Debian Package Tracker
Register | Log in
Subscribe

witness

software supply chain risk management framework (program)

Choose email to subscribe with

general
  • source: witness (main)
  • version: 0.10.2-2
  • maintainer: Debian Go Packaging Team (DMD)
  • uploaders: Simon Josefsson [DMD]
  • arch: all any
  • std-ver: 4.7.3
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • unstable: 0.10.2-2
versioned links
  • 0.10.2-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • golang-github-in-toto-witness-dev
  • witness
action needed
A new upstream version is available: 0.10.2-rc5 high
A new upstream version 0.10.2-rc5 is available, you should consider packaging it.
Created: 2026-03-21 Last update: 2026-03-22 18:00
lintian reports 1 warning normal
Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.
Created: 2026-03-21 Last update: 2026-03-21 05:01
testing migrations
  • excuses:
    • Blocked by: golang-google-cloud
    • Migrates after: cosign, golang-github-containerd-stargz-snapshotter, golang-github-in-toto-archivista, golang-github-in-toto-go-witness, golang-google-api, golang-google-genproto, sigstore-go
    • Migration status for witness (- to 0.10.2-2): Waiting for another item to be ready to migrate (no action required now - check later)
    • Issues preventing migration:
    • ∙ ∙ Built-Using: witness golang-google-cloud (not considered)
    • ∙ ∙ Invalidated by built-using
    • ∙ ∙ Build-Depends(-Arch): witness golang-github-in-toto-go-witness (not considered)
    • ∙ ∙ Built-Using: witness cosign
    • ∙ ∙ Built-Using: witness golang-github-containerd-stargz-snapshotter
    • ∙ ∙ Built-Using: witness golang-github-in-toto-archivista
    • ∙ ∙ Built-Using: witness golang-github-in-toto-go-witness (not considered)
    • ∙ ∙ Built-Using: witness golang-google-api (not considered)
    • ∙ ∙ Built-Using: witness golang-google-genproto
    • ∙ ∙ Built-Using: witness sigstore-go
    • Additional info (not blocking):
    • ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/w/witness.html
    • ∙ ∙ Autopkgtest for witness/0.10.2-2: amd64: Pass, arm64: Pass, i386: Pass
    • ∙ ∙ Reproduced on amd64
    • ∙ ∙ Reproduced on arm64
    • ∙ ∙ Reproduced on armhf
    • ∙ ∙ New but not reproduced on i386: witness
    • ∙ ∙ Reproduced on ppc64el
    • ∙ ∙ Required age reduced by 3 days because of autopkgtest
    • ∙ ∙ 2 days old (needed 2 days)
    • Not considered
news
[rss feed]
  • [2026-03-20] Accepted witness 0.10.2-2 (source) into unstable (Simon Josefsson)
  • [2026-03-20] Accepted witness 0.10.2-1 (source all amd64) into unstable (Debian FTP Masters) (signed by: Simon Josefsson)
bugs [bug history graph]
  • all: 0
links
  • homepage
  • lintian (0, 1)
  • buildd: logs, cross
  • popcon
  • browse source code
  • edit tags
  • other distros

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing