framework to protect the integrity of the software supply +chain. It does so by verifying that each task in the chain is carried out as +planned, by authorized personnel only, and that the product is not tampered with +in transit. + +in-toto requires a **project owner** to create a **layout**. A layout lists the +sequence of **steps** of the software supply chain, and the **functionaries** +authorized to perform these steps. When a functionary performs a step in-toto +gathers information about the used command and the related files and stores it +in a **link** metadata file. As a consequence link files provide the required +evidence to establish a continuous chain that can be validated against the steps +defined in the layout. + +The layout, signed by the project owners, together with the links, signed by the +designated functionaries, are released as part of the final product, and can be +validated manually or via automated tooling in, e.g. a package manager. + +## Getting Started + +### Installation + +in-toto is available on [PyPI](https://pypi.org/project/in-toto/) and can be +installed via [`pip`](https://pypi.org/project/pip/). See +[in-toto.readthedocs.io](https://in-toto.readthedocs.io/en/latest/installing.html) +to learn about system dependencies and installation alternatives and +recommendations. + +```shell +pip install in-toto +``` + +### Create layout, run supply chain steps and verify final product + +#### Layout + +The in-toto software supply chain layout consists of the following parts: + +- **expiration date** +- **readme** (an optional description of the supply chain) +- **functionary keys** (public keys, used to verify link metadata signatures) +- **signatures** (one or more layout signatures created with the project owner + key(s)) +- **software supply chain steps** correspond to steps carried out by a + functionary as part of the software supply chain. The steps defined in the + layout list the functionaries who are authorized to carry out the step (by key + id). Steps require a unique name to associate them (upon verification) with + link metadata that is created when a functionary carries out the step using + the `in-toto` tools. Additionally, steps must have material and product rules + which define the files a step is supposed to operate on. Material and product + rules are described in the section below. +- **inspections** define commands to be run during the verification process and + can also list material and product rules. + +Take a look at the +[demo layout creation example](https://in-toto.readthedocs.io/en/latest/layout-creation-example.html) +for further information on how to create an in-toto layout. + +#### Artifact Rules + +A software supply chain usually operates on a set of files, such as source code, +executables, packages, or the like. in-toto calls these files artifacts. A +material is an artifact that will be used when a step or inspection is carried +out. Likewise, a product is an artifact that results from carrying out a step. + +The in-toto layout provides a simple rule language to authorize or enforce the +artifacts of a step and to chain them together. This adds the following +guarantees for any given step or inspection: + +- Only artifacts **authorized** by the project owner are created, modified or + deleted, +- each defined creation, modification or deletion is **enforced**, and also +- restricted to the scope of its definition, which **chains** subsequent steps + and inspections together. + +Note that it is up to you to properly secure your supply chain, by authorizing, +enforcing and chaining materials and products using any and usually multiple of +the following rules: + +- `CREATE
| Datadog uses in-toto to secure its agent integrations as they move through the company's CI/CD system. |
+| OpenVEX | 
| OpenVEX documents are designed to be self-sustaining, but the specification is designed to benefit from the in-toto attestation format completing VEX statements with data outside of the OpenVEX predicate. |
+| SLSA | 
| Supply chain Levels for Software Artifacts, or SLSA, is a framework that provides a series of requirements and controls. |
+| SolarWinds | 
| SolarWinds is an American company that provides information technology services and software to other companies and government agencies. |
diff --git a/content/en/ecosystem/integreations/img/Gitlab_logo.png b/content/en/ecosystem/integreations/img/Gitlab_logo.png
new file mode 100644
index 0000000..a103b4e
Binary files /dev/null and b/content/en/ecosystem/integreations/img/Gitlab_logo.png differ
diff --git a/content/en/ecosystem/integreations/img/Grafeas_logo.png b/content/en/ecosystem/integreations/img/Grafeas_logo.png
new file mode 100644
index 0000000..a617daa
Binary files /dev/null and b/content/en/ecosystem/integreations/img/Grafeas_logo.png differ
diff --git a/content/en/ecosystem/integreations/img/Guac_logo.png b/content/en/ecosystem/integreations/img/Guac_logo.png
new file mode 100644
index 0000000..b2644ae
Binary files /dev/null and b/content/en/ecosystem/integreations/img/Guac_logo.png differ
diff --git a/content/en/ecosystem/integreations/img/Jenkins_logo.png b/content/en/ecosystem/integreations/img/Jenkins_logo.png
new file mode 100644
index 0000000..c2ab909
Binary files /dev/null and b/content/en/ecosystem/integreations/img/Jenkins_logo.png differ
diff --git a/content/en/ecosystem/integreations/img/Sistore_logo.png b/content/en/ecosystem/integreations/img/Sistore_logo.png
new file mode 100644
index 0000000..f7e733b
Binary files /dev/null and b/content/en/ecosystem/integreations/img/Sistore_logo.png differ
diff --git a/content/en/ecosystem/integreations/img/Tekton_logo.png b/content/en/ecosystem/integreations/img/Tekton_logo.png
new file mode 100644
index 0000000..e846132
Binary files /dev/null and b/content/en/ecosystem/integreations/img/Tekton_logo.png differ
diff --git a/content/en/ecosystem/integreations/img/Testifysec_logo.svg b/content/en/ecosystem/integreations/img/Testifysec_logo.svg
new file mode 100644
index 0000000..48f8862
--- /dev/null
+++ b/content/en/ecosystem/integreations/img/Testifysec_logo.svg
@@ -0,0 +1,61 @@
+
diff --git a/content/en/ecosystem/integreations/index.md b/content/en/ecosystem/integreations/index.md
new file mode 100644
index 0000000..4c48e5f
--- /dev/null
+++ b/content/en/ecosystem/integreations/index.md
@@ -0,0 +1,21 @@
+---
+title: Integrations
+description: Projects and products with in-toto integrations.
+---
+
+This section lists software systems, services, or platforms that integrate with
+the project to provide additional functionality, interoperability, or
+compatibility. These integrations enhance the project's capabilities and extend
+its usefulness across various ecosystems.
+
+| Organization | | Description |
+| ------------- | ---------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| GitLab | 
| GitLab is a popular Git server that also provides CI/CD integrations. |
+| Grafeas | 
| Grafeas is an open source metadata API that is used to store metadata relevant to software supply chains. Grafeas includes support for in-toto link metadata. |
+| GUAC | 
| GUAC has the ability to ingest and parse SLSA and other in-toto ITE6 attestations (either wrapped in DSSE or standalone). |
+| Hoppr | | Hoppr leverages the in-toto python package to generate in-toto layout files based on a hoppr transfer configuration. |
+| Jenkins | 
| The in-toto team maintains a plugin for Jenkins that can be used to generate in-toto metadata pertaining to a particular build or "job". |
+| rebuilderd | | Rebuilderd is a build system project part of Reproducible Builds. When the result of a rebuild is positive, i.e., the build process is found to be reproducible, rebuilderd generates an in-toto link recording this result. |
+| Sigstore | 
| In-toto and Sigstore are complementary in their efforts, and Sigstore integrates in-toto in a number of ways. Sigstore's keyless signing can be used to sign in-toto metadata, as demonstrated by Cosign's SLSA Provenance generation. |
+| Tekton Chains | 
| Tekton Chains is a component for Tekton that adds software supply chain security. Chains observes all "TaskRuns" or jobs that are executed, and generates an in-toto attestation. |
+| TestifySec | 
| TestifySec is a software supply chain security company that has created two open source projects that leverage in-toto. Witness and Archivista. |
diff --git a/content/en/featured-background.jpg b/content/en/featured-background.jpg
new file mode 100644
index 0000000..b04f1f6
Binary files /dev/null and b/content/en/featured-background.jpg differ
diff --git a/content/en/search.md b/content/en/search.md
new file mode 100644
index 0000000..394feea
--- /dev/null
+++ b/content/en/search.md
@@ -0,0 +1,4 @@
+---
+title: Search Results
+layout: search
+---
diff --git a/content/examples/debian.md b/content/examples/debian.md
deleted file mode 100644
index 2a8b5f6..0000000
--- a/content/examples/debian.md
+++ /dev/null
@@ -1,434 +0,0 @@
----
-title: debian example metadata
----
-
-## Layout
-
-### debian/root.layout
-``` json
-{
- "signed": {
- "_type": "layout",
- "readme": "",
- "expires": "2017-09-02T12:57:02Z",
- "steps": [
- {
- "_type": "step",
- "name": "fetch",
- "expected_command": [
- "dget",
- "http://cdn.debian.net/debian/pool/main/g/grep/grep_2.12-2.dsc"
- ],
- "pubkeys": [
- "12c55e46654c682d3ffd3b63492adf422e6812eb1ac41574d083b9e770d1e4c2"
- ],
- "threshold": 1,
- "expected_materials": [
- [
- "DISALLOW",
- "*"
- ]
- ],
- "expected_products": [
- [
- "ALLOW",
- "*"
- ]
- ]
- },
- {
- "_type": "step",
- "name": "extract",
- "expected_command": [
- "dpkg-source",
- "-x",
- "grep_2.12-2.dsc"
- ],
- "pubkeys": [
- "12c55e46654c682d3ffd3b63492adf422e6812eb1ac41574d083b9e770d1e4c2"
- ],
- "threshold": 1,
- "expected_materials": [
- [
- "MATCH",
- "*",
- "WITH",
- "PRODUCTS",
- "FROM",
- "fetch"
- ]
- ],
- "expected_products": [
- [
- "ALLOW",
- "*"
- ]
- ]
- },
- {
- "_type": "step",
- "name": "modify",
- "expected_command": [],
- "pubkeys": [
- "12c55e46654c682d3ffd3b63492adf422e6812eb1ac41574d083b9e770d1e4c2"
- ],
- "threshold": 1,
- "expected_materials": [
- [
- "MATCH",
- "*",
- "WITH",
- "PRODUCTS",
- "FROM",
- "extract"
- ]
- ],
- "expected_products": [
- [
- "ALLOW",
- "*"
- ]
- ]
- },
- {
- "_type": "step",
- "name": "build",
- "expected_command": [
- "dpkg-buildpackage",
- "-us",
- "-uc"
- ],
- "pubkeys": [
- "12c55e46654c682d3ffd3b63492adf422e6812eb1ac41574d083b9e770d1e4c2"
- ],
- "threshold": 1,
- "expected_materials": [
- [
- "MATCH",
- "*",
- "WITH",
- "PRODUCTS",
- "FROM",
- "modify"
- ]
- ],
- "expected_products": [
- [
- "ALLOW",
- "*"
- ]
- ]
- }
- ],
- "inspect": [],
- "keys": {
- "12c55e46654c682d3ffd3b63492adf422e6812eb1ac41574d083b9e770d1e4c2": {
- "keyid": "12c55e46654c682d3ffd3b63492adf422e6812eb1ac41574d083b9e770d1e4c2",
- "keytype": "rsa",
- "keyval": {
- "private": "",
- "public": "-----BEGIN PUBLIC KEY-----\nMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKC..."
- }
- }
- }
- },
- "signatures": [
- {
- "keyid": "12c55e46654c682d3ffd3b63492adf422e6812eb1ac41574d083b9e770d1e4c2",
- "method": "RSASSA-PSS",
- "sig": "9c3a5609e79ea68f9d7aa4b72e5ab1f00b7773f06912b789add45da026f46621b9e..."
