You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: PROVENANCE.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,15 +5,15 @@ LaunchDarkly uses the [SLSA framework](https://slsa.dev/spec/v1.0/about) (Supply
5
5
As part of [SLSA requirements for level 3 compliance](https://slsa.dev/spec/v1.0/requirements), LaunchDarkly publishes provenance about our package builds using [GitHub's generic SLSA3 provenance generator](https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#generation-of-slsa3-provenance-for-arbitrary-projects) for distribution alongside our packages.
6
6
7
7
<!-- x-release-please-start-version -->
8
-
These attestations are available for download from the GitHub release page for the release version under Assets > `ldcli_1.16.0_multiple_provenance.intoto.jsonl`.
8
+
These attestations are available for download from the GitHub release page for the release version under Assets > `ldcli_1.16.1_multiple_provenance.intoto.jsonl`.
9
9
<!-- x-release-please-end -->
10
10
11
11
To verify SLSA provenance attestations, we recommend using [slsa-verifier](https://github.com/slsa-framework/slsa-verifier). Example usage for verifying packages for Linux is included below:
Copy file name to clipboardExpand all lines: README.md
+6Lines changed: 6 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -121,6 +121,12 @@ Additional documentation is available at https://docs.launchdarkly.com/home/gett
121
121
122
122
We encourage pull requests and other contributions from the community. Check out our [contributing guidelines](CONTRIBUTING.md) for instructions on how to contribute to this project.
123
123
124
+
### Running a local build of the CLI
125
+
If you wish to test your changes locally, simply
126
+
1. Clone this repo to your local machine;
127
+
2. Run `make build` from the repo root;
128
+
3. Run commands as usual with `./ldcli`.
129
+
124
130
## Verifying build provenance with the SLSA framework
125
131
126
132
LaunchDarkly uses the [SLSA framework](https://slsa.dev/spec/v1.0/about) (Supply-chain Levels for Software Artifacts) to help developers make their supply chain more secure by ensuring the authenticity and build integrity of our published packages. To learn more, see the [provenance guide](./PROVENANCE.md).
0 commit comments