1
0
mirror of synced 2026-10-24 12:59:22 +03:00

Commit Graph

  • 9bc24eedbe chore(deps): bump github.com/xanzy/go-gitlab from 0.96.0 to 0.97.0 (#3522) dependabot[bot] 2024-02-13 09:57:31 +01:00
  • 5ba71b1ab5 chore(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 (#3536) dependabot[bot] 2024-02-13 09:37:32 +01:00
  • 75f8ef503b chore(deps): bump github.com/google/go-containerregistry (#3521) dependabot[bot] 2024-02-13 09:30:42 +01:00
  • 1972996f84 chore(deps): bump the actions group with 3 updates (#3535) dependabot[bot] 2024-02-13 08:22:12 +00:00
  • b0a83b8d12 chore(deps): bump golang.org/x/oauth2 from 0.16.0 to 0.17.0 (#3532) dependabot[bot] 2024-02-13 09:13:57 +01:00
  • 46f5ffb7f9 chore(deps): bump golang.org/x/crypto from 0.18.0 to 0.19.0 (#3531) dependabot[bot] 2024-02-12 18:17:40 +01:00
  • 979a000d4d chore(deps): bump the gomod group with 1 update (#3530) dependabot[bot] 2024-02-12 18:17:28 +01:00
  • 252b4dc15d Don't ignore transparency log in tests if possible (#3528) Colleen Murphy 2024-02-09 10:39:36 -08:00
  • d0ac36a096 Correct help text of verify-attestation policy argument (#3527) Michael Vittrup Larsen 2024-02-09 00:45:40 +01:00
  • a0b02b7d7f Make E2E tests hermetic (#3499) Colleen Murphy 2024-02-07 14:34:00 -08:00
  • daec5ec4b2 ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526) Yonghe Zhao 2024-02-07 11:49:06 -05:00
  • 18cdadbbb6 Update codeql-analysis.yml (#3524) Hayden B 2024-02-05 15:46:45 -08:00
  • 22fd1dc034 chore(deps): bump the gomod group with 1 update (#3518) dependabot[bot] 2024-02-05 16:48:44 +00:00
  • e3963114ce chore(deps): bump go.step.sm/crypto from 0.42.1 to 0.43.0 (#3519) dependabot[bot] 2024-02-05 16:48:24 +00:00
  • cb9ad53f85 chore(deps): bump codecov/codecov-action from 3.1.5 to 4.0.1 (#3517) dependabot[bot] 2024-02-05 16:23:48 +00:00
  • 2ef6022f3f chore(deps): bump the actions group with 1 update (#3516) dependabot[bot] 2024-02-05 16:22:41 +00:00
  • 7951940299 add e2e test for pkcs11 token signing (#3495) vivek kumar sahu 2024-02-05 21:04:31 +05:30
  • 493e6e29e2 Add changelog for v2.2.3 (#3513) v2.2.3 Hayden B 2024-01-31 09:54:40 -08:00
  • 628df785e2 chore(deps): bump cpanato/vault-installer from 0.0.2 to 1.0.0 (#3510) dependabot[bot] 2024-01-29 22:12:15 +01:00
  • 7be8de0613 chore(deps): bump google.golang.org/api from 0.157.0 to 0.159.0 (#3508) dependabot[bot] 2024-01-29 22:09:02 +01:00
  • 554015cf21 chore(deps): bump the actions group with 3 updates (#3509) dependabot[bot] 2024-01-29 22:07:35 +01:00
  • 8395d97b2c chore(deps): bump github.com/go-openapi/runtime from 0.26.2 to 0.27.1 (#3507) dependabot[bot] 2024-01-29 16:56:15 +00:00
  • 1c90a3a962 chore(deps): bump github.com/open-policy-agent/opa from 0.60.0 to 0.61.0 (#3505) dependabot[bot] 2024-01-29 16:39:48 +00:00
  • 3f20bdee88 chore(deps): bump github.com/buildkite/agent/v3 from 3.61.0 to 3.62.0 (#3506) dependabot[bot] 2024-01-29 16:38:17 +00:00
  • 5d79ebffe9 chore(deps): bump the gomod group with 2 updates (#3504) dependabot[bot] 2024-01-29 16:36:10 +00:00