- }
- ]
-}
-
-```
-
-
-## Links
-
-### debian/fetch.12c55e46.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "fetch",
- "command": [
- "dget",
- "http://cdn.debian.net/debian/pool/main/g/grep/grep_2.12-2.dsc"
- ],
- "materials": {},
- "products": {
- "/home/lukas/demo/grep_2.12-2.debian.tar.bz2": {
- "sha256": "37887d8aecec66e75365abd8c41be94f75e7a3acf1d6b27fc121584f47281525"
- },
- "/home/lukas/demo/grep_2.12-2.dsc": {
- "sha256": "a6a63fd21da40d11ce6ae2bc6f633bd27cd206c2348b2ef306e1b68120f7e58e"
- },
- "/home/lukas/demo/grep_2.12.orig.tar.bz2": {
- "sha256": "0119987171cd60b87c89557524fc6636bdad770dae71917adcaef6abffb1be67"
- }
- },
- "byproducts": {
- "return_value": 1,
- "stdout": "dget: retrieving http://cdn.debian.net/debian/pool/main/g/grep/grep...",
- "stderr": "--2017-08-08 11:05:06-- http://cdn.debian.net/debian/pool/main/g/g..."
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "12c55e46654c682d3ffd3b63492adf422e6812eb1ac41574d083b9e770d1e4c2",
- "method": "RSASSA-PSS",
- "sig": "a0d3237a59a96343b2e2caee2bf0e27a249a01f796c3fec53f184fc2720b44dd7b2..."
- }
- ]
-}
-
-```
-
-
-### debian/extract.12c55e46.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "extract",
- "command": [
- "dpkg-source",
- "-x",
- "grep_2.12-2.dsc"
- ],
- "materials": {
- "/home/lukas/demo/grep_2.12-2.debian.tar.bz2": {
- "sha256": "37887d8aecec66e75365abd8c41be94f75e7a3acf1d6b27fc121584f47281525"
- },
- "/home/lukas/demo/grep_2.12-2.dsc": {
- "sha256": "a6a63fd21da40d11ce6ae2bc6f633bd27cd206c2348b2ef306e1b68120f7e58e"
- },
- "/home/lukas/demo/grep_2.12.orig.tar.bz2": {
- "sha256": "0119987171cd60b87c89557524fc6636bdad770dae71917adcaef6abffb1be67"
- }
- },
- "products": {
- "/home/lukas/demo/grep-2.12/.pc/.quilt_patches": {
- "sha256": "0623de532bc23399e87e6c1914e8e90e999efbfd26b6b956666a493893739f0d"
- },
- "/home/lukas/demo/grep-2.12/.pc/.quilt_series": {
- "sha256": "9afbb183d1b683d2770aecb9b379093804ccc56027f07ecf7fc252d5b93a8df2"
- },
- "/home/lukas/demo/grep-2.12/.pc/.version": {
- "sha256": "53c234e5e8472b6ac51c1ae1cab3fe06fad053beb8ebfd8977b010655bfdd3c3"
- },
- "/home/lukas/demo/grep-2.12/.pc/02-man_rgrep.patch/doc/grep.in.1": {
- "sha256": "0c933cbdacb739761f7cf9be1d9c0543b8a5cb0c1cf4031fc7add8e81146c1a6"
- },
- "/home/lukas/demo/grep-2.12/.pc/03-397262-dlopen-pcre.patch/configure": {
- "sha256": "fda1f6c62f081999b74177f560e14db0b0b2f93cd632ed4a02f6ac2582fc27bf"
- },
- "/home/lukas/demo/grep-2.12/.pc/03-397262-dlopen-pcre.patch/src/pcresearch.c": {
- "sha256": "08e24565e42cf5e2aeff2ca65cc4e3a8de5fa65260ea1a2d1ae872b45c3b6a25"
- },
- "/home/lukas/demo/grep-2.12/.pc/04-446854-grep.1.patch/doc/grep.in.1": {
- "sha256": "90b74e6c5542b0db506c372f77c45ceab8d7289432cfe37bce11d611a4827a4d"
- },
- "/home/lukas/demo/grep-2.12/.pc/70-man_apostrophe.patch/doc/grep.in.1": {
- "sha256": "eee01bf4de92df307b7f1b6fa740e1c0e0c8c28d6a12b6939ddec0708699da25"
- },
- "/home/lukas/demo/grep-2.12/.pc/80-587930-man-ere-reference.patch/doc/grep.in.1": {
- "sha256": "30378876bf1c1a13449c993fb7a6406089f7f77a34f96fed5c6c742e75a395b6"
- },
- "...": "..."
- },
- "byproducts": {
- "return_value": 0,
- "stdout": "dpkg-source: info: extracting grep in grep-2.12\ndpkg-source: info: ...",
- "stderr": "gpgv: Signature made Sun 13 May 2012 08:23:12 AM EDT using DSA key ..."
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "12c55e46654c682d3ffd3b63492adf422e6812eb1ac41574d083b9e770d1e4c2",
- "method": "RSASSA-PSS",
- "sig": "9b89cf0a74a1d53359460982cdc3dcbdef2b291a284b977fadb839501d7324fe581..."
- }
- ]
-}
-
-```
-
-
-### debian/modify.12c55e46.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "modify",
- "command": [],
- "materials": {
- "/home/lukas/demo/grep-2.12/.pc/.quilt_patches": {
- "sha256": "0623de532bc23399e87e6c1914e8e90e999efbfd26b6b956666a493893739f0d"
- },
- "/home/lukas/demo/grep-2.12/.pc/.quilt_series": {
- "sha256": "9afbb183d1b683d2770aecb9b379093804ccc56027f07ecf7fc252d5b93a8df2"
- },
- "/home/lukas/demo/grep-2.12/.pc/.version": {
- "sha256": "53c234e5e8472b6ac51c1ae1cab3fe06fad053beb8ebfd8977b010655bfdd3c3"
- },
- "/home/lukas/demo/grep-2.12/.pc/02-man_rgrep.patch/doc/grep.in.1": {
- "sha256": "0c933cbdacb739761f7cf9be1d9c0543b8a5cb0c1cf4031fc7add8e81146c1a6"
- },
- "/home/lukas/demo/grep-2.12/.pc/03-397262-dlopen-pcre.patch/configure": {
- "sha256": "fda1f6c62f081999b74177f560e14db0b0b2f93cd632ed4a02f6ac2582fc27bf"
- },
- "/home/lukas/demo/grep-2.12/.pc/03-397262-dlopen-pcre.patch/src/pcresearch.c": {
- "sha256": "08e24565e42cf5e2aeff2ca65cc4e3a8de5fa65260ea1a2d1ae872b45c3b6a25"
- },
- "/home/lukas/demo/grep-2.12/.pc/04-446854-grep.1.patch/doc/grep.in.1": {
- "sha256": "90b74e6c5542b0db506c372f77c45ceab8d7289432cfe37bce11d611a4827a4d"
- },
- "/home/lukas/demo/grep-2.12/.pc/70-man_apostrophe.patch/doc/grep.in.1": {
- "sha256": "eee01bf4de92df307b7f1b6fa740e1c0e0c8c28d6a12b6939ddec0708699da25"
- },
- "/home/lukas/demo/grep-2.12/.pc/80-587930-man-ere-reference.patch/doc/grep.in.1": {
- "sha256": "30378876bf1c1a13449c993fb7a6406089f7f77a34f96fed5c6c742e75a395b6"
- },
- "...": "..."
- },
- "products": {
- "/home/lukas/demo/grep-2.12/.pc/.quilt_patches": {
- "sha256": "0623de532bc23399e87e6c1914e8e90e999efbfd26b6b956666a493893739f0d"
- },
- "/home/lukas/demo/grep-2.12/.pc/.quilt_series": {
- "sha256": "9afbb183d1b683d2770aecb9b379093804ccc56027f07ecf7fc252d5b93a8df2"
- },
- "/home/lukas/demo/grep-2.12/.pc/.version": {
- "sha256": "53c234e5e8472b6ac51c1ae1cab3fe06fad053beb8ebfd8977b010655bfdd3c3"
- },
- "/home/lukas/demo/grep-2.12/.pc/02-man_rgrep.patch/doc/grep.in.1": {
- "sha256": "0c933cbdacb739761f7cf9be1d9c0543b8a5cb0c1cf4031fc7add8e81146c1a6"
- },
- "/home/lukas/demo/grep-2.12/.pc/03-397262-dlopen-pcre.patch/configure": {
- "sha256": "fda1f6c62f081999b74177f560e14db0b0b2f93cd632ed4a02f6ac2582fc27bf"
- },
- "/home/lukas/demo/grep-2.12/.pc/03-397262-dlopen-pcre.patch/src/pcresearch.c": {
- "sha256": "08e24565e42cf5e2aeff2ca65cc4e3a8de5fa65260ea1a2d1ae872b45c3b6a25"
- },
- "/home/lukas/demo/grep-2.12/.pc/04-446854-grep.1.patch/doc/grep.in.1": {
- "sha256": "90b74e6c5542b0db506c372f77c45ceab8d7289432cfe37bce11d611a4827a4d"
- },
- "/home/lukas/demo/grep-2.12/.pc/70-man_apostrophe.patch/doc/grep.in.1": {
- "sha256": "eee01bf4de92df307b7f1b6fa740e1c0e0c8c28d6a12b6939ddec0708699da25"
- },
- "/home/lukas/demo/grep-2.12/.pc/80-587930-man-ere-reference.patch/doc/grep.in.1": {
- "sha256": "30378876bf1c1a13449c993fb7a6406089f7f77a34f96fed5c6c742e75a395b6"
- },
- "...": "..."
- },
- "byproducts": {
- "return_value": null
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "12c55e46654c682d3ffd3b63492adf422e6812eb1ac41574d083b9e770d1e4c2",
- "method": "RSASSA-PSS",
- "sig": "6c922765260c71bbe0eef0267c2ad6f226eeec43ef45b5dcba6314f52adba655265..."
- }
- ]
-}
-
-```
-
-
-### debian/build.12c55e46.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "build",
- "command": [
- "dpkg-buildpackage",
- "-us",
- "-uc"
- ],
- "materials": {
- "/home/lukas/demo/grep-2.12/.pc/.quilt_patches": {
- "sha256": "0623de532bc23399e87e6c1914e8e90e999efbfd26b6b956666a493893739f0d"
- },
- "/home/lukas/demo/grep-2.12/.pc/.quilt_series": {
- "sha256": "9afbb183d1b683d2770aecb9b379093804ccc56027f07ecf7fc252d5b93a8df2"
- },
- "/home/lukas/demo/grep-2.12/.pc/.version": {
- "sha256": "53c234e5e8472b6ac51c1ae1cab3fe06fad053beb8ebfd8977b010655bfdd3c3"
- },
- "/home/lukas/demo/grep-2.12/.pc/02-man_rgrep.patch/doc/grep.in.1": {
- "sha256": "0c933cbdacb739761f7cf9be1d9c0543b8a5cb0c1cf4031fc7add8e81146c1a6"
- },
- "/home/lukas/demo/grep-2.12/.pc/03-397262-dlopen-pcre.patch/configure": {
- "sha256": "fda1f6c62f081999b74177f560e14db0b0b2f93cd632ed4a02f6ac2582fc27bf"
- },
- "/home/lukas/demo/grep-2.12/.pc/03-397262-dlopen-pcre.patch/src/pcresearch.c": {
- "sha256": "08e24565e42cf5e2aeff2ca65cc4e3a8de5fa65260ea1a2d1ae872b45c3b6a25"
- },
- "/home/lukas/demo/grep-2.12/.pc/04-446854-grep.1.patch/doc/grep.in.1": {
- "sha256": "90b74e6c5542b0db506c372f77c45ceab8d7289432cfe37bce11d611a4827a4d"
- },
- "/home/lukas/demo/grep-2.12/.pc/70-man_apostrophe.patch/doc/grep.in.1": {
- "sha256": "eee01bf4de92df307b7f1b6fa740e1c0e0c8c28d6a12b6939ddec0708699da25"
- },
- "/home/lukas/demo/grep-2.12/.pc/80-587930-man-ere-reference.patch/doc/grep.in.1": {
- "sha256": "30378876bf1c1a13449c993fb7a6406089f7f77a34f96fed5c6c742e75a395b6"
- },
- "...": "..."
