1
0
mirror of synced 2026-10-24 12:59:22 +03:00

Commit Graph

  • da53b08cb5 chore(deps): bump golang.org/x/term from 0.14.0 to 0.15.0 (#3389) dependabot[bot] 2023-11-27 18:23:19 +01:00
  • 17a3331ce9 chore(deps): bump mikefarah/yq from 4.40.2 to 4.40.3 (#3385) dependabot[bot] 2023-11-23 17:19:29 +00:00
  • 943fdbe0d6 chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 (#3384) dependabot[bot] 2023-11-21 23:46:55 +01:00
  • 1a8fa534ad chore(deps): bump google-github-actions/auth from 1.1.1 to 1.2.0 (#3378) dependabot[bot] 2023-11-21 18:04:02 +01:00
  • 38e2b30b27 chore(deps): bump actions/github-script from 7.0.0 to 7.0.1 (#3375) dependabot[bot] 2023-11-20 16:42:52 +00:00
  • dca47d754d chore(deps): bump mikefarah/yq from 4.40.1 to 4.40.2 (#3376) dependabot[bot] 2023-11-20 16:42:35 +00:00
  • 4cee585555 chore(deps): bump go.step.sm/crypto from 0.36.1 to 0.37.0 (#3374) dependabot[bot] 2023-11-20 16:29:23 +00:00
  • f1aaa95b8f Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373) Carlos Tadeu Panato Junior 2023-11-19 15:21:42 +01:00
  • d5da268cdd Delete stale workflow (#3372) Hayden B 2023-11-18 01:19:28 -08:00
  • 2a34b4ca94 Fix idempotency error with signing (#3371) Hayden B 2023-11-17 20:01:26 -08:00
  • ef0877db47 add --private-infrastructure flag (#3369) Dylan Richardson 2023-11-17 13:20:06 -06:00
  • f2300e0e22 chore(deps): bump google.golang.org/api from 0.150.0 to 0.151.0 (#3370) dependabot[bot] 2023-11-17 18:07:43 +01:00
  • f57aa2ce0f chore(deps): bump github.com/xanzy/go-gitlab from 0.93.2 to 0.94.0 (#3363) dependabot[bot] 2023-11-15 10:41:28 -05:00
  • ea92927b70 Backport GHSA-vfp6-jrw2-99g9 (#3364) v1.13.2 Carlos Tadeu Panato Junior 2023-11-15 10:12:26 +01:00
  • 7c1893baca chore(deps): bump actions/github-script from 6.4.1 to 7.0.0 (#3366) dependabot[bot] 2023-11-14 18:17:45 +01:00
  • bc7528902d chore(deps): bump sigs.k8s.io/release-utils from 0.7.6 to 0.7.7 (#3365) dependabot[bot] 2023-11-14 17:47:56 +01:00
  • a879771959 Remove slow e2e tests (#3359) Hayden B 2023-11-11 20:36:28 -08:00
  • b309a0f048 Update SBOM_SPEC.md (#3358) Nikos Fotiou 2023-11-10 13:29:10 +02:00
  • 6c36474936 chore(deps): bump github.com/buildkite/agent/v3 from 3.58.0 to 3.59.0 (#3351) dependabot[bot] 2023-11-10 10:54:13 +01:00
  • 9fdb37c4ca Increase timeout of e2e tests (#3355) Hayden B 2023-11-10 00:29:09 -08:00
  • aaa354d0df chore(deps): bump golang.org/x/oauth2 from 0.13.0 to 0.14.0 (#3352) dependabot[bot] 2023-11-09 17:01:28 +00:00
  • de11c556a8 chore(deps): bump mikefarah/yq from 4.35.2 to 4.40.1 (#3350) dependabot[bot] 2023-11-09 09:02:13 +00:00
  • 8609a72146 chore(deps): bump golang.org/x/term from 0.13.0 to 0.14.0 (#3349) dependabot[bot] 2023-11-08 16:55:31 +00:00
  • e1270d6ce6 chore(deps): bump google.golang.org/api from 0.149.0 to 0.150.0 (#3345) dependabot[bot] 2023-11-07 20:43:44 -06:00
  • c9aaf79343 chore(deps): bump sigstore/cosign-installer from 3.1.2 to 3.2.0 (#3346) dependabot[bot] 2023-11-07 13:35:51 -06:00
  • 12cbf9ea17 add changelog for v2.2.1 release (#3344) v2.2.1 Bob Callaway 2023-11-07 07:39:46 -05:00
  • 827f24e9d4 feat: Support basic auth and bearer auth login to registry (#3310) Tosone 2023-11-07 20:12:48 +08:00
  • 8ac891ff0e Merge pull request from GHSA-vfp6-jrw2-99g9 AdamKorcz 2023-11-07 11:59:07 +00:00
  • 8b366c497b add support for ignoring certificates with pkcs11 (#3334) Dylan Richardson 2023-11-06 13:57:43 -06:00
  • 23920de562 chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (#3342) dependabot[bot] 2023-11-06 17:05:52 +00:00
  • e022e1c132 chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#3341) dependabot[bot] 2023-11-06 18:02:06 +01:00
  • 28c59c5eca add missing groups key (#3339) Carlos Tadeu Panato Junior 2023-11-03 15:01:16 +01:00
