content: Release SLSA 1.2 (#1516)

This PR marks the official release of SLSA 1.2, retiring SLSA 1.1 and
SLSA 1.2 RC2.

It should not be merged until Monday November 24th at the earliest and
even then only if we've received no significant feedback on RC2.

I've tried [this
method](https://stackoverflow.com/questions/16937359/git-copy-file-preserving-history)
of retaining history when making copies to make it easier to understand
the changes made, but it didn't seem to work (as evidenced by the diffs
in this PR). I've had good success using meld to understand the
differences introduced. E.g. `meld docs/spec/v1.2-rc2 docs/spec/v1.2`.
This method shows only 3 files differing between v1.2-rc2 and v1.2:
index.md, onepage.md, and whats-new.md.

Per @lehors's suggestion this also removes SLSA 1.0 from the nav bar
(but it remains accessible).

refs #1515

---------

Signed-off-by: Tom Hennen <[email protected]>

Author: TomHennen

docs/_data/nav/config.yml

@@ -13,8 +13,9 @@ url_to_key:
   v1.1: v11
   v1.2-rc1: v12-rc1
   v1.2-rc2: v12-rc2
+  v1.2: v12
   v1: v11
-  latest: v11
+  latest: v12
 
 # TODO: when viewing spec v0.1, it would be better to link to attestations v0.2.
 # Not sure how to implement that though.

docs/_data/nav/main.yml

@@ -8,8 +8,8 @@
   url: /current-activities
   description: What the SLSA community is currently working on
 
-- title: SLSA v1.2 RC2
-  url: /spec/v1.2-rc2/
+- title: SLSA v1.2
+  url: /spec/v1.2/
   children:
 
   - title: Understanding SLSA
@@ -20,35 +20,35 @@
     children:
 
     - title: What's new
-      url: /spec/v1.2-rc2/whats-new
+      url: /spec/v1.2/whats-new
       description: The changes brought by this revision of SLSA.
 
     - title: About SLSA
-      url: /spec/v1.2-rc2/about
+      url: /spec/v1.2/about
       description: An introductory guide to SLSA
 
     - title: Supply chain threats
-      url: /spec/v1.2-rc2/threats-overview
+      url: /spec/v1.2/threats-overview
       description: An introduction to supply chain threats
 
     - title: Use cases
-      url: /spec/v1.2-rc2/use-cases
+      url: /spec/v1.2/use-cases
       description: Use cases
 
     - title: Guiding principles
-      url: /spec/v1.2-rc2/principles
+      url: /spec/v1.2/principles
       description: Use cases
 
     - title: FAQ
-      url: /spec/v1.2-rc2/faq
+      url: /spec/v1.2/faq
       description: Questions and more information
 
     - title: Future directions
-      url: /spec/v1.2-rc2/future-directions
+      url: /spec/v1.2/future-directions
       description: Additions and changes being considered for future SLSA versions
 
     - title: Tracks
-      url: /spec/v1.2-rc2/tracks
+      url: /spec/v1.2/tracks
       description: Provides an overview of each track and links to more specific information.
 
   - title: Build Track
@@ -59,27 +59,27 @@
     children:
 
     - title: Basics
-      url: /spec/v1.2-rc2/build-track-basics
+      url: /spec/v1.2/build-track-basics
       description: The SLSA build track is organized into a series of levels that provide increasing supply chain security guarantees. This gives you confidence that software hasn't been tampered with and can be securely traced back to its source. This page is a descriptive overview of the SLSA build track levels, describing their intent.
 
     - title: Terminology
-      url: /spec/v1.2-rc2/terminology
+      url: /spec/v1.2/terminology
       description: Terminology and model used by SLSA
 
     - title: Producing artifacts
-      url: /spec/v1.2-rc2/build-requirements
+      url: /spec/v1.2/build-requirements
       description: Detailed technical requirements for producing software artifacts, intended for platform implementers
 
     - title: Distributing provenance
-      url: /spec/v1.2-rc2/distributing-provenance
+      url: /spec/v1.2/distributing-provenance
       description: Detailed technical requirements for distributing provenance, intended for platform implementers and software distributors
 
     - title: Verifying artifacts
-      url: /spec/v1.2-rc2/verifying-artifacts
+      url: /spec/v1.2/verifying-artifacts
       description: Guidance for verifying software artifacts and their SLSA provenance, intended for platform implementers and software consumers
 
     - title: Assessing build platforms
-      url: /spec/v1.2-rc2/assessing-build-platforms
+      url: /spec/v1.2/assessing-build-platforms
       description: Guidelines for securing SLSA Build L3+ builders, intended for platform implementers
 
   - title: Source Track
@@ -90,27 +90,27 @@
     children:
 
     - title: Producing source
-      url: /spec/v1.2-rc2/source-requirements
+      url: /spec/v1.2/source-requirements
       description: Overview of the Source track
 
     - title: Verifying source
-      url: /spec/v1.2-rc2/verifying-source
+      url: /spec/v1.2/verifying-source
       description: Guidelines for verifying source provenance
 
     - title: Assessing source control systems
-      url: /spec/v1.2-rc2/assessing-source-systems
+      url: /spec/v1.2/assessing-source-systems
       description: Guidelines for assessing source control system security.
 