- },
- "products": {
- "/home/lukas/demo/grep-2.12/.pc/.quilt_patches": {
- "sha256": "0623de532bc23399e87e6c1914e8e90e999efbfd26b6b956666a493893739f0d"
- },
- "/home/lukas/demo/grep-2.12/.pc/.quilt_series": {
- "sha256": "9afbb183d1b683d2770aecb9b379093804ccc56027f07ecf7fc252d5b93a8df2"
- },
- "/home/lukas/demo/grep-2.12/.pc/.version": {
- "sha256": "53c234e5e8472b6ac51c1ae1cab3fe06fad053beb8ebfd8977b010655bfdd3c3"
- },
- "/home/lukas/demo/grep-2.12/.pc/02-man_rgrep.patch/doc/grep.in.1": {
- "sha256": "0c933cbdacb739761f7cf9be1d9c0543b8a5cb0c1cf4031fc7add8e81146c1a6"
- },
- "/home/lukas/demo/grep-2.12/.pc/03-397262-dlopen-pcre.patch/configure": {
- "sha256": "fda1f6c62f081999b74177f560e14db0b0b2f93cd632ed4a02f6ac2582fc27bf"
- },
- "/home/lukas/demo/grep-2.12/.pc/03-397262-dlopen-pcre.patch/src/pcresearch.c": {
- "sha256": "08e24565e42cf5e2aeff2ca65cc4e3a8de5fa65260ea1a2d1ae872b45c3b6a25"
- },
- "/home/lukas/demo/grep-2.12/.pc/04-446854-grep.1.patch/doc/grep.in.1": {
- "sha256": "90b74e6c5542b0db506c372f77c45ceab8d7289432cfe37bce11d611a4827a4d"
- },
- "/home/lukas/demo/grep-2.12/.pc/70-man_apostrophe.patch/doc/grep.in.1": {
- "sha256": "eee01bf4de92df307b7f1b6fa740e1c0e0c8c28d6a12b6939ddec0708699da25"
- },
- "/home/lukas/demo/grep-2.12/.pc/80-587930-man-ere-reference.patch/doc/grep.in.1": {
- "sha256": "30378876bf1c1a13449c993fb7a6406089f7f77a34f96fed5c6c742e75a395b6"
- },
- "...": "..."
- },
- "byproducts": {
- "return_value": 0,
- "stdout": "dpkg-buildpackage: source package grep\ndpkg-buildpackage: source ve...",
- "stderr": " dpkg-source --before-build grep-2.12\n fakeroot debian/rules clean\n..."
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "12c55e46654c682d3ffd3b63492adf422e6812eb1ac41574d083b9e770d1e4c2",
- "method": "RSASSA-PSS",
- "sig": "3877a06dee3f6e140e20d5100964adb38c1c63dd89803087204d561c0adbfed17c2..."
- }
- ]
-}
-
-```
-
-
diff --git a/content/examples/polypasswordhasher.md b/content/examples/polypasswordhasher.md
deleted file mode 100644
index 5dcabd0..0000000
--- a/content/examples/polypasswordhasher.md
+++ /dev/null
@@ -1,510 +0,0 @@
----
-title: polypasswordhasher example metadata
----
-
-## Layout
-
-### polypasswordhasher/root.layout
-``` json
-{
- "signed": {
- "_type": "layout",
- "readme": "",
- "expires": "2016-12-10T13:09:03Z",
- "steps": [
- {
- "_type": "step",
- "name": "tag-release",
- "expected_command": [
- "git",
- "tag"
- ],
- "pubkeys": [
- "48c92a75036a01a864a3a5546fddb601733e135692718afd3f896935474ffb7f"
- ],
- "threshold": 1,
- "expected_materials": [],
- "expected_products": [
- [
- "CREATE",
- "polypasswordhasher/*.py"
- ],
- [
- "CREATE",
- "setup.py"
- ],
- [
- "CREATE",
- "test/test*.py"
- ],
- [
- "CREATE",
- "test/__init__.py"
- ],
- [
- "CREATE",
- "test/runtests.py"
- ],
- [
- "CREATE",
- "src/fastpolymath.c"
- ],
- [
- "CREATE",
- "include/fastpolymath.h"
- ]
- ]
- },
- {
- "_type": "step",
- "name": "build-sdist",
- "expected_command": [
- "python",
- "setup.py",
- "sdist"
- ],
- "pubkeys": [
- "48c92a75036a01a864a3a5546fddb601733e135692718afd3f896935474ffb7f"
- ],
- "threshold": 1,
- "expected_materials": [
- [
- "MATCH",
- "polypasswordhasher/*.py",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "src/fastpolymath.c",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "include/fastpolymath.h",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "setup.py",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "test/test*.py",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "test/__init__.py",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "test/runtests.py",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ]
- ],
- "expected_products": [
- [
- "CREATE",
- "dist/PolyPasswordHasher-0.2a0.tar.gz"
- ]
- ]
- },
- {
- "_type": "step",
- "name": "test",
- "expected_command": [
- "python",
- "setup.py",
- "test"
- ],
- "pubkeys": [
- "48c92a75036a01a864a3a5546fddb601733e135692718afd3f896935474ffb7f"
- ],
- "threshold": 1,
- "expected_materials": [
- [
- "MATCH",
- "polypasswordhasher/*.py",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "src/fastpolymath.c",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "include/fastpolymath.h",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "test/test*.py",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "test/__init__*.py",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "test/runtests.py",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "setup.py",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ]
- ],
- "expected_products": []
- }
- ],
- "inspect": [
- {
- "_type": "inspection",
- "name": "untar",
- "run": [
- "tar",
- "xvf",
- "PolyPasswordHasher-0.2a0.tar.gz"
- ],
- "expected_materials": [
- [
- "MATCH",
- "PolyPasswordHasher-0.2a0.tar.gz",
- "WITH",
- "PRODUCTS",
- "IN",
- "dist",
- "FROM",
- "build-sdist"
- ],
- [
- "CREATE",
- "*"
- ]
- ],
- "expected_products": [
- [
- "MATCH",
- "*.py",
- "IN",
- "PolyPasswordHasher-0.2a0/polypasswordhasher",
- "WITH",
- "PRODUCTS",
- "IN",
- "polypasswordhasher",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "fastpolymath.c",
- "IN",
- "PolyPasswordHasher-0.2a0/src",
- "WITH",
- "PRODUCTS",
- "IN",
- "src",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "fastpolymath.h",
- "IN",
- "PolyPasswordHasher-0.2a0/include",
- "WITH",
- "PRODUCTS",
- "IN",
- "include",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "test*.py",
- "IN",
- "PolyPasswordHasher-0.2a0/test",
- "WITH",
- "PRODUCTS",
- "IN",
- "test",
- "FROM",
- "tag-release"
- ],
- [
- "MATCH",
- "setup.py",
- "IN",
- "PolyPasswordHasher-0.2a0",
- "WITH",
- "PRODUCTS",
- "FROM",
- "tag-release"
- ],
- [
- "CREATE",
- "*"
- ]
- ]
- }
- ],
- "keys": {
- "48c92a75036a01a864a3a5546fddb601733e135692718afd3f896935474ffb7f": {
- "keyid": "48c92a75036a01a864a3a5546fddb601733e135692718afd3f896935474ffb7f",
- "keytype": "rsa",
- "keyval": {
- "private": "",
- "public": "-----BEGIN PUBLIC KEY-----\nMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKC..."
- }
- }
- }
- },
- "signatures": [
- {
- "keyid": "ee4ca725ae71eb8be7971505a301f6c6b9d1b0b25ccbf18b1532e7171b9741b5",
- "method": "RSASSA-PSS",
- "sig": "90119b3329753ed3cf58e20071c99cf68e4eb56dcecd98bb409da4ff7ce3e1351d7..."
- }
- ]
-}
-
-```
-
-
-## Links
-
-### polypasswordhasher/tag-release.xxx.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "tag-release",
- "command": [
- "git",
- "tag",
- "v0.2a"
- ],
- "materials": {},
- "products": {
- "include/fastpolymath.h": {
- "sha256": "5be4945cdd1b958d3e8029c7b76333311485c2ccbc3e81ff64bfeb4e7a6fb5be"
- },
- "polypasswordhasher/__init__.py": {
- "sha256": "a7464a8ee4ba930a554ff6cd87b3aad5b6328eda4732c5af55eb154e50569ac2"
- },
- "polypasswordhasher/fastshamirsecret.py": {
- "sha256": "5b46ebba43be20ed20ea271b12c78e1b0fa8d53dbea8a53d48074977fe9b97cc"
- },
- "polypasswordhasher/polypasswordhasher.py": {
- "sha256": "79b33112d045e244e8748b4e630aab3256ab664fc0dcc2cdc3262e847e180e13"
- },
- "polypasswordhasher/shamirsecret.py": {
- "sha256": "cbc6d7dd59c65044300faadf1ce696469f8509622b35824643b1f35f5f8435fb"
- },
- "setup.py": {
- "sha256": "f407ce7094ea452a3df6bd9cb8190fcd7c6e79e73593387cc84c70b94592f3d0"
- },
- "src/fastpolymath.c": {
- "sha256": "79e0f36bf1e30460d0492e3f8bf1af4f40aabc54cddf47d68b6b28d124449a0f"
- },
- "test/__init__.py": {
- "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
- },
- "test/runtests.py": {
- "sha256": "fc65bc6775a866c687e9d7dc6d5c5f0bb4f9ef2ab658d34287a99e86fd13acf2"
- },
- "...": "..."
- },
- "byproducts": {
- "return_value": 0,
- "stdout": "",
- "stderr": ""
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "48c92a75036a01a864a3a5546fddb601733e135692718afd3f896935474ffb7f",
- "method": "RSASSA-PSS",
- "sig": "1edb549421d6ad62751b166f52b9868eded6680936b47a1d9907e904be7befce4b3..."