  • 8e5bdcc0ff chore(deps): bump github.com/google/certificate-transparency-go (#3338) dependabot[bot] 2023-11-02 16:47:05 +00:00
  • 510cac4ef5 chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (#3336) dependabot[bot] 2023-11-02 16:41:34 +00:00
  • 063902b1d7 chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0 (#3337) dependabot[bot] 2023-11-02 16:38:50 +00:00
  • bd50f0df9e group dependabot dependencies updates (#3335) Carlos Tadeu Panato Junior 2023-11-02 16:47:51 +01:00
  • a00600a152 chore(deps): bump google.golang.org/api from 0.148.0 to 0.149.0 (#3332) dependabot[bot] 2023-11-01 17:14:53 +00:00
  • 173f547a4e Set go to min 1.21 and update dependencies (#3327) Carlos Tadeu Panato Junior 2023-10-29 17:14:11 +01:00
  • 9400476ad0 Support ReplaceOp in Signatures (#3315) Jon Johnson 2023-10-28 18:25:54 -07:00
  • 67558de011 chore(deps): bump github.com/open-policy-agent/opa from 0.57.1 to 0.58.0 (#3329) dependabot[bot] 2023-10-28 07:50:46 +02:00
  • 2f8fdfaf3e chore(deps): bump sigs.k8s.io/release-utils from 0.7.5 to 0.7.6 (#3328) dependabot[bot] 2023-10-28 07:50:14 +02:00
  • aea520af79 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws (#3326) dependabot[bot] 2023-10-26 21:28:18 +02:00
  • ddb8af5e34 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure (#3323) dependabot[bot] 2023-10-26 20:42:33 +02:00
  • af89b8b60e chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp (#3322) dependabot[bot] 2023-10-26 19:56:39 +02:00
  • 4028289358 chore(deps): bump github.com/sigstore/sigstore from 1.7.4 to 1.7.5 (#3324) dependabot[bot] 2023-10-26 19:56:19 +02:00
  • 8f6388598b chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault (#3325) dependabot[bot] 2023-10-26 17:06:27 +00:00
  • 0574125da1 Add some docs about verifying in an air-gapped environment (#3321) Priya Wadhwa 2023-10-25 00:35:27 -07:00
  • f67ce589fe chore(deps): bump ossf/scorecard-action from 2.3.0 to 2.3.1 (#3320) dependabot[bot] 2023-10-25 08:31:01 +02:00
  • 67d627870e Update CONTRIBUTING.md (#3268) jonvnadelberg 2023-10-24 16:30:14 -07:00
  • 093239e90c chore(deps): bump github.com/xanzy/go-gitlab from 0.93.1 to 0.93.2 (#3318) dependabot[bot] 2023-10-23 17:05:56 +00:00
  • 2a3355511c chore(deps): bump github.com/buildkite/agent/v3 from 3.56.0 to 3.57.0 (#3314) dependabot[bot] 2023-10-20 20:39:23 +02:00
  • b8a1ca10c8 chore(deps): bump go.step.sm/crypto from 0.36.0 to 0.36.1 (#3312) dependabot[bot] 2023-10-20 08:14:38 +00:00
  • 7dcc90fdea chore(deps): bump google.golang.org/api from 0.147.0 to 0.148.0 (#3313) dependabot[bot] 2023-10-19 17:12:42 +00:00
  • e92f0a3e20 chore(deps): bump github.com/open-policy-agent/opa from 0.57.0 to 0.57.1 (#3311) dependabot[bot] 2023-10-18 21:13:53 +02:00
  • 0cf3cef7de feat: added ability to get image digest back via triangulate (#3255) Gareth Healy 2023-10-18 16:09:20 +01:00
  • 022fa265d2 feat: add --only flag in cosign copy to copy sign, att & sbom (#3247) Vishal Choudhary 2023-10-18 01:22:22 +05:30
  • c75d1e3850 feat: add support attaching a Rekor bundle to a container (#3246) Vishal Choudhary 2023-10-18 01:02:49 +05:30
  • d20a33e7ea feat: add support outputting rekor response on signing (#3248) Vishal Choudhary 2023-10-18 00:53:26 +05:30
  • dd69c62afd chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 (#3309) dependabot[bot] 2023-10-17 16:37:33 +00:00
  • bb4715c84c fix: allow cosign download sbom when image is absent (#3245) Vishal Choudhary 2023-10-17 17:06:55 +05:30
  • da66fdddc3 ci: add a OCI registry test for referrers support (#3253) Ramkumar Chinchani 2023-10-17 00:35:43 -07:00
  • 1b58b1677c feat: improve dockerfile verify subcommand (#3264) Caleb Woodbine 2023-10-17 11:04:43 +13:00
