deno/cli
Divy Srivastava 9b5d2f8c1b
feat(publish): provenance attestation (#22573)
Supply chain security for JSR.

```
$ deno publish --provenance

Successfully published @divy/test_provenance@0.0.3
Provenance transparency log available at https://search.sigstore.dev/?logIndex=73657418
```

0. Package has been published.
1. Fetches the version manifest and verifies it's matching with uploaded
files and exports.
2. Builds the attestation SLSA payload using Github actions env.
3. Creates an ephemeral key pair for signing the github token
(aud=sigstore) and DSSE pre authentication tag.
4. Requests a X.509 signing certificate from Fulcio using the challenge
and ephemeral public key PEM.
5. Prepares a DSSE envelop for Rekor to witness. Posts an intoto entry
to Rekor and gets back the transparency log index.
6. Builds the provenance bundle and posts it to JSR.
2024-02-28 07:58:02 +05:30
..
args feat(publish): provenance attestation (#22573) 2024-02-28 07:58:02 +05:30
bench chore: move test_util/std to tests/util/std (#22402) 2024-02-13 09:22:49 -07:00
cache perf(jsr): fast check cache and lazy fast check graph (#22485) 2024-02-20 21:29:57 +00:00
js refactor(cli): move op sanitizer to Rust (#22413) 2024-02-16 21:22:12 +00:00
lsp fix(unstable): sloppy imports should resolve .d.ts files during types resolution (#22602) 2024-02-27 18:30:21 +00:00
napi 1.41.0 (#22524) 2024-02-22 02:44:05 +01:00
npm feat(lockfile): track JSR and npm dependencies in config file (#22004) 2024-01-22 22:31:12 +01:00
ops refactor(cli): move op sanitizer to Rust (#22413) 2024-02-16 21:22:12 +00:00
schemas fix(lsp): add schema for JSR related config options (#22497) 2024-02-20 13:49:24 +00:00
standalone fix(ext/node): set correct process.argv0 (#22555) 2024-02-23 17:30:29 +01:00
tools feat(publish): provenance attestation (#22573) 2024-02-28 07:58:02 +05:30
tsc chore: bump deno_core (#22596) 2024-02-27 08:05:57 -07:00
util feat(publish): support sloppy imports and bare node built-ins (#22588) 2024-02-27 15:13:16 +00:00
auth_tokens.rs fix(cli): Add IP address support to DENO_AUTH_TOKEN (#22297) 2024-02-06 19:45:40 +01:00
build.rs chore: bump deno_core (#22596) 2024-02-27 08:05:57 -07:00
Cargo.toml feat(publish): provenance attestation (#22573) 2024-02-28 07:58:02 +05:30
cdp.rs refactor(tools/repl): reorganize code (#21810) 2024-01-05 16:14:58 +01:00
deno.ico fix(cli): add icon and metadata to deno.exe on Windows (#6693) 2020-07-15 21:54:38 +02:00
deno_std.rs 1.41.0 (#22524) 2024-02-22 02:44:05 +01:00
emit.rs refactor: load bytes in deno_graph (#22212) 2024-02-01 03:15:22 +00:00
entitlements.plist chore: start codesigning mac release builds (#21303) 2023-11-23 15:30:26 -07:00
errors.rs fix: upgrade to deno_ast 0.33 (#22341) 2024-02-09 01:40:26 +00:00
factory.rs feat(publish): support sloppy imports and bare node built-ins (#22588) 2024-02-27 15:13:16 +00:00
file_fetcher.rs feat(unstable): single checksum per JSR package in the lockfile (#22421) 2024-02-15 14:49:35 -05:00
graph_util.rs fix(unstable): sloppy imports should resolve .d.ts files during types resolution (#22602) 2024-02-27 18:30:21 +00:00
http_util.rs chore: update copyright to 2024 (#21753) 2024-01-01 19:58:21 +00:00
integration_tests_runner.rs chore: continue tests/ re-org (#22396) 2024-02-12 17:13:14 -07:00
js.rs chore: bump deno_core (#22596) 2024-02-27 08:05:57 -07:00
main.rs fix: upgrade to deno_ast 0.33 (#22341) 2024-02-09 01:40:26 +00:00
mainrt.rs feat: denort binary for deno compile (#22205) 2024-02-13 21:52:30 +05:30
module_loader.rs feat(publish): type check on publish (#22506) 2024-02-21 08:35:25 -05:00
node.rs fix: upgrade to deno_ast 0.33 (#22341) 2024-02-09 01:40:26 +00:00
README.md docs(cli): do not need gen doc for cli (#17260) 2023-01-04 13:19:58 +01:00
resolver.rs fix(unstable): sloppy imports should resolve .d.ts files during types resolution (#22602) 2024-02-27 18:30:21 +00:00
version.rs chore: update copyright to 2024 (#21753) 2024-01-01 19:58:21 +00:00
worker.rs fix(ext/node): set correct process.argv0 (#22555) 2024-02-23 17:30:29 +01:00

Deno CLI Crate

crates

This provides the actual deno executable and the user-facing APIs.

The deno crate uses the deno_core to provide the executable.