- }
- ]
-}
-
-```
-
-
-### polypasswordhasher/build-sdist.xxx.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "build-sdist",
- "command": [
- "python",
- "setup.py",
- "sdist"
- ],
- "materials": {
- "include/fastpolymath.h": {
- "sha256": "5be4945cdd1b958d3e8029c7b76333311485c2ccbc3e81ff64bfeb4e7a6fb5be"
- },
- "polypasswordhasher/__init__.py": {
- "sha256": "a7464a8ee4ba930a554ff6cd87b3aad5b6328eda4732c5af55eb154e50569ac2"
- },
- "polypasswordhasher/fastshamirsecret.py": {
- "sha256": "5b46ebba43be20ed20ea271b12c78e1b0fa8d53dbea8a53d48074977fe9b97cc"
- },
- "polypasswordhasher/polypasswordhasher.py": {
- "sha256": "79b33112d045e244e8748b4e630aab3256ab664fc0dcc2cdc3262e847e180e13"
- },
- "polypasswordhasher/shamirsecret.py": {
- "sha256": "cbc6d7dd59c65044300faadf1ce696469f8509622b35824643b1f35f5f8435fb"
- },
- "setup.py": {
- "sha256": "f407ce7094ea452a3df6bd9cb8190fcd7c6e79e73593387cc84c70b94592f3d0"
- },
- "src/fastpolymath.c": {
- "sha256": "79e0f36bf1e30460d0492e3f8bf1af4f40aabc54cddf47d68b6b28d124449a0f"
- },
- "test/__init__.py": {
- "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
- },
- "test/runtests.py": {
- "sha256": "fc65bc6775a866c687e9d7dc6d5c5f0bb4f9ef2ab658d34287a99e86fd13acf2"
- },
- "...": "..."
- },
- "products": {
- "dist/PolyPasswordHasher-0.2a0.tar.gz": {
- "sha256": "3620c4cab08f973431c048ec958dd76a9f6c2baa4cefdb85227856e2de100075"
- }
- },
- "byproducts": {
- "return_value": 0,
- "stdout": "",
- "stderr": ""
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "48c92a75036a01a864a3a5546fddb601733e135692718afd3f896935474ffb7f",
- "method": "RSASSA-PSS",
- "sig": "a73e47fd3a9c7775431313c14c6e5d27a0d1e0e2396c0fd8b41bf0b7232d4f75c8e..."
- }
- ]
-}
-
-```
-
-
-### polypasswordhasher/test.xxx.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "test",
- "command": [
- "python",
- "setup.py",
- "test"
- ],
- "materials": {
- "include/fastpolymath.h": {
- "sha256": "5be4945cdd1b958d3e8029c7b76333311485c2ccbc3e81ff64bfeb4e7a6fb5be"
- },
- "polypasswordhasher/__init__.py": {
- "sha256": "a7464a8ee4ba930a554ff6cd87b3aad5b6328eda4732c5af55eb154e50569ac2"
- },
- "polypasswordhasher/fastshamirsecret.py": {
- "sha256": "5b46ebba43be20ed20ea271b12c78e1b0fa8d53dbea8a53d48074977fe9b97cc"
- },
- "polypasswordhasher/polypasswordhasher.py": {
- "sha256": "79b33112d045e244e8748b4e630aab3256ab664fc0dcc2cdc3262e847e180e13"
- },
- "polypasswordhasher/shamirsecret.py": {
- "sha256": "cbc6d7dd59c65044300faadf1ce696469f8509622b35824643b1f35f5f8435fb"
- },
- "setup.py": {
- "sha256": "f407ce7094ea452a3df6bd9cb8190fcd7c6e79e73593387cc84c70b94592f3d0"
- },
- "src/fastpolymath.c": {
- "sha256": "79e0f36bf1e30460d0492e3f8bf1af4f40aabc54cddf47d68b6b28d124449a0f"
- },
- "test/__init__.py": {
- "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
- },
- "test/runtests.py": {
- "sha256": "fc65bc6775a866c687e9d7dc6d5c5f0bb4f9ef2ab658d34287a99e86fd13acf2"
- },
- "...": "..."
- },
- "products": {},
- "byproducts": {
- "return_value": 0,
- "stdout": "",
- "stderr": ""
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "48c92a75036a01a864a3a5546fddb601733e135692718afd3f896935474ffb7f",
- "method": "RSASSA-PSS",
- "sig": "80977ff9bc0265724ceb952ad99c2c35206e4ad4364d843e2b9d8e79057e70515c1..."
- }
- ]
-}
-
-```
-
-
diff --git a/content/examples/seattle.md b/content/examples/seattle.md
deleted file mode 100644
index 89834f0..0000000
--- a/content/examples/seattle.md
+++ /dev/null
@@ -1,593 +0,0 @@
----
-title: seattle example metadata
----
-
-## Layout
-
-### seattle/root.layout
-``` json
-{
- "signed": {
- "_type": "layout",
- "readme": "",
- "expires": "2017-01-23T13:27:57Z",
- "steps": [
- {
- "_type": "step",
- "name": "clone-dependencies",
- "expected_command": [
- "python",
- "initialize.py"
- ],
- "pubkeys": [
- "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5"
- ],
- "threshold": 1,
- "expected_materials": [],
- "expected_products": [
- [
- "CREATE",
- "installer-packaging/*"
- ]
- ]
- },
- {
- "_type": "step",
- "name": "build-runnable",
- "expected_command": [
- "python",
- "build.py"
- ],
- "pubkeys": [
- "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5"
- ],
- "threshold": 1,
- "expected_materials": [
- [
- "MATCH",
- "installer-packaging/*",
- "WITH",
- "PRODUCTS",
- "FROM",
- "clone-dependencies"
- ]
- ],
- "expected_products": [
- [
- "CREATE",
- "installer-packaging/*"
- ]
- ]
- },
- {
- "_type": "step",
- "name": "pre-build-file-edit",
- "expected_command": [
- "edit",
- "files",
- "manually"
- ],
- "pubkeys": [
- "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5"
- ],
- "threshold": 1,
- "expected_materials": [
- [
- "MATCH",
- "installer-packaging/RUNNABLE/*",
- "WITH",
- "PRODUCTS",
- "FROM",
- "build-runnable"
- ]
- ],
- "expected_products": [
- [
- "CREATE",
- "installer-packaging/*"
- ]
- ]
- },
- {
- "_type": "step",
- "name": "build-base-installers",
- "expected_command": [
- "python",
- "rebuild_base_installers.py",
- "0.1-in-toto-in-seattle"
- ],
- "pubkeys": [
- "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5"
- ],
- "threshold": 1,
- "expected_materials": [
- [
- "MATCH",
- "installer-packaging/*",
- "WITH",
- "PRODUCTS",
- "FROM",
- "pre-build-file-edit"
- ]
- ],
- "expected_products": [
- [
- "CREATE",
- "custominstallerbuilder/html/static/installers/base/*"
- ]
- ]
- },
- {
- "_type": "step",
- "name": "dummy-untar-linux-base-installer",
- "expected_command": [
- "tar",
- "xf",
- "custominstallerbuilder/html/static/installers/base/seattle_linux.tgz"
- ],
- "pubkeys": [
- "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5"
- ],
- "threshold": 1,
- "expected_materials": [
- [
- "MATCH",
- "custominstallerbuilder/html/static/installers/base/seattle_linux.tgz",
- "WITH",
- "PRODUCTS",
- "FROM",
- "build-base-installers"
- ]
- ],
- "expected_products": [
- [
- "CREATE",
- "*"
- ]
- ]
- }
- ],
- "inspect": [
- {
- "_type": "inspection",
- "name": "untar-linux-installer",
- "run": [
- "tar",
- "xf",
- "seattle_linux.tgz"
- ],
- "expected_materials": [
- [
- "CREATE",
- "*"
- ]
- ],
- "expected_products": [
- [
- "CREATE",
- "seattle/seattle_repy/vesselinfo"
- ],
- [
- "MATCH",
- "seattle/*",
- "WITH",
- "PRODUCTS",
- "FROM",
- "dummy-untar-linux-base-installer"
- ],
- [
- "CREATE",
- "*"
- ]
- ]
- }
- ],
- "keys": {
- "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5": {
- "keyid": "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5",
- "keytype": "rsa",
- "keyval": {
- "private": "",
- "public": "-----BEGIN PUBLIC KEY-----\nMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKC..."
- }
- }
- }
- },
- "signatures": [
- {
- "keyid": "85ed317c5950f8c5921bb547bdecb4e7c697c9502164d60d9c922ff384b083c5",
- "method": "RSASSA-PSS",
- "sig": "ceb3ce5664472dccee0ec9fdf20a281418ab6b537374659786f75718e506b016005..."
- }
- ]
-}
-
-```
-
-
-## Links
-
-### seattle/clone-dependencies.d66d18.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "clone-dependencies",
- "command": [
- "python",
- "initialize.py"
- ],
- "materials": {},
- "products": {
- "installer-packaging/DEPENDENCIES/affix/.travis.yml": {
- "sha256": "d0c6c6a72dcfba6b22e321783c3455c6a680aa7bacc04db8adf184630696b999"
- },
- "installer-packaging/DEPENDENCIES/affix/LICENSE": {
- "sha256": "c58358858f917e4bac08df11f6c89f39743dec35aaabdd629eea6a50341206a8"
- },
- "installer-packaging/DEPENDENCIES/affix/affix_exceptions.r2py": {
- "sha256": "809ff340dffb0972797844fb956a53ff3d26418180553ff13ee4fa81db0a6bc3"
- },
- "installer-packaging/DEPENDENCIES/affix/affix_repy_network_api_wrapper.r2py": {
- "sha256": "dc1e91306e28dfb40d21ceb6de82b6cffff207c9fca36f3e2c2d613d35e3ce4c"
- },
- "installer-packaging/DEPENDENCIES/affix/affix_stack.r2py": {
- "sha256": "97b147a4f3cf2bda14486def2af8d06fe96208747b239ad8c36d73efceb72e7c"
- },
- "installer-packaging/DEPENDENCIES/affix/affix_wrapper_lib.r2py": {
- "sha256": "9f225939d3507c90a58ae8a6157f254390612d78e94c72d67ebe56375e193bfe"
- },
- "installer-packaging/DEPENDENCIES/affix/appveyor.yml": {
- "sha256": "8d9eab5b578723043ce354bcadc3fcb2695a39b964f68a6601ac2f911a1108ef"
- },
- "installer-packaging/DEPENDENCIES/affix/components/baseaffix.r2py": {
- "sha256": "8b21380dc7a25403b279c077ff9d326ea4a0a4f73f84737f0675b9452b46ad13"
- },
- "installer-packaging/DEPENDENCIES/affix/components/canihear.r2py": {
- "sha256": "fb5e95a2b921160d2446e38003280a0b49b71ff83214b12c76c8db845a9bf888"
- },
- "...": "..."
- },
- "byproducts": {
- "return_value": 0,
- "stdout": "Checking out repo from https://github.com/SeattleTestbed/nodemanage...",
- "stderr": ""
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5",
- "method": "RSASSA-PSS",
- "sig": "367e5d1b7a2d0cefaf44d01cdc0dd55558c0adee5d4edccf1b41ade76c84d0cfdc3..."
