Ecosyste.ms: Timeline
Browse the timeline of events for every public repo on GitHub. Data updated hourly from GH Archive.
spencerschrock created a comment on an issue on ossf/scorecard
Can you link or paste the usage that wasn't caught?
spencerschrock created a review comment on a pull request on ossf/scorecard
does `v1` imply predicate stability? Should this be v0.1 like in this comment? https://github.com/ossf/scorecard/issues/3352#issuecomment-2368655593
spencerschrock created a review comment on a pull request on ossf/scorecard
is this intentionally still in here? or leftover?
spencerschrock created a review comment on a pull request on ossf/scorecard
do we envision any configuration we'd want to do independent of the JSON where we should we define an AsStatementOption (or `AsIntotoOption` depending on other comment)? (also: typo in `Attestat...
spencerschrock created a review comment on a pull request on ossf/scorecard
changing the error return like this is a breaking change here if any library callers are checking for `ErrScorecardInternal`.
spencerschrock created a review comment on a pull request on ossf/scorecard
discussion: any preference on `statement` vs `intoto` ?
spencerschrock pushed 1 commit to optimize-chunk spencerschrock/model-transparency
- change default chunk size to 1 MB This value was based on the benchmarks in f0a6e96. Signed-off-by: Spencer Schrock... b77baf6
spencerschrock created a review comment on a pull request on sigstore/model-transparency
This change wasn't benchmarked (but also isn't required to have good performance), but changed for unity.
spencerschrock created a comment on a pull request on sigstore/model-transparency
I want to test this on a Windows system as well before marking ready.
spencerschrock opened a draft pull request on sigstore/model-transparency
change default chunk size to 1 MB
#### Summary change default chunk size to 1 MB This value was based on the benchmarks in f0a6e96. #### Release Note * Fine-tuned a lower level parameter used when hashing files, resulting i...
spencerschrock pushed 1 commit to optimize-chunk spencerschrock/model-transparency
- change default chunk size to 1 MB This value was based on the benchmarks in f0a6e96. Signed-off-by: Spencer Schrock... 5b7febd
spencerschrock created a branch on spencerschrock/model-transparency
optimize-chunk - Supply chain security for ML
spencerschrock pushed 1 commit to chunk spencerschrock/model-transparency
- avoid invalid pytype directive syntax Signed-off-by: Spencer Schrock <[email protected]> 1e13597
spencerschrock created a review comment on a pull request on sigstore/model-transparency
float, because `**` and `pow` could return floats depending on the exponent. (full details in upstream issue) ``` error: in _default_sizes: bad option 'list[float]' in return type [bad-return-t...
spencerschrock created a review comment on a pull request on sigstore/model-transparency
building on top of the `serialize` module was convenient, but can re-invent the wheel if needed.
spencerschrock opened a pull request on sigstore/model-transparency
add chunk size experiment
#### Summary Adds a simple experiment to vary chunk size, built on top of #306 So far, the experiment has shown similar results on two different machines (ARM64 macOS and x86 Linux), and on two...
spencerschrock pushed 1 commit to chunk spencerschrock/model-transparency
- add chunk size experiment So far, the experiment has shown similar results on two different machines (ARM64 macOS an... 84ac915
spencerschrock created a review comment on a pull request on sigstore/model-transparency
Ack. The recursive import wasn't clear from the diff or PR description, but I understand now.
spencerschrock created a review comment on a pull request on sigstore/model-transparency
Does the `from model_signing.signing` prefix avoid the confusion? To clarify, is this to help library users to avoid the confusion?