  • 381c6570d5 fix cross test (#3502) Carlos Tadeu Panato Junior 2024-01-27 18:37:45 +01:00
  • a445167d83 Fix CI test failing (#3501) Hayden B 2024-01-26 23:42:49 -08:00
  • f43eb6b27a Fix race condition on verification with multiple signatures attached to image (#3486) Mukuls77 2024-01-25 23:27:12 +05:30
  • 9bc3ee309b chore(deps): bump go.step.sm/crypto from 0.41.0 to 0.42.0 (#3492) dependabot[bot] 2024-01-22 18:17:33 +01:00
  • a67442ad57 chore(deps): bump the actions group with 1 update (#3493) dependabot[bot] 2024-01-22 18:17:16 +01:00
  • 0bcbe9d482 chore(deps): bump actions/cache from 3.3.3 to 4.0.0 (#3494) dependabot[bot] 2024-01-22 18:15:10 +01:00
  • 9665bcd272 chore(deps): bump the gomod group with 7 updates (#3488) dependabot[bot] 2024-01-22 17:33:55 +01:00
  • 408e16ce12 chore(deps): bump github.com/xanzy/go-gitlab from 0.95.2 to 0.96.0 (#3489) dependabot[bot] 2024-01-22 16:32:27 +00:00
  • 8d54a51827 chore(deps): bump google.golang.org/api from 0.156.0 to 0.157.0 (#3490) dependabot[bot] 2024-01-22 16:32:01 +00:00
  • c16e19ee9a chore(deps): bump github.com/google/go-containerregistry (#3491) dependabot[bot] 2024-01-22 16:31:50 +00:00
  • 26e8440d5c chore(deps): bump github.com/buildkite/agent/v3 from 3.59.0 to 3.61.0 (#3485) Carlos Tadeu Panato Junior 2024-01-17 10:58:18 +01:00
  • 1ebb6d95ec Use local rekor and fulcio instances in e2e tests (#3478) Colleen Murphy 2024-01-16 15:15:41 -08:00
  • 76c11622f9 chore(deps): bump go.step.sm/crypto from 0.40.0 to 0.41.0 (#3481) dependabot[bot] 2024-01-15 18:49:10 +01:00
  • 18ffaee512 chore(deps): bump google.golang.org/api from 0.155.0 to 0.156.0 (#3482) dependabot[bot] 2024-01-15 18:24:33 +01:00
  • a3e3bf3560 chore(deps): bump golang.org/x/oauth2 from 0.15.0 to 0.16.0 (#3484) dependabot[bot] 2024-01-15 18:24:19 +01:00
  • a4d35687a8 chore(deps): bump the actions group with 3 updates (#3480) dependabot[bot] 2024-01-15 16:47:06 +00:00
  • 7b7304c402 Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466) aalsabag 2024-01-13 13:34:51 -06:00
  • 8586a28868 update scaffolding version used in tests (#3477) Bob Callaway 2024-01-12 08:19:05 -05:00
  • 402820d979 update builder image to use go1.21.6 (#3475) Carlos Tadeu Panato Junior 2024-01-10 11:32:20 +01:00
  • 14795db164 chore(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 (#3473) dependabot[bot] 2024-01-08 18:38:28 +01:00
  • db132b44db chore(deps): bump google.golang.org/api from 0.154.0 to 0.155.0 (#3471) dependabot[bot] 2024-01-08 18:38:15 +01:00
  • 5adf98774f chore(deps): bump github.com/cloudflare/circl from 1.3.5 to 1.3.7 (#3474) dependabot[bot] 2024-01-08 17:12:16 +00:00
  • 348934868e chore(deps): bump golang.org/x/term from 0.15.0 to 0.16.0 (#3472) dependabot[bot] 2024-01-08 17:02:33 +00:00
  • 431c6eb6b9 chore(deps): bump the gomod group with 1 update (#3470) dependabot[bot] 2024-01-08 17:02:21 +00:00
  • 286a98a4a9 fix(clean): Fix clean cmd for private registries (#3446) Colleen Murphy 2024-01-04 09:12:17 -08:00
