All pull requests

Pull requests

• asr: return 400 for invalid AAEL request bodies

  #1813·1hcoj opened Oct 15, 2026Contributor·

  ·

• chore(deps): Bump jwt-simple from 0.13.1 to 0.15.0

  dependenciesrust
  #1812·dependabot[bot] opened Oct 15, 2026Bot·

  ·

• chore(deps): Bump uuid from 1.26.1 to 1.27.0

  dependenciesrust
  #1811·dependabot[bot] opened Oct 15, 2026Bot·

  ·

• workflows: don't pin oras cli version

  #1810·fitzthum opened Oct 14, 2026Member·

  ·
  1

• Update NVAT and stop building from source

  #1798·fitzthum opened Oct 9, 2026Member·

  ·
  12

• chore(deps): Bump rustls from 0.23.40 to 0.23.45 in the cargo group across 1 directory

  dependenciesrust
  #1793·dependabot[bot] opened Oct 6, 2026Bot·

  ·
  3

• aa: record initdata in RTMR3 when MRCONFIGID is unset

  #1787·david-long1 opened Oct 4, 2026Contributor·

  ·
  41

• fix(coco_keyprovider): fail when the KBS rejects a KEK registration

  #1736·tjw-ecora opened Sep 16, 2026·

  ·
  1

• KBS Protocol | Add TEE Metadata to Request.extra-params

  #1735·Xynnn007 opened Sep 16, 2026Member·

  ·
  26

• kbs-protocol: Include machine type in RCAR request

  #1731·annu0905 opened Sep 14, 2026·

  ·
  7

• coco_keyprovider: encrypt images against a non-exportable DSM KEK, and unwrap them inside DSM

  #1727·shashn-fortanix opened Sep 12, 2026Contributor·

  ·
  7

• fix(coco_keyprovider): enable a TLS backend so an https KBS is reachable

  #1724·tjw-ecora opened Sep 9, 2026·

  ·
  4

• Fortanix ccm_kbc and ccm_as integration

  #1722·kiran-kannur opened Sep 7, 2026·

  ·
  16

• cdh: propose confidential persistent volumes

  #1715·noeljackson opened Sep 4, 2026·

  ·
  1

• attestation-agent: add unit tests for lib, initdata, aa_kbc_params, token, eventlog

  #1709·supritai opened Sep 1, 2026Contributor·

  ·
  5

• aa/attester: add support for setting SNP VMPLs in TSM Reports and refactor TSM Report generation tracking

  #1696·amd-cmaxwell opened Aug 27, 2026Contributor·

  ·
  1

• cdh: add crash-safe persistent LUKS volumes

  #1648·chalabi2 opened Aug 10, 2026·

  ·
  17

• feat(image-rs): support WASM OCI layer media types

  #1629·rodneyosodo opened Aug 5, 2026·

  ·
  5

• image-rs: apply default signedIdentity for cosign policy

  #1590·Xynnn007 opened Jul 24, 2026Member·

  ·
  2

• image-rs: make mtime restoration best-effort during unpack

  #1586·gaganhr94 opened Jul 23, 2026Contributor·

  ·
  1

  11

• image-rs: dispatch OpenPGP signature verification to blocking thread pool

  #1560·mkulke with CopilotAI opened Jul 15, 2026·

  ·
  1

  4

  

• image-rs: add conformance test for image pulling

  #1480·fitzthum opened May 19, 2026Member·

  ·
  6

• Attester: remove libtdx feature for TDX attester

  #1470·Xynnn007 opened May 13, 2026Member·

  ·
  15

• AA: bring initdata validation logic to Initdata validator

  #1406·Xynnn007 opened Apr 8, 2026Member·

  ·
  8

• Add a compatibility matrix

  #1259·bpradipt opened Jan 7, 2026Member·

  ·
  20