← Home

@cloud-copilot/iam-collect

npm Repository Homepage
51
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures gitHead linked

Maintainers

davidjkerber

Keywords

AWSIAM

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): Transition to GitHub Actions CI publishing with SLSA attestation; consistent with legitimate automation migration for this package. ai
publish-pattern new-deps-added AI (publish-pattern): New dep is an official AWS SDK client (@aws-sdk/client-config-service); fits the package's pattern of adding AWS service coverage. ai
dependencies unvetted-dep:@cloud-copilot/log AI (dependencies): Same-org dependency from cloud-copilot; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@aws-sdk/client-glacier AI (dependencies): Official AWS SDK v3 client; well-known and trusted. ai
dependencies unvetted-dep:@cloud-copilot/cli AI (dependencies): Same-org dependency from cloud-copilot; stable pattern across all versions of this package. ai
dependencies unvetted-dep:@aws-sdk/client-api-gateway AI (dependencies): Official AWS SDK v3 client; well-known and trusted. ai
dependencies unvetted-dep:@aws-sdk/client-s3-control AI (dependencies): Official AWS SDK v3 client; well-known and trusted. ai
dependencies unvetted-dep:@cloud-copilot/job AI (dependencies): Same-org dependency from cloud-copilot; stable pattern across all versions of this package. ai

Versions (showing 51 of 206)

View all versions
Version Deps Published
0.1.207 41 / 15
0.1.206 41 / 15
0.1.205 40 / 15
0.1.204 40 / 15
0.1.203 40 / 15
0.1.202 40 / 15
0.1.201 40 / 15
0.1.200 40 / 15
0.1.199 40 / 15
0.1.198 40 / 15
0.1.197 40 / 15
0.1.196 40 / 15
0.1.195 40 / 15
0.1.194 40 / 15
0.1.193 40 / 15
0.1.192 40 / 15
0.1.191 40 / 15
0.1.190 40 / 15
0.1.189 40 / 15
0.1.188 40 / 15
0.1.187 40 / 15
0.1.186 40 / 15
0.1.185 40 / 15
0.1.184 40 / 15
0.1.183 40 / 15
0.1.182 40 / 15
0.1.181 40 / 15
0.1.180 39 / 15
0.1.179 39 / 15
0.1.178 39 / 15
0.1.177 39 / 15
0.1.176 39 / 15
0.1.175 39 / 15
0.1.174 39 / 15
0.1.173 39 / 15
0.1.172 39 / 15
0.1.171 39 / 15
0.1.170 39 / 15
0.1.169 39 / 15
0.1.168 39 / 15
0.1.167 39 / 15
0.1.166 39 / 15
0.1.165 39 / 15
0.1.164 39 / 15
0.1.163 39 / 15
0.1.162 39 / 15
0.1.161 39 / 15
0.1.160 39 / 15
0.1.159 39 / 15
0.1.158 39 / 15
0.1.157 39 / 15

v0.1.207

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.206

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.205

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.204

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.203

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.202

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.201

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.200

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.199

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.1.198

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.