)]}'
{
  "commit": "f4f9adf618cd85d330a896e1f721f3aa78d2409d",
  "tree": "92cf1a5ad3ac644c8ebfc66213f42ecba973047b",
  "parents": [
    "fbbdc39260cf37aa749e897e773f59807d1b8362"
  ],
  "author": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Thu Jan 13 14:10:03 2022 +0000"
  },
  "committer": {
    "name": "Michael Brown",
    "email": "mcb30@ipxe.org",
    "time": "Thu Jan 13 14:12:44 2022 +0000"
  },
  "message": "[efi] Include Secure Boot Advanced Targeting (SBAT) metadata\n\nSBAT defines an encoding for security generation numbers stored as a\nCSV file within a special \".sbat\" section in the signed binary.  If a\nSecure Boot exploit is discovered then the generation number will be\nincremented alongside the corresponding fix.\n\nPlatforms may then record the minimum generation number required for\nany given product.  This allows for an efficient revocation mechanism\nthat consumes minimal flash storage space (in contrast to the DBX\nmechanism, which allows for only a single-digit number of revocation\nevents to ever take place across all possible signed binaries).\n\nAdd SBAT metadata to iPXE EFI binaries to support this mechanism.\n\nSigned-off-by: Michael Brown \u003cmcb30@ipxe.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "66bf804e6fb7d95aa41b4f820be65657e9adffb5",
      "old_mode": 33188,
      "old_path": "src/arch/i386/scripts/i386-kir.lds",
      "new_id": "13c36f2bfa0b1a8263988d24ce1bc95cd31a9077",
      "new_mode": 33188,
      "new_path": "src/arch/i386/scripts/i386-kir.lds"
    },
    {
      "type": "modify",
      "old_id": "9f2eeaf3c55e26b4145c96afaef748e87ef1892a",
      "old_mode": 33188,
      "old_path": "src/arch/i386/scripts/linux.lds",
      "new_id": "8c3a7b0baaefde3d424b58a18aa4e10d12e95bd5",
      "new_mode": 33188,
      "new_path": "src/arch/i386/scripts/linux.lds"
    },
    {
      "type": "modify",
      "old_id": "de59adca9b6deeb90666d46772353b66f7b8b87e",
      "old_mode": 33188,
      "old_path": "src/arch/x86/scripts/pcbios.lds",
      "new_id": "e208b174b4f0cb0ddfcf72d54ab48a838e0fc665",
      "new_mode": 33188,
      "new_path": "src/arch/x86/scripts/pcbios.lds"
    },
    {
      "type": "modify",
      "old_id": "dce0930b59d51470838d2d02c17413a43b405d78",
      "old_mode": 33188,
      "old_path": "src/arch/x86/scripts/prefixonly.lds",
      "new_id": "2fe5b03be8540cde627548a63c2dc2ab6d74df72",
      "new_mode": 33188,
      "new_path": "src/arch/x86/scripts/prefixonly.lds"
    },
    {
      "type": "modify",
      "old_id": "47db21745d927db6ac53c3cadeaea2bd2af76ffe",
      "old_mode": 33188,
      "old_path": "src/arch/x86_64/scripts/linux.lds",
      "new_id": "a093787e595d789d7259fb13ff54c896270d0400",
      "new_mode": 33188,
      "new_path": "src/arch/x86_64/scripts/linux.lds"
    },
    {
      "type": "modify",
      "old_id": "e503dff9a5996e4c993deb584a099e95d4a502ff",
      "old_mode": 33188,
      "old_path": "src/config/branding.h",
      "new_id": "454bf0c03aca2bf20a06da2a41efc25cbd1414fe",
      "new_mode": 33188,
      "new_path": "src/config/branding.h"
    },
    {
      "type": "modify",
      "old_id": "c984335c23bde6b6afa6d7f3ee3dadb0e3b9db9e",
      "old_mode": 33188,
      "old_path": "src/core/version.c",
      "new_id": "22f4440652e5dd153d73e370552611b85c960623",
      "new_mode": 33188,
      "new_path": "src/core/version.c"
    },
    {
      "type": "add",
      "old_id": "0000000000000000000000000000000000000000",
      "old_mode": 0,
      "old_path": "/dev/null",
      "new_id": "4b74670eded2c9474b0729940733544e833f128b",
      "new_mode": 33188,
      "new_path": "src/include/ipxe/sbat.h"
    },
    {
      "type": "modify",
      "old_id": "dd7b3f0195a763846a180ad49017d6af5347626d",
      "old_mode": 33188,
      "old_path": "src/scripts/efi.lds",
      "new_id": "218b1df663f224d0394e6fad08834540cde4ed33",
      "new_mode": 33188,
      "new_path": "src/scripts/efi.lds"
    }
  ]
}