  • d372b9be9f add examples for cosign attach signature cmd (#3468) vivek kumar sahu 2024-01-04 21:26:51 +05:30
  • daf1eeb5ff Remove CertSubject function (#3467) Hayden B 2024-01-03 02:16:32 -08:00
  • e678426b3d chore(deps): bump the actions group with 1 update (#3439) dependabot[bot] 2024-01-02 08:34:53 +01:00
  • 57392faa74 chore(deps): bump the gomod group with 1 update (#3459) dependabot[bot] 2024-01-01 21:00:57 +01:00
  • b95ffd4d63 chore(deps): bump github.com/go-openapi/strfmt from 0.21.10 to 0.22.0 (#3460) dependabot[bot] 2024-01-01 19:49:48 +01:00
  • 60254d376f chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure (#3451) dependabot[bot] 2023-12-25 20:08:58 +00:00
  • 6c67545696 chore(deps): bump the gomod group with 2 updates (#3449) dependabot[bot] 2023-12-25 22:00:03 +02:00
  • a8fa6ece8c chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws (#3450) dependabot[bot] 2023-12-25 20:49:58 +01:00
  • ffd3e90bbe chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault (#3452) dependabot[bot] 2023-12-25 20:49:33 +01:00
  • 365ff5adb4 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp (#3456) dependabot[bot] 2023-12-25 20:30:06 +01:00
  • faaa695ac8 chore(deps): bump github.com/sigstore/sigstore from 1.7.6 to 1.8.0 (#3454) dependabot[bot] 2023-12-25 21:05:36 +02:00
  • 1ebcdf7e05 chore(deps): bump github.com/open-policy-agent/opa from 0.59.0 to 0.60.0 (#3455) dependabot[bot] 2023-12-25 21:05:23 +02:00
  • b3af55cffa Resolves #3088: version sub-command expected behaviour documentation and testing (#3447) Omri Bornstein 2023-12-21 03:23:11 +11:00
  • 7763aefff1 chore(deps): bump the gomod group with 3 updates (#3441) dependabot[bot] 2023-12-18 17:36:03 +00:00
  • a632d3c0f2 chore(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#3443) dependabot[bot] 2023-12-18 17:35:50 +00:00
  • 410e1637a4 chore(deps): bump google.golang.org/api from 0.153.0 to 0.154.0 (#3445) dependabot[bot] 2023-12-18 17:16:36 +00:00
  • 886116e761 chore(deps): bump go.step.sm/crypto from 0.39.0 to 0.40.0 (#3442) dependabot[bot] 2023-12-18 17:15:25 +00:00
  • 967267158b chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 (#3440) dependabot[bot] 2023-12-18 16:32:47 +00:00
  • 0cb7ae9c34 fixing issue 3426 (#3427) Mukuls77 2023-12-13 23:15:34 +05:30
  • b3726e440a chore(deps): bump go.step.sm/crypto from 0.38.0 to 0.39.0 (#3430) dependabot[bot] 2023-12-11 18:27:05 +01:00
  • 1ac395b891 chore(deps): bump the actions group with 1 update (#3432) dependabot[bot] 2023-12-11 17:15:09 +00:00
  • c328f52062 chore(deps): bump the gomod group with 3 updates (#3429) dependabot[bot] 2023-12-11 16:39:45 +00:00
  • 9b7ced6a81 chore(deps): bump github.com/xanzy/go-gitlab from 0.94.0 to 0.95.1 (#3431) dependabot[bot] 2023-12-11 16:39:31 +00:00
  • 585397b5d2 update builder images to use go1.21.5 (#3424) Carlos Tadeu Panato Junior 2023-12-07 10:23:10 -07:00
  • 421c02a757 Add support for OpenVEX predicate type (#3405) Puerco 2023-12-06 19:15:59 -05:00