- }
- ]
-}
-
-```
-
-
-### seattle/build-runnable.d66d18.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "build-runnable",
- "command": [
- "python",
- "build.py"
- ],
- "materials": {
- "installer-packaging/DEPENDENCIES/affix/.travis.yml": {
- "sha256": "d0c6c6a72dcfba6b22e321783c3455c6a680aa7bacc04db8adf184630696b999"
- },
- "installer-packaging/DEPENDENCIES/affix/LICENSE": {
- "sha256": "c58358858f917e4bac08df11f6c89f39743dec35aaabdd629eea6a50341206a8"
- },
- "installer-packaging/DEPENDENCIES/affix/affix_exceptions.r2py": {
- "sha256": "809ff340dffb0972797844fb956a53ff3d26418180553ff13ee4fa81db0a6bc3"
- },
- "installer-packaging/DEPENDENCIES/affix/affix_repy_network_api_wrapper.r2py": {
- "sha256": "dc1e91306e28dfb40d21ceb6de82b6cffff207c9fca36f3e2c2d613d35e3ce4c"
- },
- "installer-packaging/DEPENDENCIES/affix/affix_stack.r2py": {
- "sha256": "97b147a4f3cf2bda14486def2af8d06fe96208747b239ad8c36d73efceb72e7c"
- },
- "installer-packaging/DEPENDENCIES/affix/affix_wrapper_lib.r2py": {
- "sha256": "9f225939d3507c90a58ae8a6157f254390612d78e94c72d67ebe56375e193bfe"
- },
- "installer-packaging/DEPENDENCIES/affix/appveyor.yml": {
- "sha256": "8d9eab5b578723043ce354bcadc3fcb2695a39b964f68a6601ac2f911a1108ef"
- },
- "installer-packaging/DEPENDENCIES/affix/components/baseaffix.r2py": {
- "sha256": "8b21380dc7a25403b279c077ff9d326ea4a0a4f73f84737f0675b9452b46ad13"
- },
- "installer-packaging/DEPENDENCIES/affix/components/canihear.r2py": {
- "sha256": "fb5e95a2b921160d2446e38003280a0b49b71ff83214b12c76c8db845a9bf888"
- },
- "...": "..."
- },
- "products": {
- "installer-packaging/RUNNABLE/LICENSE": {
- "sha256": "95fd62575bd6de09864bce5286e3654989ef4be834e039e92f5b6b3e533069f2"
- },
- "installer-packaging/RUNNABLE/README.md": {
- "sha256": "a4e3870180bae75c2f22d45c12dbf89e7056f219d440d9fde6663684ab23c9f4"
- },
- "installer-packaging/RUNNABLE/advertise.r2py": {
- "sha256": "30b979fa11919eb7adbdf931788cbba28e7cc4210e172ba8ae7468a3fff6570a"
- },
- "installer-packaging/RUNNABLE/advertise_objects.r2py": {
- "sha256": "f76eee0a4b595335c7894d8db26cddb4574bcaac652f5d8f3154dbad16e791e7"
- },
- "installer-packaging/RUNNABLE/advertisepipe.r2py": {
- "sha256": "8ca0f7c2fca8fb481ae87bc4f0b1c0843ff05626dd9c5315593675d23c59e37b"
- },
- "installer-packaging/RUNNABLE/advertiseserver_v2.r2py": {
- "sha256": "51952a3c7c025017c9ee1d53a27c96b2ba8e57d559a16682d0dbff914cc508d6"
- },
- "installer-packaging/RUNNABLE/appveyor.yml": {
- "sha256": "8d9eab5b578723043ce354bcadc3fcb2695a39b964f68a6601ac2f911a1108ef"
- },
- "installer-packaging/RUNNABLE/argparse.r2py": {
- "sha256": "a1057faa6631c8077c427a6a961899f44c7222dc00ba16bf905ba0e1401a01f9"
- },
- "installer-packaging/RUNNABLE/base64.r2py": {
- "sha256": "ff0b77447dd36cb203cf03afdbd2d1aaeab8c9e8a3831c0416a04c74b0873b7d"
- },
- "...": "..."
- },
- "byproducts": {
- "return_value": 0,
- "stdout": "Building into /home/cib/installer-packaging/RUNNABLE\nDone building!\n",
- "stderr": ""
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5",
- "method": "RSASSA-PSS",
- "sig": "a8c1296c9aed0d7a2f8625aa3a5825e373e90a0d2c6fce65934920671390a6b45ee..."
- }
- ]
-}
-
-```
-
-
-### seattle/pre-build-file-edit.d66d18.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "pre-build-file-edit",
- "command": [],
- "materials": {
- "installer-packaging/RUNNABLE/LICENSE": {
- "sha256": "95fd62575bd6de09864bce5286e3654989ef4be834e039e92f5b6b3e533069f2"
- },
- "installer-packaging/RUNNABLE/README.md": {
- "sha256": "a4e3870180bae75c2f22d45c12dbf89e7056f219d440d9fde6663684ab23c9f4"
- },
- "installer-packaging/RUNNABLE/advertise.r2py": {
- "sha256": "30b979fa11919eb7adbdf931788cbba28e7cc4210e172ba8ae7468a3fff6570a"
- },
- "installer-packaging/RUNNABLE/advertise_objects.r2py": {
- "sha256": "f76eee0a4b595335c7894d8db26cddb4574bcaac652f5d8f3154dbad16e791e7"
- },
- "installer-packaging/RUNNABLE/advertisepipe.r2py": {
- "sha256": "8ca0f7c2fca8fb481ae87bc4f0b1c0843ff05626dd9c5315593675d23c59e37b"
- },
- "installer-packaging/RUNNABLE/advertiseserver_v2.r2py": {
- "sha256": "51952a3c7c025017c9ee1d53a27c96b2ba8e57d559a16682d0dbff914cc508d6"
- },
- "installer-packaging/RUNNABLE/appveyor.yml": {
- "sha256": "8d9eab5b578723043ce354bcadc3fcb2695a39b964f68a6601ac2f911a1108ef"
- },
- "installer-packaging/RUNNABLE/argparse.r2py": {
- "sha256": "a1057faa6631c8077c427a6a961899f44c7222dc00ba16bf905ba0e1401a01f9"
- },
- "installer-packaging/RUNNABLE/base64.r2py": {
- "sha256": "ff0b77447dd36cb203cf03afdbd2d1aaeab8c9e8a3831c0416a04c74b0873b7d"
- },
- "...": "..."
- },
- "products": {
- "installer-packaging/RUNNABLE/LICENSE": {
- "sha256": "95fd62575bd6de09864bce5286e3654989ef4be834e039e92f5b6b3e533069f2"
- },
- "installer-packaging/RUNNABLE/README.md": {
- "sha256": "a4e3870180bae75c2f22d45c12dbf89e7056f219d440d9fde6663684ab23c9f4"
- },
- "installer-packaging/RUNNABLE/advertise.r2py": {
- "sha256": "30b979fa11919eb7adbdf931788cbba28e7cc4210e172ba8ae7468a3fff6570a"
- },
- "installer-packaging/RUNNABLE/advertise_objects.r2py": {
- "sha256": "f76eee0a4b595335c7894d8db26cddb4574bcaac652f5d8f3154dbad16e791e7"
- },
- "installer-packaging/RUNNABLE/advertisepipe.r2py": {
- "sha256": "8ca0f7c2fca8fb481ae87bc4f0b1c0843ff05626dd9c5315593675d23c59e37b"
- },
- "installer-packaging/RUNNABLE/advertiseserver_v2.r2py": {
- "sha256": "51952a3c7c025017c9ee1d53a27c96b2ba8e57d559a16682d0dbff914cc508d6"
- },
- "installer-packaging/RUNNABLE/appveyor.yml": {
- "sha256": "8d9eab5b578723043ce354bcadc3fcb2695a39b964f68a6601ac2f911a1108ef"
- },
- "installer-packaging/RUNNABLE/argparse.r2py": {
- "sha256": "a1057faa6631c8077c427a6a961899f44c7222dc00ba16bf905ba0e1401a01f9"
- },
- "installer-packaging/RUNNABLE/base64.r2py": {
- "sha256": "ff0b77447dd36cb203cf03afdbd2d1aaeab8c9e8a3831c0416a04c74b0873b7d"
- },
- "...": "..."
- },
- "byproducts": {
- "return_value": null
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5",
- "method": "RSASSA-PSS",
- "sig": "656cbf10cdd2475a08a0f18232f9caa040f40fa36a5c5142c30b51233a31156f8b6..."
- }
- ]
-}
-
-```
-
-
-### seattle/build-base-installers.d66d18.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "build-base-installers",
- "command": [
- "python",
- "rebuild_base_installers.py",
- "0.1-in-toto-in-seattle"
- ],
- "materials": {
- "installer-packaging/RUNNABLE/LICENSE": {
- "sha256": "95fd62575bd6de09864bce5286e3654989ef4be834e039e92f5b6b3e533069f2"
- },
- "installer-packaging/RUNNABLE/README.md": {
- "sha256": "a4e3870180bae75c2f22d45c12dbf89e7056f219d440d9fde6663684ab23c9f4"
- },
- "installer-packaging/RUNNABLE/advertise.r2py": {
- "sha256": "30b979fa11919eb7adbdf931788cbba28e7cc4210e172ba8ae7468a3fff6570a"
- },
- "installer-packaging/RUNNABLE/advertise_objects.r2py": {
- "sha256": "f76eee0a4b595335c7894d8db26cddb4574bcaac652f5d8f3154dbad16e791e7"
- },
- "installer-packaging/RUNNABLE/advertisepipe.r2py": {
- "sha256": "8ca0f7c2fca8fb481ae87bc4f0b1c0843ff05626dd9c5315593675d23c59e37b"
- },
- "installer-packaging/RUNNABLE/advertiseserver_v2.r2py": {
- "sha256": "51952a3c7c025017c9ee1d53a27c96b2ba8e57d559a16682d0dbff914cc508d6"
- },
- "installer-packaging/RUNNABLE/appveyor.yml": {
- "sha256": "8d9eab5b578723043ce354bcadc3fcb2695a39b964f68a6601ac2f911a1108ef"
- },
- "installer-packaging/RUNNABLE/argparse.r2py": {
- "sha256": "a1057faa6631c8077c427a6a961899f44c7222dc00ba16bf905ba0e1401a01f9"
- },
- "installer-packaging/RUNNABLE/base64.r2py": {
- "sha256": "ff0b77447dd36cb203cf03afdbd2d1aaeab8c9e8a3831c0416a04c74b0873b7d"
- },
- "...": "..."
- },
- "products": {
- "custominstallerbuilder/html/static/installers/base/seattle_0.1-in-toto-in-seattle_android.zip": {
- "sha256": "77d91291b1d7d1127490aebc73cb47f372dea267bc706576bbf92535a37fa0a0"
- },
- "custominstallerbuilder/html/static/installers/base/seattle_0.1-in-toto-in-seattle_linux.tgz": {
- "sha256": "87d1d193917b41a96e8c69b5df268a5ac044f3b892b3392a472daef8c94adae3"
- },
- "custominstallerbuilder/html/static/installers/base/seattle_0.1-in-toto-in-seattle_mac.tgz": {
- "sha256": "e67f9f0b95f67229b25433e09a64bb36357742420f0f7489a6f009a517670236"
- },
- "custominstallerbuilder/html/static/installers/base/seattle_0.1-in-toto-in-seattle_win.zip": {
- "sha256": "29f0d2e6f23996018327675cbc36eab3eb4bcb56b9001017085a7f9a4d17adae"
- },
- "custominstallerbuilder/html/static/installers/base/seattle_android.zip": {
- "sha256": "77d91291b1d7d1127490aebc73cb47f372dea267bc706576bbf92535a37fa0a0"
- },
- "custominstallerbuilder/html/static/installers/base/seattle_linux.tgz": {
- "sha256": "87d1d193917b41a96e8c69b5df268a5ac044f3b892b3392a472daef8c94adae3"
- },
- "custominstallerbuilder/html/static/installers/base/seattle_mac.tgz": {
- "sha256": "e67f9f0b95f67229b25433e09a64bb36357742420f0f7489a6f009a517670236"
- },
- "custominstallerbuilder/html/static/installers/base/seattle_win.zip": {
- "sha256": "29f0d2e6f23996018327675cbc36eab3eb4bcb56b9001017085a7f9a4d17adae"
- }
- },
- "byproducts": {
- "return_value": 0,
- "stdout": "Archiving old base installers to /home/cib/custominstallerbuilder/h...",
- "stderr": ""
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5",
- "method": "RSASSA-PSS",
- "sig": "7b592b27665d3b547aacd4c59a3871972edb4a923202728fe458ddbe49c6c20952c..."
