Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nonspec: remove unused and outdated motivating example #945

Merged
merged 2 commits into from
Aug 21, 2023

Conversation

joshuagl
Copy link
Member

@joshuagl joshuagl commented Aug 17, 2023

The motivating example page is not referenced/linked to by any other
content and has fallen out of date with SLSA v1.

Fixes: #943

Signed-off-by: joshua.lock@uk.verizon.com

@netlify
Copy link

netlify bot commented Aug 17, 2023

Deploy Preview for slsa ready!

Name Link
🔨 Latest commit ec6966a
🔍 Latest deploy log https://app.netlify.com/sites/slsa/deploys/64e327c6659d440008a6deb2
😎 Deploy Preview https://deploy-preview-945--slsa.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Copy link
Member

@MarkLodato MarkLodato left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 to removing.

Is it worth redirecting to https://github.com/slsa-framework/slsa/blob/a25364a3b312f572e4620c812820249853bb40e5/docs/example.md? In general I prefer keeping URLs working forever, but in this case I don't know if anyone cares.

@joshuagl
Copy link
Member Author

I agree with the goal of having URLs continue to work, so I will set up the redirect even though I'm not sure anyone cares.

joshuagl added a commit to joshuagl/slsa that referenced this pull request Aug 18, 2023
There are several places in the generated site where links are broken because
they still include the .md file extension. It's unclear why
jekyll-relative-links is broken _only_ in these instances, but this surgical
change resolves broken links on the site until the wider issue can be addressed.

Before this patch:
```
% git grep --color --no-index 'href="[^h][^"]*\.md' _site
_site/blog.html:the valuable feedback we received on the <a href="2023-02-24-sls
a-v1-rc.md">first release candidate</a>. This is
_site/blog.html:      <p>Interested in getting involved? Now’s the chance to <a href="2023-02-24-slsa-v1-rc.md">provide your feedback on the foundational v1 release of the SLSA framework.</a></p>
_site/example.html:<p>SLSA 4 <a href="requirements.md">requires</a> two-party source control and hermetic builds.
_site/how-to-orgs.html:<a href="/provenance/v1.md">https://slsa.dev/provenance/</a>.</p>
_site/spec/v1.0-rc2/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0-rc2/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0-rc2/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
_site/spec/v1.0-rc2/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
_site/spec/v1.0/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
_site/spec/v1.0/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
```

-   the two blog.html instances are resolved by editing the individual blog
    posts to remove the .md file extension
-   the example.html instance will be resolved by slsa-framework#945
-   how-to-orgs.html is fixed by removing the .md extension line 20 of
    how-to-orgs.md
-   the v1.0-rc2 threats and onepage are fixed by removing the .md extension in
    lines 40 and 49 of spec/v1.0-rc2/threats.md
-   the v1.0 threats and onepage are fixed by removing the .md extension in
    lines 40 and 49 spec/v1.0/threats.md

Following these changes:

```
% git grep --color --no-index 'href="[^h][^"]*\.md' _site
_site/example.html:<p>SLSA 4 <a href="requirements.md">requires</a> two-party source control and hermetic builds.
```

which is resolved by the removal of example.md in PR#945

Signed-off-by: Joshua Lock <joshuagloe@gmail.com>
joshuagl added a commit to joshuagl/slsa that referenced this pull request Aug 21, 2023
There are several places in the generated site where links are broken because
they still include the .md file extension. It's unclear why
jekyll-relative-links is broken _only_ in these instances, but this surgical
change resolves broken links on the site until the wider issue can be addressed.