  • a3fc556f4c Decrease frequency of dependabot (#3422) Hayden B 2023-12-06 09:27:13 -08:00
  • e2e32ac5eb chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 (#3421) dependabot[bot] 2023-12-06 18:23:27 +01:00
  • 3e60a1bf03 chore(deps): bump cuelang.org/go from 0.6.0 to 0.7.0 (#3418) dependabot[bot] 2023-12-06 18:23:09 +01:00
  • 28ab2b3d60 chore(deps): bump github.com/spf13/viper from 1.17.0 to 1.18.0 (#3417) dependabot[bot] 2023-12-06 17:33:03 +01:00
  • bf6b57bc3e Add changelog for v2.2.2 (#3416) v2.2.2 Hayden B 2023-12-05 10:59:25 -08:00
  • 3329d81f5f Don't require CT log keys if using a key/sk (#3415) Hayden B 2023-12-05 10:52:52 -08:00
  • d329bf7555 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws (#3414) dependabot[bot] 2023-12-05 17:05:33 +00:00
  • 7d6326ccb7 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp (#3413) dependabot[bot] 2023-12-05 17:05:05 +00:00
  • b76592e50f chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault (#3412) dependabot[bot] 2023-12-05 17:44:31 +01:00
  • f262fd0268 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure (#3410) dependabot[bot] 2023-12-05 16:44:15 +00:00
  • 0109fc2a22 chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) dependabot[bot] 2023-12-05 16:43:56 +00:00
  • 593b9f28fd Fix copy without any flag set (#3409) Hayden B 2023-12-04 16:35:07 -08:00
  • 29ca73fc09 chore(deps): bump mikefarah/yq from 4.40.3 to 4.40.4 (#3406) dependabot[bot] 2023-12-04 18:51:05 +00:00
  • e72b82fb4f chore(deps): bump github.com/go-openapi/strfmt from 0.21.7 to 0.21.8 (#3407) dependabot[bot] 2023-12-04 19:45:09 +01:00
  • 5929786f85 chore(deps): bump github.com/sigstore/rekor from 1.3.3 to 1.3.4 (#3408) dependabot[bot] 2023-12-04 11:12:27 -07:00
  • 304ff16bc9 chore(deps): bump github.com/google/go-containerregistry (#3401) dependabot[bot] 2023-11-30 18:03:26 +01:00
  • 4d22cb0720 chore(deps): bump github.com/open-policy-agent/opa from 0.58.0 to 0.59.0 (#3399) dependabot[bot] 2023-11-30 18:03:10 +01:00
  • 020f73ae08 chore(deps): bump go.step.sm/crypto from 0.37.0 to 0.38.0 (#3398) dependabot[bot] 2023-11-29 17:09:04 +00:00
  • 3593a5b0f1 chore(deps): bump google-github-actions/auth from 1.2.0 to 2.0.0 (#3397) dependabot[bot] 2023-11-29 16:35:54 +00:00
  • c201035326 chore(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 (#3396) dependabot[bot] 2023-11-28 16:49:27 +00:00
  • d9e4b9ede3 chore(deps): bump golang.org/x/crypto from 0.15.0 to 0.16.0 (#3395) dependabot[bot] 2023-11-28 17:27:06 +01:00
  • ca6c378ea2 chore(deps): bump google.golang.org/api from 0.151.0 to 0.152.0 (#3394) dependabot[bot] 2023-11-28 17:26:52 +01:00
  • 878b6c766e Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383) Yonghe Zhao 2023-11-28 03:42:59 -05:00
  • 0763bff5d5 Update cosign generate cmd to not include newline (#3393) Lily Sturmann 2023-11-28 03:42:40 -05:00
  • 6b06819a43 Use the timeout flag value in verify* commands. (#3391) Yonghe Zhao 2023-11-28 03:42:31 -05:00