- }
- ]
-}
-
-```
-
-
-### seattle/dummy-untar-linux-base-installer.d66d18.link
-``` json
-{
- "signed": {
- "_type": "link",
- "name": "dummy-untar-linux-base-installer",
- "command": [
- "tar",
- "xf",
- "custominstallerbuilder/html/static/installers/base/seattle_linux.tgz"
- ],
- "materials": {
- "custominstallerbuilder/html/static/installers/base/seattle_linux.tgz": {
- "sha256": "87d1d193917b41a96e8c69b5df268a5ac044f3b892b3392a472daef8c94adae3"
- }
- },
- "products": {
- "seattle/install.sh": {
- "sha256": "ca523d1ca5b331278fc4eb7a09c0296314b00dd7d90e47e90dee3d7572fe73ea"
- },
- "seattle/seattle_repy/BandwidthClient.py": {
- "sha256": "3538c302e2412d095c15cd00b1b85f68af6b42cff0a624aa53dc560cc0341770"
- },
- "seattle/seattle_repy/BandwidthServer.py": {
- "sha256": "3369ef9eaf7e7ce02c304c55699738c0a6a6c21dcc1e053b7e10875f9d5dc4ff"
- },
- "seattle/seattle_repy/LICENSE": {
- "sha256": "95fd62575bd6de09864bce5286e3654989ef4be834e039e92f5b6b3e533069f2"
- },
- "seattle/seattle_repy/LICENSE.txt": {
- "sha256": "c349ed2c887cc4798462516fb3fbeea19e4f8dcf81444983006ef7e15d876de9"
- },
- "seattle/seattle_repy/Linux_resources.py": {
- "sha256": "b2520913a0a27ae6c716190fa3f4c23a3b02fc174da99b816c90f20acf57dfb6"
- },
- "seattle/seattle_repy/Mac_BSD_resources.py": {
- "sha256": "a56e6e1725f22d4b055b9a9bd5e7e6a349a1a18b180992c42563936d4c7f9e3f"
- },
- "seattle/seattle_repy/README.txt": {
- "sha256": "6a72741a949dba40179472a93c7b458f7cfd38f2261baf131712b9139ebaa921"
- },
- "seattle/seattle_repy/Win_WinCE_resources.py": {
- "sha256": "137856aac0ca9b6c1116ffb19c39cc355ce4734afe97911a39e1664698ea16af"
- },
- "...": "..."
- },
- "byproducts": {
- "return_value": 0,
- "stdout": "",
- "stderr": ""
- },
- "environment": {}
- },
- "signatures": [
- {
- "keyid": "d66d18e768284e519ed2d0774376faf4859cb6529bf6e392621b8d42752206d5",
- "method": "RSASSA-PSS",
- "sig": "aa05b3773b3cad3a1d70b7ae43fd37f168a59c7e65b24affe81dae0a290981e10e0..."
- }
- ]
-}
-
-```
-
-
diff --git a/content/faq.md b/content/faq.md
deleted file mode 100644
index 3dbadcd..0000000
--- a/content/faq.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Frequently asked questions
----
-
-{{< faq >}}
diff --git a/content/in-toto.md b/content/in-toto.md
deleted file mode 100644
index 5b73e79..0000000
--- a/content/in-toto.md
+++ /dev/null
@@ -1,13 +0,0 @@
----
-title: What is in-toto?
----
-
-A software supply chain is the series of steps performed when writing, testing, packaging, and distributing software. A typical software supply chain is composed of multiple steps "chained" together that transform (e.g., compilation) or verify the state (e.g., linting) of the project in order to drive it to a final product.
-
-Supply chain security is crucial to the overall security of a software product. An attacker who is able to control a step in the supply chain can alter the product for malicious intents that range from introducing backdoors in the source code to including vulnerable libraries in the final product. As a result, supply chain breaches are an impactful means for an attacker to affect multiple users at once.
-
-Although many frameworks exist to ensure security in the "last mile" (e.g., software updaters), they may be providing integrity and authentication to a product that is already vulnerable; it is possible that, by the time the package makes it to a software update repository, it has already been compromised.
-
-in-toto is designed to ensure the integrity of a software product from initiation to end-user installation. It does so by making it transparent to the user what steps were performed, by whom and in what order. As a result, with some guidance from the group creating the software, in-toto allows the user to verify if a step in the supply chain was intended to be performed, and if the step was performed by the right actor.
-
-You can read more about in-toto's internals in our [latest](https://github.com/in-toto/docs/blob/master/in-toto-spec.md) or [stable](https://github.com/in-toto/docs/blob/v1.0/in-toto-spec.md) specification.
diff --git a/content/metadata-examples.md b/content/metadata-examples.md
deleted file mode 100644
index e1da8ea..0000000
--- a/content/metadata-examples.md
+++ /dev/null
@@ -1,9 +0,0 @@
----
-title: Metadata examples
----
-
-* [Debian](/examples/debian) — This demo metadata shows how the Debian project could use in-toto to secure their version of the grep package.
-* [Seattle](/examples/seattle) — Seattle is a fog computing platform that already ships in-toto metadata with their releases. Here, you can see a pretty-printed version of the seattle metadata.
-* [PPH](/examples/polypasswordhasher) — [PolyPasswordHasher](https://pph.io/) is a password hashing scheme that prevents an attacker from cracking passwords individually and efficiently.
-
-Don't forget to check out our [demos](https://github.com/in-toto/demo) too.
diff --git a/content/news.md b/content/news.md
deleted file mode 100644
index 58678da..0000000
--- a/content/news.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: News
----
-
-{{< news >}}
diff --git a/content/specs.md b/content/specs.md
deleted file mode 100644
index 6326a36..0000000
--- a/content/specs.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Specifications
----
-
-{{< specs >}}
diff --git a/data/faq.yaml b/data/faq.yaml
deleted file mode 100644
index 9790c58..0000000
--- a/data/faq.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-- q: Why the name “in-toto”?
- a: |
- in-toto is Latin for "as a whole." We chose the name because our objective with in-toto is to build a system to protect the whole software supply chain.
-- q: What is the difference between in-toto and [The Update Framework](https://theupdateframework.github.io/) (TUF)?
- a: |
- TUF provides a framework that can be used to secure update systems, i.e. the "last mile," whereas in-toto lets you verify the whole software supply chain. TUF and in-toto can play together very well, as you can use TUF to deliver updates and their corresponding in-toto metadata.
-- q: Is Python 3 supported?
- a: |
- Yes, Python 3 is supported with in-toto.
-- q: Is there a timeline for the support of Python 2.7?
- a: |
- We have released the final version of in-toto, v1.0.1, that supports Python 2. Our next release, at the end of April 2021, will drop support for Python 2.
diff --git a/data/news.yaml b/data/news.yaml
index 4864ab4..c8750ca 100644
--- a/data/news.yaml
+++ b/data/news.yaml
@@ -48,13 +48,13 @@
We released the first version of the [official in-toto Jenkins plugin](https://plugins.jenkins.io/in-toto). This provenance Agent will help you track and sign link metadata for any step within your pipeline in a secure and distributed way.
- date: 2018-10-19
text: |
- [Colin Domoney gave a talk on this year's DevSecCon London](https://www.devseccon.com/london-2018/session/supply-chain-achilles-heel/). He covered some of the fundamentals of in-toto to protect your cloud native deployment, as well as some other good supply-chain security practices.
+ [Colin Domoney gave a talk on this year's DevSecCon London](https://www.devseccon.com/london-2018/session/supply-chain-achilles-heel/). He covered some of the fundamentals of in-toto to protect your cloud native deployment, as well as some other good supply-chain security practices.
- date: 2018-05-29
text: |
[Pacman 5.1 has been released](http://allanmcrae.com/2018/05/pacman-5-1-dont-use-the-force-luke/)! This new version adds support for reproducible builds, and includes a security check for tampered [git tag metadata](https://lists.archlinux.org/pipermail/pacman-dev/2017-September/022123.html).
- date: 2018-05-17
text: |
- A [LWN](https://lwn.net/Articles/754443/) article has been published, covering various supply chain security issues and their solutions, including grafeas, the update framework, and in-toto.
+ A [LWN](https://lwn.net/Articles/754443/) article has been published, covering various supply chain security issues and their solutions, including grafeas, the update framework, and in-toto.
- date: 2018-05-02
text: |
We presented in-toto along with Grafeas at [Kubecon 2018](https://kccnceu18.sched.com/event/Dqtx/completely-securing-the-software-supply-chain-using-grafeas-in-toto-lukas-puehringer-nyu-wendy-dembowski-google-any-skill-level-slides-attached?iframe=yes&w=100%&sidebar=yes&bg=no#).
@@ -78,7 +78,7 @@
We presented a demo of in-toto at [Dockercon 2017](https://2017.dockercon.com). You can watch the video [here](https://www.youtube.com/watch?v=SNge7-t4JRE&index=34&list=PLkA60AVN3hh_nihZ1mh6cO3n-uMdF7UlV).
- date: 2017-01-17
text: |
- A fix to our git tag metadata tampering vulnerability was merged into git's master branch and will be available starting from [git v2.12](https://public-inbox.org/git/20170117233723.23897-1-santiago@nyu.edu/). You can read more about it in our [USENIX '16](https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/torres-arias) paper.
+ A fix to our git tag metadata tampering vulnerability was merged into git's master branch and will be available starting from [git v2.12](https://public-inbox.org/git/20170117233723.23897-1-santiago@nyu.edu/). You can read more about it in our [USENIX '16](https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/torres-arias) paper.
- date: 2016-10-14
text: |
We presented a demo of in-toto in the [Docker Distributed System Summit](https://blog.docker.com/2016/10/docker-distributed-system-summit-videos-podcast-episodes/). You can watch the video [here](https://youtu.be/Aryr0O6H_2U?t=25m58s).
diff --git a/data/specs.yaml b/data/specs.yaml
index ec62053..aff4341 100644
--- a/data/specs.yaml
+++ b/data/specs.yaml
@@ -1,11 +1,21 @@
- version: in-toto Stable (v1.0)
url: https://github.com/in-toto/docs/blob/v1.0/in-toto-spec.md
- description: This is a thoroughly-reviewed version of the specification (and probably what you're looking for).
+ description:
+ This is a thoroughly-reviewed version of the specification (and probably
+ what you're looking for).
- version: in-toto Latest
url: https://github.com/in-toto/docs/blob/master/in-toto-spec.md
- description: If you want to see the latest changes and possible features, click this.
+ description:
+ If you want to see the latest changes and possible features, click this.
- version: in-toto Attestation Framework Stable (v1.0)
url: https://github.com/in-toto/attestation/tree/v1.0/
- description: The in-toto Attestation Framework is developed independently of the in-toto specification. A future version of the in-toto specification will incorporate this framework as the mechanism to express software supply chain claims.
+ description:
+ The in-toto Attestation Framework is developed independently of the in-toto
+ specification. A future version of the in-toto specification will
+ incorporate this framework as the mechanism to express software supply chain
+ claims.