     - title: Example controls
-      url: /spec/v1.2-rc2/source-example-controls
+      url: /spec/v1.2/source-example-controls
       description: This page provides examples of additional controls that organizations may want to implement as they adopt the SLSA Source track.
 
   - title: Cross Track Information
     description: These pages describe information that crosses track boundaries.
     children:
 
     - title: Threats & mitigations
-      url: /spec/v1.2-rc2/threats
+      url: /spec/v1.2/threats
       description: Detailed information about specific supply chain attacks and how SLSA helps
 
   - title: Attestation formats
@@ -121,23 +121,23 @@
     children:
 
     - title: General model
-      url: /spec/v1.2-rc2/attestation-model
+      url: /spec/v1.2/attestation-model
       description: General attestation mode
 
     - title: Provenance
-      url: /spec/v1.2-rc2/provenance
+      url: /spec/v1.2/provenance
       description: Provides a description of the concept of provenance and links to the various tracks specific definitions.
 
     - title: Build Provenance
-      url: /spec/v1.2-rc2/build-provenance
+      url: /spec/v1.2/build-provenance
       description: Suggested build provenance format and explanation
 
     - title: Verification Summary
-      url: /spec/v1.2-rc2/verification_summary
+      url: /spec/v1.2/verification_summary
       description: Suggested VSA format and explanation
 
   - title: Single-page view
-    url: /spec/v1.2-rc2/onepage
+    url: /spec/v1.2/onepage
     skip_next_prev: true  # don't show as a next/prev link
 
 - title: SLSA v1.1
@@ -241,107 +241,6 @@
     url: /spec/v1.1/onepage
     skip_next_prev: true  # don't show as a next/prev link
 
-- title: SLSA v1.0
-  description: >
-    These pages describe SLSA's security levels and requirements for each track.
-    If you want to achieve SLSA a particular level, these are the requirements
-    you'll need to meet.
-  url: /spec/v1.0/
-  children:
-
-  - title: Understanding SLSA
-    description: >
-      These pages provide an overview of SLSA, how it helps protect against common
-      supply chain attacks, and common use cases. If you're new to SLSA or
-      supply chain security, start here.
-    children:
-
-    - title: What's new in v1.0
-      url: /spec/v1.0/whats-new
-      description: What's new in SLSA Version 1.0
-
-    - title: About SLSA
-      url: /spec/v1.0/about
-      description: An introductory guide to SLSA
-
-    - title: Supply chain threats
-      url: /spec/v1.0/threats-overview
-      description: An introduction to supply chain threats
-
-    - title: Use cases
-      url: /spec/v1.0/use-cases
-      description: Use cases
-
-    - title: Guiding principles
-      url: /spec/v1.0/principles
-      description: Use cases
-
-    - title: FAQ
-      url: /spec/v1.0/faq
-      description: Questions and more information
-
-    - title: Future directions
-      url: /spec/v1.0/future-directions
-      description: Additions and changes being considered for future SLSA versions
-
-  - title: Core specification
-    description: >
-      These pages describe SLSA's security levels and requirements for each track.
-      If you want to achieve SLSA a particular level, these are the requirements
-      you'll need to meet.
-    children:
-
-    - title: Terminology
-      url: /spec/v1.0/terminology
-      description: Terminology and model used by SLSA
-
-    - title: Security levels
-      url: /spec/v1.0/levels
-      description: Overview of SLSA's tracks and levels, intended for all audiences
-
-    - title: Producing artifacts
-      url: /spec/v1.0/requirements
-      description: Detailed technical requirements for producing software artifacts, intended for platform implementers
-
-    - title: Distributing provenance
-      url: /spec/v1.0/distributing-provenance
-      description: Detailed technical requirements for distributing provenance, intended for platform implementers and software distributors
-
-    - title: Verifying artifacts
-      url: /spec/v1.0/verifying-artifacts
-      description: Guidance for verifying software artifacts and their SLSA provenance, intended for platform implementers and software consumers
-
-    - title: Verifying build platforms
-      url: /spec/v1.0/verifying-systems
-      description: Guidelines for securing SLSA Build L3+ builders, intended for platform implementers
-
-    - title: Threats & mitigations
-      url: /spec/v1.0/threats
-      description: Detailed information about specific supply chain attacks and how SLSA helps
-
-  - title: Attestation formats
-    description: >
-      These pages include the concrete schemas for SLSA attestations. The
-      Provenance and VSA formats are recommended, but not required by the
-      specification.
-    children:
-
-    - title: General model
-      url: /spec/v1.0/attestation-model
-      description: General attestation mode
-
-    - title: Provenance
-      url: /spec/v1.0/provenance
-      description: Suggested provenance format and explanation
-
-    - title: Verification Summary
-      url: /spec/v1.0/verification_summary
-      description: Suggested VSA format and explanation
-
-  - title: Single-page view
-    url: /spec/v1.0/onepage
-    skip_next_prev: true  # don't show as a next/prev link
-
 - title: SLSA Working Draft
   url: /spec/draft/
   children: