crypt/cosign
1
0
Fork 0
mirror of synced 2026-10-24 12:59:22 +03:00
Code Activity
3,261 Commits 14 Branches 84 Tags
main
Commit Graph

120 Commits

Author SHA1 Message Date
Carlos Tadeu Panato Junior
c4df857865 update builder image and cosign (#5179) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2026-10-21 08:24:02 -07:00
Hayden
3428d3c221 Build releases with 1.27.3 (#5177) 
* Build releases with 1.27.3

This picks up a security fix - https://groups.google.com/g/golang-announce/c/66pojueaQek/m/tmWX2Pq9AgAJ

Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>

* Update validate-release.yml

Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>

* Bump sigstore/sigstore, set go version directive to 1.27

Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>

---------

Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>
 2026-10-20 09:45:40 -07:00
Carlos Tadeu Panato Junior
e9a91ea113 update builder images to use go1.27.1 (#5107) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2026-09-15 13:27:35 -04:00
Stefan Kuhn
ef3e3b446a fix(release): restore signing-step auth and fail on image signing errors (#4978) 
Signed-off-by: Stefan Kuhn <stefan.kuhn.zurich@gmail.com>
 2026-07-05 20:38:23 +00:00
Carlos Tadeu Panato Junior
a44f389f94 update builder to use go1.26.4 (#4949) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2026-06-15 09:51:21 -07:00
Hayden
7914231b34 Fix build for Go version 1.26.3 (#4933) 
Needed to update the identity string as well. Also downgrade the
Dockerfile version to match the release version, will bump all at once
when there's a new golang-cross builder.

Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>
 2026-06-09 08:10:44 -04:00
Carlos Tadeu Panato Junior
7465055093 update builder to use go1.26.3 (#4885) 2026-05-24 14:27:11 +02:00
Hayden
f5373b0660 Switch from cosign copy to oras copy (#4819) 
cosign copy does not copy referring artifacts, so we'll use oras instead
as part of the build step.

Fixes #4818

Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>
 2026-05-06 16:40:07 -04:00
Carlos Tadeu Panato Junior
b7fd27da5e update golang builder to use go1.25.7 (#4687) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2026-02-17 11:52:34 -08:00
Carlos Tadeu Panato Junior
b5978d89f6 update builder to use go1.25.5 (#4566) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-12-08 09:59:10 -05:00
Carlos Tadeu Panato Junior
2d110ab451 update go builder and cosign (#4529) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-11-17 13:51:46 +01:00
Carlos Tadeu Panato Junior
03ab1867f7 update go to 1.25.3 (#4471) 2025-10-17 20:22:40 +02:00
Carlos Tadeu Panato Junior
da0a2f61d4 bump go builder to use 1.25.1 and cosign (#4417) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-09-18 21:43:16 +00:00
Carlos Tadeu Panato Junior
fbb7ca11b5 update builder image to use go1.25 (#4366) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-08-27 14:45:13 +02:00
Carlos Tadeu Panato Junior
1059a8007c update builder to use go1.24.6 (#4334) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-08-08 08:22:47 -07:00
Carlos Tadeu Panato Junior
2ee22fcdf5 force when copying the latest image to overwrite (#4298) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-07-16 07:19:36 -07:00
Carlos Tadeu Panato Junior
e55fd5dd65 use go1.24.5 to build cosign (#4278) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-07-09 09:47:12 -07:00
Carlos Tadeu Panato Junior
fb26ffdf7e update builder to use go1.24.4 (#4241) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-06-12 19:18:08 +02:00
Carlos Tadeu Panato Junior
5e89f03618 update builder to use go1.24.3 (#4195) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-05-07 07:52:53 -04:00
Carlos Tadeu Panato Junior
55e4f02bd9 update builder image to use go1.24.2 (#4164) 
Signed-off-by: Carlos Panato <ctadeu@gmail.com>
 2025-04-14 13:36:07 +00:00
Bob Callaway
3ce3080775 ensure we copy the latest tags on each release (#4157) 
Signed-off-by: Bob Callaway <bcallaway@google.com>
 2025-04-09 14:19:09 +00:00
Carlos Tadeu Panato Junior
8d5a5c1aaf update builder to use go1.24.1 (#4116) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2025-03-17 11:41:54 -04:00
Carlos Tadeu Panato Junior
beb9cf21bc update builder to use go1.24 (#4088) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2025-02-26 08:33:45 -05:00
Carlos Tadeu Panato Junior
d0a8aa2413 Udpate builder to use go1.23.6 (#4052) 
* use go1.23.6 to build cosign

Signed-off-by: cpanato <ctadeu@gmail.com>

* use same golangci-lint version

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
 2025-02-08 15:50:43 +00:00
Carlos Tadeu Panato Junior
2c100706c3 update builder to use go1.23.4 (#3985) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2024-12-23 13:52:41 +01:00
Bob Callaway
6094066552 bump sigstore-conformance to v0.0.14 release (#3965) 
* pin conformance tests to the tip of main

Signed-off-by: Bob Callaway <bcallaway@google.com>

* add file_or_digest parsing

Signed-off-by: Bob Callaway <bcallaway@google.com>

* fix lint

Signed-off-by: Bob Callaway <bcallaway@google.com>

* add tentative support for passing digest

Signed-off-by: Bob Callaway <bcallaway@google.com>

* fix lint

Signed-off-by: Bob Callaway <bcallaway@google.com>

* bump sigstore-go up to latest release

Signed-off-by: Bob Callaway <bcallaway@google.com>

* bump to latest on sigstore-go

Signed-off-by: Bob Callaway <bcallaway@google.com>

* go mod tidy

Signed-off-by: Bob Callaway <bcallaway@google.com>

* fixes for sigstore-go

Signed-off-by: Bob Callaway <bcallaway@google.com>

* fix go version, e2e tests

Signed-off-by: Bob Callaway <bcallaway@google.com>

* remove sign/verify

Signed-off-by: Bob Callaway <bcallaway@google.com>

* pin at 0.0.14

Signed-off-by: Bob Callaway <bcallaway@google.com>

* fix lint

Signed-off-by: Bob Callaway <bcallaway@google.com>

---------

Signed-off-by: Bob Callaway <bcallaway@google.com>
Signed-off-by: Bob Callaway <bobcallaway@users.noreply.github.com>
 2024-12-16 19:02:21 +00:00
Carlos Tadeu Panato Junior
cff9f1e1fe update builder to use go1.22.10 (#3964) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2024-12-13 08:49:47 -06:00
Carlos Tadeu Panato Junior
a0752eb40b update go to 1.22.8 (#3900) 2024-10-10 07:38:11 +02:00
Carlos Tadeu Panato Junior
4ffbf5f681 update to use go1.22.7 and golangci-lint (#3864) 
* update to use go1.22.7

Signed-off-by: cpanato <ctadeu@gmail.com>

* update golangci-lint to v1.60

Signed-off-by: cpanato <ctadeu@gmail.com>

* fix lints

Signed-off-by: cpanato <ctadeu@gmail.com>

* update chainguard-dev/actions/kind-diag

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
 2024-09-10 16:39:26 +00:00
Carlos Tadeu Panato Junior
081ad98a52 use go1.22.6 to build cosign (#3862) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2024-09-03 15:53:38 +00:00
Carlos Tadeu Panato Junior
d05a1204ff General housekeeping and go updates (#3765) 
* have a dedicated workflow for golangci-lint and add e2e to it

Signed-off-by: cpanato <ctadeu@gmail.com>

* clean up ci

Signed-off-by: cpanato <ctadeu@gmail.com>

* bump go to 1.22.5 in go.mod

Signed-off-by: cpanato <ctadeu@gmail.com>

* update release builder to use go1.22.5

Signed-off-by: cpanato <ctadeu@gmail.com>

* update softhsm2-pkcs11-prox image

Signed-off-by: cpanato <ctadeu@gmail.com>

* update

Signed-off-by: cpanato <ctadeu@gmail.com>

* fix lints

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
 2024-07-05 14:15:30 +02:00
Carlos Tadeu Panato Junior
9e3811bbb7 upgrade to go1.22 (#3739) 
* upgrade to go1.22

Signed-off-by: cpanato <ctadeu@gmail.com>

* bump go.mod to go1.22

Signed-off-by: cpanato <ctadeu@gmail.com>

* update some deps

Signed-off-by: cpanato <ctadeu@gmail.com>

* update test image

Signed-off-by: cpanato <ctadeu@gmail.com>

* more updates

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
 2024-06-19 09:54:12 +02:00
Carlos Tadeu Panato Junior
ee521e4957 bump builder image to ise go1.21.11 and update goreleaser to version 2 (#3737) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2024-06-18 14:19:37 +02:00
Carlos Tadeu Panato Junior
e23dcd11f2 fix latest tag not being created and add latest to the dev image as well and go updates (#3664) 
* fix latest tag not being created and add latest to the dev image as well

Signed-off-by: cpanato <ctadeu@gmail.com>

* update cosign to 2.2.4

Signed-off-by: cpanato <ctadeu@gmail.com>

* update go for the builder image to use 1.21.9

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
 2024-04-11 17:01:05 +02:00
Bob Callaway
16a3dda9d9 bump release to use go 1.21.8 (#3583) 2024-03-08 02:10:53 +01:00
Carlos Tadeu Panato Junior
7a2d50b087 Update builder image, cosign image, golangci-lint (#3565) 
* update cosign and builder image

Signed-off-by: cpanato <ctadeu@gmail.com>

* update golangci-lint to v1.56

Signed-off-by: cpanato <ctadeu@gmail.com>

* update go.mod in fakeoidc

Signed-off-by: cpanato <ctadeu@gmail.com>

* fix lints

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
 2024-03-03 23:33:40 +01:00
Carlos Tadeu Panato Junior
402820d979 update builder image to use go1.21.6 (#3475) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2024-01-10 10:32:20 +00:00
Carlos Tadeu Panato Junior
585397b5d2 update builder images to use go1.21.5 (#3424) 
* update builder images to use go1.21.5

Signed-off-by: cpanato <ctadeu@gmail.com>

* use dev tag that have a shell

Signed-off-by: cpanato <ctadeu@gmail.com>

* fix digest

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-12-07 18:23:10 +01:00
Carlos Tadeu Panato Junior
f1aaa95b8f Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373) 
* bump builder image to use go1.21.4

Signed-off-by: cpanato <ctadeu@gmail.com>

* build -dev tag images that have a shell

Signed-off-by: cpanato <ctadeu@gmail.com>

* use previous cosign image, the new one does not have shell and break the current workflows

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-11-19 15:21:42 +01:00
Carlos Tadeu Panato Junior
37799f1572 update builder image to use go1.21.3 (#3293) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-10-11 09:21:27 +00:00
Carlos Tadeu Panato Junior
fa17f55f74 update builder image to use go1.21.2 (#3278) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-10-06 14:16:43 +02:00
Carlos Tadeu Panato Junior
660b0c5c1c update builder to use go1.21.1 and bump cosign image (#3227) 
* update builder to use go1.21.1 and bump cosign image

Signed-off-by: cpanato <ctadeu@gmail.com>

* update aarch64-apple clang lib

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-09-07 18:09:17 +02:00
Carlos Tadeu Panato Junior
1527b96fe0 Upgrade to go1.21 (#3188) 
* upgrade to go1.21

Signed-off-by: cpanato <ctadeu@gmail.com>

* bump golangci-lint

Signed-off-by: cpanato <ctadeu@gmail.com>

* update cosign check for the build image

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-08-16 10:30:16 +02:00
Carlos Tadeu Panato Junior
c9d82416d6 bump build cross to use go1.20.6 and cosign image to 2.1.1 (#3108) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-07-13 14:48:51 +00:00
Carlos Tadeu Panato Junior
71014a969d update builder image to use go1.20.5 (#3035) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-06-07 15:21:08 +00:00
Carlos Tadeu Panato Junior
f2692882ba Update cross builder and cosign images (#2947) 
* update cosign to v2.0.2

Signed-off-by: cpanato <ctadeu@gmail.com>

* update cross image builder to use go1.20.4

Signed-off-by: cpanato <ctadeu@gmail.com>

* update signature check

Signed-off-by: cpanato <ctadeu@gmail.com>

---------

Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-05-04 09:53:51 +02:00
Hayden B
e7bc78b291 Update release readme (#2942) 
Syncing this with the internal release notes, which now use the reusable workflow rather than calling cloud build. Also adds a warning about tag mutation.

Signed-off-by: Hayden B <hblauzvern@google.com>
 2023-04-28 16:14:21 -04:00
Carlos Tadeu Panato Junior
a8f57b66e8 remove sget (#2885) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-04-09 22:29:39 -04:00
Hayden B
8faaee4d2b Remove force flag from release script (#2877) 
Signed-off-by: Hayden Blauzvern <hblauzvern@google.com>
 2023-04-06 19:10:33 +00:00
Carlos Tadeu Panato Junior
e52c492c63 bump cross builder image to use go1.20.3 (#2872) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2023-04-06 13:04:00 +02:00