Before this patch:
```
% git grep --color --no-index 'href="[^h][^"]*\.md' _site
_site/blog.html:the valuable feedback we received on the <a href="2023-02-24-sls
a-v1-rc.md">first release candidate</a>. This is
_site/blog.html:      <p>Interested in getting involved? Now’s the chance to <a href="2023-02-24-slsa-v1-rc.md">provide your feedback on the foundational v1 release of the SLSA framework.</a></p>
_site/example.html:<p>SLSA 4 <a href="requirements.md">requires</a> two-party source control and hermetic builds.
_site/how-to-orgs.html:<a href="/provenance/v1.md">https://slsa.dev/provenance/</a>.</p>
_site/spec/v1.0-rc2/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0-rc2/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0-rc2/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
_site/spec/v1.0-rc2/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
_site/spec/v1.0/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
_site/spec/v1.0/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
```

-   the two blog.html instances are resolved by editing the individual blog
    posts to remove the .md file extension
-   the example.html instance will be resolved by slsa-framework#945
-   how-to-orgs.html is fixed by removing the .md extension line 20 of
    how-to-orgs.md
-   the v1.0-rc2 threats and onepage are fixed by removing the .md extension in
    lines 40 and 49 of spec/v1.0-rc2/threats.md
-   the v1.0 threats and onepage are fixed by removing the .md extension in
    lines 40 and 49 spec/v1.0/threats.md

Following these changes:

```
% git grep --color --no-index 'href="[^h][^"]*\.md' _site
_site/example.html:<p>SLSA 4 <a href="requirements.md">requires</a> two-party source control and hermetic builds.
```

which is resolved by the removal of example.md in PR#945

Signed-off-by: Joshua Lock <joshuagloe@gmail.com>
Signed-off-by: Joshua Lock <joshuagloe@gmail.com>
Signed-off-by: Joshua Lock <joshuagloe@gmail.com>
@joshuagl joshuagl merged commit 32b9c5b into slsa-framework:main Aug 21, 2023
6 checks passed
@joshuagl joshuagl deleted the joshuagl/rm-example branch August 21, 2023 09:01
renovate-bot pushed a commit to renovate-bot/slsa that referenced this pull request Aug 22, 2023
There are several places in the generated site where links are broken
because:

* the generated HTML still includes the .md file extension. It's unclear
  why jekyll-relative-links is broken _only_ in these instances.
* the link is to a moved file in the in-toto/attestation git repository
* the link was to a file in our projcet which has moved
* the link was always bad (i.e. a link to nist.gov with no proto)

This surgical change resolves broken links on the site until the wider
issues (disable jekyll-relative-links and broken link detection) can be
addressed in issue slsa-framework#938.

On broken jekyll-relative-links, specifically, before this patch:
```
% git grep --color --no-index 'href="[^h][^"]*\.md' _site
_site/blog.html:the valuable feedback we received on the <a href="2023-02-24-sls
a-v1-rc.md">first release candidate</a>. This is
_site/blog.html:      <p>Interested in getting involved? Now’s the chance to <a href="2023-02-24-slsa-v1-rc.md">provide your feedback on the foundational v1 release of the SLSA framework.</a></p>
_site/example.html:<p>SLSA 4 <a href="requirements.md">requires</a> two-party source control and hermetic builds.
_site/how-to-orgs.html:<a href="/provenance/v1.md">[https://slsa.dev/provenance/</a>.</p](https://slsa.dev/provenance/%3C/a%3E.%3C/p)>
_site/spec/v1.0-rc2/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0-rc2/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0-rc2/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
_site/spec/v1.0-rc2/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
_site/spec/v1.0/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0/onepage.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="#future-directions.md">future
_site/spec/v1.0/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
_site/spec/v1.0/threats.html:<p>SLSA v1.0 does not address this threat, but it may be addressed in a <a href="future-directions.md">future
```

- the two blog.html instances are resolved by editing the individual
blog
    posts to remove the .md file extension
- the example.html instance will be resolved by
slsa-framework#945
-   how-to-orgs.html is fixed by removing the .md extension line 20 of
    how-to-orgs.md
- the v1.0-rc2 threats and onepage are fixed by removing the .md
extension in
    lines 40 and 49 of spec/v1.0-rc2/threats.md
- the v1.0 threats and onepage are fixed by removing the .md extension
in
    lines 40 and 49 spec/v1.0/threats.md

Following these changes:

```
% git grep --color --no-index 'href="[^h][^"]*\.md' _site
_site/example.html:<p>SLSA 4 <a href="requirements.md">requires</a> two-party source control and hermetic builds.
```

which is resolved by the removal of example.md in PR slsa-framework#945

Signed-off-by: Joshua Lock <joshuagloe@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

Update or remove motivating example
2 participants