- version: in-toto Attestation Framework Latest
- description: If you want to see the latest changes to the in-toto Attestation Framework, click this.
+ url: https://github.com/in-toto/attestation/tree/main
+ description:
+ If you want to see the latest changes to the in-toto Attestation Framework,
+ click this.
diff --git a/hugo.yaml b/hugo.yaml
new file mode 100644
index 0000000..8dc4677
--- /dev/null
+++ b/hugo.yaml
@@ -0,0 +1,120 @@
+baseURL: https://in-toto.io/
+title: in-toto
+enableRobotsTXT: true
+enableGitInfo: true
+theme: [docsy]
+
+pygmentsCodeFences: true
+pygmentsUseClasses: false
+pygmentsUseClassic: false
+pygmentsStyle: tango
+
+outputs:
+ home: [HTML]
+ page: [HTML]
+ section: [HTML, RSS, print]
+
+imaging:
+ resampleFilter: CatmullRom
+ quality: 75
+ anchor: smart
+
+languages:
+ en:
+ languageName: English
+ params:
+ description: A framework to secure the integrity of software supply chains
+
+markup:
+ goldmark:
+ parser:
+ attribute:
+ block: true
+ renderer:
+ unsafe: true
+ highlight:
+ noClasses: false # Required for dark-mode
+
+params:
+ logo: /images/logo.png
+ copyright:
+ authors: >-
+ in-toto Authors | Documentation Distributed under CC-BY-4.0[CC BY
+ 4.0](https://creativecommons.org/licenses/by/4.0)
+ from_year: 2020
+ version: 0.10.0
+ url_latest_version: https://in-toto.io/docs/
+ github_repo: https://github.com/in-toto/in-toto.io
+ github_project_repo: https://github.com/in-toto/in-toto
+ github_subdir: userguide
+ time_format_blog: Monday, January 02, 2006
+ time_format_default: January 2, 2006
+ rss_sections: [blog] # TODO: drop since this is the default
+ gcs_engine_id: 011217106833237091527:la2vtv2emlw
+ offlineSearch: false
+ offlineSearchSummaryLength: 70
+ offlineSearchMaxResults: 10
+ prism_syntax_highlighting: false
+ search:
+ # algolia:
+ ui:
+ showLightDarkModeMenu: true
+ sidebar_cache_limit: 10
+ sidebar_menu_compact: true
+ sidebar_menu_foldable: false
+ sidebar_search_disable: true
+ feedback:
+ enable: true
+ 'yes': >-
+ Glad to hear it! Please tell us how we
+ can improve.
+ 'no': >-
+ Sorry to hear that. Please tell us how we
+ can improve.
+ readingtime:
+ enable: false
+ links:
+ user:
+ - name: GitHub Discussions
+ url: https://github.com/in-toto/community
+ icon: fa-brands fa-github
+ desc: Discussion and help from your fellow users
+ - name: User mailing list
+ url: mailto:in-toto-public@googlegroups.com
+ icon: fa-solid fa-envelope
+ desc: Sign up for Docsy announcements
+ - name: Slack
+ url: https://slack.cncf.io/
+ icon: fa-brands fa-slack
+ desc: in-toto on CNCF Slack Workspace
+ - name: IRC
+ url: https://web.libera.chat/#in-toto
+ icon: fa-solid fa-comments
+ desc: in-toto on libera
+ - name: Email the Developers
+ url: mailto:in-toto-dev@googlegroups.com
+ icon: fa-solid fa-envelope
+ desc: Email the developers
+
+ plantuml:
+ enable: true
+ theme: default
+ svg_image_url: https://www.plantuml.com/plantuml/svg/
+ svg: false
+ print:
+ disable_toc: false
+ markmap:
+ enable: true
+ drawio:
+ enable: true
+
+taxonomies:
+ tag: tags
+ category: categories
+
+module:
+ mounts:
+ - source: content/en
+ target: content
diff --git a/layouts/_default/_markup/render-heading.html b/layouts/_default/_markup/render-heading.html
new file mode 100644
index 0000000..6cb98f1
--- /dev/null
+++ b/layouts/_default/_markup/render-heading.html
@@ -0,0 +1,4 @@
+{{ template "_default/_markup/td-render-heading.html" . -}}
+
+{{/* By default, the markdown processor emits a heading on its own line, so we
+don't trim whitespace from the end of this template. */}}
diff --git a/layouts/_default/baseof.html b/layouts/_default/baseof.html
deleted file mode 100644
index f33f609..0000000
--- a/layouts/_default/baseof.html
+++ /dev/null
@@ -1,25 +0,0 @@
-
-
-
- {{ partial "meta.html" . }}
-
-
-
-
- {{ .Content }}
-
-
-
-
-
- - {{ .Title }} -
-
- {{ range $features }}
- {{ $img := printf "img/features/%s" .img | relURL }}
- {{ $link := .button_url | relURL }}
-
-
-
-
-
- {{ end }}
-
- 
-
-
-
-
-
-
-
-
- {{ $desc }} -
-{{ T "community_introduce" . }}
+ +## {{ T "community_learn" }} + +{{ T "community_using" . }} + +{{ with index $links "user"}} + {{ template "community-links-list" . }} +{{ end }} + +## {{ T "community_develop" }} + +{{ T "community_contribute" . }} + +{{ with index $links "developer"}} + {{ template "community-links-list" . }} +{{ end }} + +{{ T "community_how_to" . }} {{ T "community_guideline" }}. + +{{ define "community-links-list" -}} +{{ range . }} +- [ {{ .name }}]({{ .url }}): {{ .desc -}} +{{ end -}} +{{ end }} \ No newline at end of file diff --git a/layouts/shortcodes/faq.html b/layouts/shortcodes/faq.html deleted file mode 100644 index 09cf296..0000000 --- a/layouts/shortcodes/faq.html +++ /dev/null @@ -1,13 +0,0 @@ -{{ $faq := site.Data.faq }} -{{ range $idx, $qa := $faq }} -{{ $num := add $idx 1 }} -
-
-{{ end }}
diff --git a/layouts/shortcodes/news.html b/layouts/shortcodes/news.html
index 1114b80..4397a24 100644
--- a/layouts/shortcodes/news.html
+++ b/layouts/shortcodes/news.html
@@ -1,4 +1,28 @@
{{ $news := site.Data.news }}
+
- {{ $num }}. {{ .q | markdownify }} -
- -- {{ .a | markdownify }} -
-
{{ range $news }}
{{ $date := dateFormat "January 2, 2006" .date }}
diff --git a/layouts/shortcodes/spec-table.md b/layouts/shortcodes/spec-table.md
new file mode 100644
index 0000000..9c3e805
--- /dev/null
+++ b/layouts/shortcodes/spec-table.md
@@ -0,0 +1,7 @@
+{{ $specs := site.Data.specs }}
+
+| Version | Description |
+| ------- | ----------- |
+{{ range $specs -}}
+| [{{ .version }}]({{ .url }}) | {{ .description }} |
+{{ end }}
diff --git a/layouts/shortcodes/specs.html b/layouts/shortcodes/specs.html
deleted file mode 100644
index 6a88db7..0000000
--- a/layouts/shortcodes/specs.html
+++ /dev/null
@@ -1,27 +0,0 @@
-{{ $specs := site.Data.specs }}
-
-
-
diff --git a/netlify.toml b/netlify.toml
index bedb3ab..e1b1d20 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -1,13 +1,6 @@
[build]
publish = "public"
-command = "npm run build:preview"
+command = "npm run build"
[context.production]
-command = "npm run build:production"
-
-[[headers]]
- for = "/*"
- [headers.values]
- X-Content-Type-Options = "nosniff"
- X-Frame-Options = "DENY"
- Content-Security-Policy = "default-src 'self' code.jquery.com fonts.googleapis.com fonts.gstatic.com use.fontawesome.com"
+command = "npm run build"
\ No newline at end of file
diff --git a/package.json b/package.json
index 7425d17..4ed0df3 100644
--- a/package.json
+++ b/package.json
@@ -1,20 +1,54 @@
{
+ "name": "docsy-user-guide",
"scripts": {
"_build": "npm run _hugo-dev --",
+ "_check:format": "npx prettier --check .",
+ "_check:links": "make check-links",
+ "_get:submodule": "set -x && git submodule update --init ${DEPTH:- --depth 1}",
"_hugo": "hugo --cleanDestinationDir",
- "_hugo-dev": "npm run _hugo -- -e dev -DF",
- "_serve": "npm run _hugo-dev -- serve --minify --disableFastRender",
+ "_hugo-dev": "npm run _hugo -- -e dev -DFE",
+ "_prepare:docsy": "cd themes/docsy && npm install",
+ "_serve": "npm run _hugo-dev -- --minify serve",
"build:preview": "npm run _hugo-dev -- --minify --baseURL \"${DEPLOY_PRIME_URL:-http://localhost}\"",
"build:production": "npm run _hugo -- --minify",
"build": "npm run _build --",
- "clean": "rm -Rf node_modules public/* resources",
- "make:public": "mkdir -p public && git init -b main public",
- "serve": "npm run _serve --",
- "test": "npm run build"
+ "check:format": "npm run _check:format || (echo '[help] Run: npm run fix:format'; exit 1)",
+ "check:links:all": "HTMLTEST_ARGS= npm run _check:links",
+ "check:links": "npm run _check:links",
+ "clean": "rm -Rf public",
+ "fix:format": "npm run _check:format -- --write",
+ "get:submodule": "npm run _get:${GET:-submodule}",
+ "make:public": "git init -b main public",
+ "precheck:links:all": "npm run build",
+ "precheck:links": "npm run build",
+ "postbuild:preview": "npm run _check:links",
+ "postbuild:production": "npm run _check:links",
+ "prepare": "npm run seq -- get:submodule _prepare:docsy",
+ "seq": "bash -c 'for cmd in \"$@\"; do npm run $cmd || exit 1; done' - ",
+ "serve": "npm run _serve",
+ "test": "npm run check:format && npm run check:links",
+ "update:dep": "npm install --save-dev autoprefixer@latest postcss-cli@latest",
+ "update:pkgs": "npx npm-check-updates -u"
},
"devDependencies": {
- "bulma": "^0.9.4",
- "hugo-extended": "^0.111.3"
+ "autoprefixer": "^10.4.19",
+ "cspell": "^8.8.4",
+ "hugo-extended": "0.127.0",
+ "postcss-cli": "^11.0.0",
+ "prettier": "^3.3.1"
},
- "spelling": "cSpell:ignore bulma -"
+ "optionalDependencies": {
+ "netlify-cli": "^17.26.1",
+ "npm-check-updates": "^16.14.20"
+ },
+ "enginesComment": "Ensure that engines.node value stays consistent with the project's .nvmrc",
+ "engines": {
+ "node": "20.x"
+ },
+ "gitHubActionCacheKey": "2024-07-02 - change this key to force cache refresh",
+ "private": true,
+ "prettier": {
+ "proseWrap": "always",
+ "singleQuote": true
+ }
}
diff --git a/static/_redirects b/static/_redirects
deleted file mode 100644
index c1d5176..0000000
--- a/static/_redirects
+++ /dev/null
@@ -1,39 +0,0 @@
-# No versions mentioned in the spec so assume v0.1
-Envelope/v0.1 https://github.com/in-toto/attestation/tree/v0.1.0/spec#envelope
-Predicate/v0.1 https://github.com/in-toto/attestation/tree/v0.1.0/spec#predicate
-
-# Below version numbers are in the spec at the v0.1.0 tag.
