Skip to content

nonspec: new website build strategy#1578

Merged
tombedfordgit merged 46 commits intoslsa-framework:mainfrom
lehors:pr-1329
Mar 5, 2026
Merged

nonspec: new website build strategy#1578
tombedfordgit merged 46 commits intoslsa-framework:mainfrom
lehors:pr-1329

Conversation

@lehors
Copy link
Member

@lehors lehors commented Feb 16, 2026 •
edited
Loading

This PR builds on PR #1329 started by @zachariahcox.

This is rebased on main latest, fixes a few issues with the build script and configuration, and brings a few improvements such as the publication of all spec versions without explicit specification in the script (so that it doesn't need to be edited every time a new version is produced).

Note: this will only work after the migration of the spec to branches has been done using the migrate-to-late-branch action.

lehors and others added 30 commits February 11, 2026 18:10
@lehors
fix: Fix Dev Container on ARM
106b05a 
Netlify 23.15.1 on ARM fails to install a working version of deno, so launching netlify then fails.
This installs the latest version of deno which works on ARM.

Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@zachariahcox @lehors
delete old spec
bc176f4 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
add build script
299f2f5 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
add a reset. should clean up the spec folders but not delete the buil…
b1d45a7 
…d folder

Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
loopify
4bf1189 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
loopify
e3d55b7 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
loopify
255e2cb 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
ignore build folder
fe7def7 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
netlify reads from build folder
7afe22e 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
do some fetches if needed
5f8b367 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
formatting
6114b28 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
Create devcontainer.json
4fee9ac 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
Update devcontainer.json
8f56e81 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
wip more dirs
11c4144 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
tune devcontainer
bfdcf3a 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
move published website stuff to www folder
fedfdc3 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
www doesn't store the spec
8906f29 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
update directory name
4c1860e 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
add some debug instructions
b6705db 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
Update netlify.toml
8a8ba33 
wrong directory

Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
Update combine-versions.sh
a2a351d 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
refactor, add workflow
46cad26 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
delete
cf07748 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@zachariahcox @lehors
make runnable.
dc9ec88 
Signed-off-by: Zachariah Cox <zachariahcox@gmail.com>
@lehors
Move draft from /docs/spec to /spec
4c82f4a 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Fix combine script
f79c24f 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
reverse fetch argument of combine script
9d65a9c 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Make sure we get the right git ref
a7b9fcf 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Combine all previous releases based on tag
cbaf61c 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
set BUNDLE_GEMFILE variable in netlify.toml
58cf1fb 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Make Gemfile env var relative to work locally
30b166b 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Please our pedantic linter
2eefe35 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Handle both attached and detached HEAD, improve output
dd54248 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Fix fetching branches
8526065 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Move combine-versions.sh to tools directory
b60b813 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Fix devcontainer config
2256ed5 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Cleanup doc about installation and deployment
8eb2273 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors lehors marked this pull request as ready for review February 20, 2026 10:02
@lehors
Update some remaining stale references to /docs
d4f1878 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Update github source link in page footer
e95c5fb 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Merge main
1acffa6 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
arewm
arewm approved these changes Mar 2, 2026
View reviewed changes
Copy link
Member

@arewm arewm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for this. We discussed it on the spec call today and I am looking forward to it!

@lehors
fix CONTRIBUTING.md
80c25b5 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@lehors
Fix netlify preview settings
d045bed 
Signed-off-by: Arnaud J Le Hors <lehors@us.ibm.com>
@arewm
Copy link
Member

arewm commented Mar 3, 2026

https://deploy-preview-1578--slsa.netlify.app/spec/v1.2/ is showing as a 404. Is that anticipated?

@lehors
Copy link
Member Author

lehors commented Mar 3, 2026

https://deploy-preview-1578--slsa.netlify.app/spec/v1.2/ is showing as a 404. Is that anticipated?

Yes. I figured out that the PR preview function wasn't working and fixed it but because the release branches haven't been created yet the website build is incomplete.

This has led me to try @zachariahcox's github action to create the release branches and found that it isn't actually working. I'm working on fixing it now.

Once that's fixed and the release branches are created I'm confident the preview function will be fully functional.

Stay tuned. :-)

@lehors lehors mentioned this pull request Mar 3, 2026
Merged
@lehors
Copy link
Member Author

lehors commented Mar 4, 2026

All fixed and ready to be merged! :-)
I have now run the updated migration action and created all the release branches. The preview has been rebuilt and you can now see above what the full version of the website will look like.

@arewm
Copy link
Member

arewm commented Mar 4, 2026

Looks good to me! We need one more maintainer approval before merging.

@SunShineHead
Copy link

SunShineHead commented Mar 5, 2026 •
edited
Loading

This PR builds on PR #1329 started by @zachariahcox.

This is rebased on main latest, fixes a few issues with the build script and configuration, and brings a few improvements such as the publication of all spec versions without explicit specification in the script (so that it doesn't need to be edited every time a new version is produced).

Note: this will only work after the migration of the spec to branches has been done using the migrate-to-late-branch action.

@lehors, apologies for the trouble, I'm new, please guide.

tombedfordgit
tombedfordgit approved these changes Mar 5, 2026
View reviewed changes
Copy link
Contributor

@tombedfordgit tombedfordgit left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me

@tombedfordgit tombedfordgit merged commit bc8d1b8 into slsa-framework:main Mar 5, 2026
6 checks passed
@github-project-automation github-project-automation bot moved this from 🆕 New to ✅ Done in Issue triage Mar 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@arewm arewm arewm approved these changes

@tombedfordgit tombedfordgit tombedfordgit approved these changes

@mlieberman85 mlieberman85 Awaiting requested review from mlieberman85

@paveliak paveliak Awaiting requested review from paveliak

@marcelamelara marcelamelara Awaiting requested review from marcelamelara

Assignees

No one assigned

Labels

None yet

Projects

Issue triage
Status: ✅ Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@lehors @arewm @SunShineHead @tombedfordgit @zachariahcox