-Statement/v0.1 https://github.com/in-toto/attestation/tree/v0.1.0/spec#statement
-Link/v1.0.0 https://github.com/in-toto/attestation/tree/v0.1.0/spec/predicates/link.md
-Provenance/v0.1.0 https://github.com/in-toto/attestation/tree/v0.1.0/spec/predicates/provenance.md
-SPDX/v1.0.0 https://github.com/in-toto/attestation/blob/v0.1.0/spec/predicates/spdx.md
-
-# Bonus: v0.1.0 <-> v0.1
-Envelope/v0.1.0 https://github.com/in-toto/attestation/tree/v0.1.0/spec#envelope
-Predicate/v0.1.0 https://github.com/in-toto/attestation/tree/v0.1.0/spec#predicate
-Provenance/v0.1 https://github.com/in-toto/attestation/tree/v0.1.0/spec/predicates/provenance.md
-Statement/v0.1.0 https://github.com/in-toto/attestation/tree/v0.1.0/spec#statement
-
-# Below version numbers use main branch
-
-# Below version numbers are in the spec at the v1.x tag
-Statement/v1 https://github.com/in-toto/attestation/blob/main/spec/v1/statement.md
-
-# Below are vetted Attestation Framework predicates (versioned independently)
-attestation/link https://github.com/in-toto/attestation/tree/main/spec/predicates/link.md
-attestation/link/v* https://github.com/in-toto/attestation/tree/main/spec/predicates/link.md
-
-attestation/release https://github.com/in-toto/attestation/tree/main/spec/predicates/release.md
-attestation/release/v* https://github.com/in-toto/attestation/tree/main/spec/predicates/release.md
-
-attestation/runtime-trace https://github.com/in-toto/attestation/tree/main/spec/predicates/runtime-trace.md
-attestation/runtime-trace/v* https://github.com/in-toto/attestation/tree/main/spec/predicates/runtime-trace.md
-
-attestation/scai/attribute-report/ https://github.com/in-toto/attestation/tree/main/spec/predicates/scai.md
-attestation/scai/attribute-report/v* https://github.com/in-toto/attestation/tree/main/spec/predicates/scai.md
-
-attestation/test-result https://github.com/in-toto/attestation/tree/main/spec/predicates/test-result.md
-attestation/test-result/v* https://github.com/in-toto/attestation/tree/main/spec/predicates/test-result.md
-
-attestation/vulns https://github.com/in-toto/attestation/tree/main/spec/predicates/vuln.md
-attestation/vulns/v* https://github.com/in-toto/attestation/tree/main/spec/predicates/vuln.md
diff --git a/static/favicon.png b/static/favicon.png
deleted file mode 100644
index a06d8e5..0000000
Binary files a/static/favicon.png and /dev/null differ
diff --git a/static/favicons/android-chrome-192x192.png b/static/favicons/android-chrome-192x192.png
new file mode 100644
index 0000000..1a1b7ec
Binary files /dev/null and b/static/favicons/android-chrome-192x192.png differ
diff --git a/static/favicons/android-chrome-512x512.png b/static/favicons/android-chrome-512x512.png
new file mode 100644
index 0000000..44fcf8e
Binary files /dev/null and b/static/favicons/android-chrome-512x512.png differ
diff --git a/static/favicons/android-chrome-maskable-192x192.png b/static/favicons/android-chrome-maskable-192x192.png
new file mode 100644
index 0000000..b189ba8
Binary files /dev/null and b/static/favicons/android-chrome-maskable-192x192.png differ
diff --git a/static/favicons/android-chrome-maskable-512x512.png b/static/favicons/android-chrome-maskable-512x512.png
new file mode 100644
index 0000000..44fcf8e
Binary files /dev/null and b/static/favicons/android-chrome-maskable-512x512.png differ
diff --git a/static/favicons/apple-touch-icon.png b/static/favicons/apple-touch-icon.png
new file mode 100644
index 0000000..0700219
Binary files /dev/null and b/static/favicons/apple-touch-icon.png differ
diff --git a/static/favicons/favicon.ico b/static/favicons/favicon.ico
new file mode 100644
index 0000000..cc43089
Binary files /dev/null and b/static/favicons/favicon.ico differ
diff --git a/static/google6a6ae8b5b016a20d.html b/static/google6a6ae8b5b016a20d.html
new file mode 100644
index 0000000..524b7b4
--- /dev/null
+++ b/static/google6a6ae8b5b016a20d.html
@@ -0,0 +1 @@
+google-site-verification: google6a6ae8b5b016a20d.html
diff --git a/static/images/cncf-icon-white.svg b/static/images/cncf-icon-white.svg
new file mode 100644
index 0000000..77b4fda
--- /dev/null
+++ b/static/images/cncf-icon-white.svg
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/static/images/cncf-white.svg b/static/images/cncf-white.svg
new file mode 100644
index 0000000..d94aaf3
--- /dev/null
+++ b/static/images/cncf-white.svg
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/static/images/feedback.png b/static/images/feedback.png
new file mode 100644
index 0000000..24cbce8
Binary files /dev/null and b/static/images/feedback.png differ
diff --git a/static/images/in-toto-horizontal-white.svg b/static/images/in-toto-horizontal-white.svg
new file mode 100644
index 0000000..e5343b7
--- /dev/null
+++ b/static/images/in-toto-horizontal-white.svg
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/static/images/in-toto-metadata.png b/static/images/in-toto-metadata.png
new file mode 100644
index 0000000..fb41d9a
Binary files /dev/null and b/static/images/in-toto-metadata.png differ
diff --git a/static/images/no.png b/static/images/no.png
new file mode 100644
index 0000000..e44bf99
Binary files /dev/null and b/static/images/no.png differ
diff --git a/static/images/version-banner.png b/static/images/version-banner.png
new file mode 100644
index 0000000..270f8e9
Binary files /dev/null and b/static/images/version-banner.png differ
diff --git a/static/images/yes.png b/static/images/yes.png
new file mode 100644
index 0000000..dd39af7
Binary files /dev/null and b/static/images/yes.png differ
diff --git a/static/img/features/gears.png b/static/img/features/gears.png
deleted file mode 100644
index 82a5e74..0000000
Binary files a/static/img/features/gears.png and /dev/null differ
diff --git a/static/img/features/layout.png b/static/img/features/layout.png
deleted file mode 100644
index ea8c513..0000000
Binary files a/static/img/features/layout.png and /dev/null differ
diff --git a/static/img/features/metadata.png b/static/img/features/metadata.png
deleted file mode 100644
index dfe17c1..0000000
Binary files a/static/img/features/metadata.png and /dev/null differ
diff --git a/static/img/features/tool.png b/static/img/features/tool.png
deleted file mode 100644
index 9b666c5..0000000
Binary files a/static/img/features/tool.png and /dev/null differ
diff --git a/static/img/logos/archlinux.png b/static/img/logos/archlinux.png
deleted file mode 100644
index a501ea4..0000000
Binary files a/static/img/logos/archlinux.png and /dev/null differ
diff --git a/static/img/logos/control-plane.png b/static/img/logos/control-plane.png
deleted file mode 100644
index 19b13a7..0000000
Binary files a/static/img/logos/control-plane.png and /dev/null differ
diff --git a/static/img/logos/datadog.png b/static/img/logos/datadog.png
deleted file mode 100644
index 48c8cfe..0000000
Binary files a/static/img/logos/datadog.png and /dev/null differ
diff --git a/static/img/logos/debian.png b/static/img/logos/debian.png
deleted file mode 100644
index 97fea4d..0000000
Binary files a/static/img/logos/debian.png and /dev/null differ
diff --git a/static/img/logos/docker.png b/static/img/logos/docker.png
deleted file mode 100644
index f2b0deb..0000000
Binary files a/static/img/logos/docker.png and /dev/null differ
diff --git a/static/img/logos/git.png b/static/img/logos/git.png
deleted file mode 100644
index 18c5b29..0000000
Binary files a/static/img/logos/git.png and /dev/null differ
diff --git a/static/img/logos/in-toto-horizontal-black.png b/static/img/logos/in-toto-horizontal-black.png
deleted file mode 100644
index 6140fb1..0000000
Binary files a/static/img/logos/in-toto-horizontal-black.png and /dev/null differ
diff --git a/static/img/logos/in-toto-horizontal-color.png b/static/img/logos/in-toto-horizontal-color.png
deleted file mode 100644
index db53b96..0000000
Binary files a/static/img/logos/in-toto-horizontal-color.png and /dev/null differ
diff --git a/static/img/logos/in-toto-horizontal-white.png b/static/img/logos/in-toto-horizontal-white.png
deleted file mode 100644
index 8e35a09..0000000
Binary files a/static/img/logos/in-toto-horizontal-white.png and /dev/null differ
diff --git a/static/img/logos/in-toto-icon-black.png b/static/img/logos/in-toto-icon-black.png
deleted file mode 100644
index e8f6bac..0000000
Binary files a/static/img/logos/in-toto-icon-black.png and /dev/null differ
diff --git a/static/img/logos/in-toto-icon-color.png b/static/img/logos/in-toto-icon-color.png
deleted file mode 100644
index a06d8e5..0000000
Binary files a/static/img/logos/in-toto-icon-color.png and /dev/null differ
diff --git a/static/img/logos/in-toto-icon-white.png b/static/img/logos/in-toto-icon-white.png
deleted file mode 100644
index c03ff5d..0000000
Binary files a/static/img/logos/in-toto-icon-white.png and /dev/null differ
diff --git a/static/img/logos/in-toto-stacked-black.png b/static/img/logos/in-toto-stacked-black.png
deleted file mode 100644
index 3e3a16a..0000000
Binary files a/static/img/logos/in-toto-stacked-black.png and /dev/null differ
diff --git a/static/img/logos/in-toto-stacked-color.png b/static/img/logos/in-toto-stacked-color.png
deleted file mode 100644
index 1bc979f..0000000
Binary files a/static/img/logos/in-toto-stacked-color.png and /dev/null differ
diff --git a/static/img/logos/in-toto-stacked-white.png b/static/img/logos/in-toto-stacked-white.png
deleted file mode 100644
index e8821a6..0000000
Binary files a/static/img/logos/in-toto-stacked-white.png and /dev/null differ
diff --git a/static/img/logos/opensuse.png b/static/img/logos/opensuse.png
deleted file mode 100644
index 0e150a1..0000000
Binary files a/static/img/logos/opensuse.png and /dev/null differ
diff --git a/static/img/logos/repeatr.png b/static/img/logos/repeatr.png
deleted file mode 100644
index 80fac18..0000000
Binary files a/static/img/logos/repeatr.png and /dev/null differ
diff --git a/static/img/logos/reproducible-builds.svg b/static/img/logos/reproducible-builds.svg
deleted file mode 100644
index 42398cc..0000000
--- a/static/img/logos/reproducible-builds.svg
+++ /dev/null
@@ -1,107 +0,0 @@
-
-
-
diff --git a/themes/docsy b/themes/docsy
new file mode 160000
index 0000000..712aa05
--- /dev/null
+++ b/themes/docsy
@@ -0,0 +1 @@
+Subproject commit 712aa05897c1abe239786522131e83d69e5e1b4e
| - Version - | -- Description - | -
|---|---|
| - - {{ .version }} - - | -- {{ .description | markdownify }} - | -