  • e78a84877b chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws (#3306) dependabot[bot] 2023-10-14 09:42:49 +02:00
  • ca32b692aa chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp (#3304) dependabot[bot] 2023-10-14 05:35:08 +02:00
  • 3d756cf23e chore(deps): bump github.com/sigstore/sigstore from 1.7.3 to 1.7.4 (#3302) dependabot[bot] 2023-10-14 05:34:10 +02:00
  • 3a387d3b8d chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure (#3303) dependabot[bot] 2023-10-14 01:55:43 +02:00
  • 5d01dc7c55 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault (#3305) dependabot[bot] 2023-10-14 01:55:07 +02:00
  • 6b29144ea6 chore(deps): bump google.golang.org/api from 0.146.0 to 0.147.0 (#3307) dependabot[bot] 2023-10-13 19:33:27 +02:00
  • 82049a77b4 chore(deps): bump github.com/sigstore/fulcio from 1.4.2 to 1.4.3 (#3299) dependabot[bot] 2023-10-12 17:22:51 +00:00
  • c4a2c1bd10 chore(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 (#3297) dependabot[bot] 2023-10-11 23:56:20 +00:00
  • e887f49195 chore(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 (#3294) dependabot[bot] 2023-10-11 19:33:45 +02:00
  • faa47c7820 Fix ReplaceSignatures (#3292) Jon Johnson 2023-10-11 10:28:31 -07:00
  • c827eed014 chore(deps): bump github.com/sigstore/fulcio from 1.4.1 to 1.4.2 (#3296) dependabot[bot] 2023-10-11 17:24:56 +00:00
  • 5b2d30a7e2 Add guard flag for experimental OCI 1.1 verify. (#3272) Ville Aikas 2023-10-11 05:12:51 -07:00
  • 37799f1572 update builder image to use go1.21.3 (#3293) Carlos Tadeu Panato Junior 2023-10-11 11:21:27 +02:00
  • 4c5669d7ea chore(deps): bump github.com/sigstore/fulcio from 1.4.0 to 1.4.1 (#3289) dependabot[bot] 2023-10-10 16:42:34 +00:00
  • 6c7209020e chore(deps): bump github.com/xanzy/go-gitlab from 0.93.0 to 0.93.1 (#3287) dependabot[bot] 2023-10-09 17:40:44 +00:00
  • fb624ce95a chore(deps): bump sigs.k8s.io/release-utils from 0.7.4 to 0.7.5 (#3286) dependabot[bot] 2023-10-09 19:40:11 +02:00
  • 45fc5e15fe chore(deps): bump google.golang.org/api from 0.145.0 to 0.146.0 (#3285) dependabot[bot] 2023-10-09 17:35:30 +00:00
  • ab41bee784 chore(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 (#3288) dependabot[bot] 2023-10-09 17:18:16 +00:00
  • 2392a141f2 chore(deps): bump golang.org/x/oauth2 from 0.12.0 to 0.13.0 (#3282) dependabot[bot] 2023-10-09 18:57:29 +02:00
  • dec16bd2bc chore(deps): bump github.com/spf13/viper from 1.16.0 to 1.17.0 (#3281) dependabot[bot] 2023-10-09 13:30:18 +00:00
  • 552486b747 chore(deps): bump google.golang.org/api from 0.144.0 to 0.145.0 (#3279) dependabot[bot] 2023-10-09 14:54:13 +02:00
  • 2d4441ca8f chore(deps): bump github.com/buildkite/agent/v3 from 3.55.0 to 3.56.0 (#3280) dependabot[bot] 2023-10-09 14:49:54 +02:00
  • 2ea72f1103 bump scaffolding to latest release in tests (#3283) Bob Callaway 2023-10-07 18:52:42 -04:00
  • fa17f55f74 update builder image to use go1.21.2 (#3278) Carlos Tadeu Panato Junior 2023-10-06 14:16:43 +02:00
  • b325ab4d7d chore(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0 (#3275) dependabot[bot] 2023-10-06 09:37:29 +00:00
  • d23cce8a8e chore(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 (#3277) dependabot[bot] 2023-10-06 11:05:46 +02:00
  • d8d4cb6702 chore(deps): bump google.golang.org/api from 0.143.0 to 0.144.0 (#3273) dependabot[bot] 2023-10-05 16:52:37 +00:00
  • 7c6c344d3e chore(deps): bump github.com/xanzy/go-gitlab from 0.92.3 to 0.93.0 (#3274) dependabot[bot] 2023-10-05 16:48:04 +00:00
  • 5ed63e0a3e chore(deps): bump github.com/open-policy-agent/opa from 0.56.0 to 0.57.0 (#3265) dependabot[bot] 2023-09-29 15:06:34 -04:00
  • 953dbdcaf8 chore(deps): bump github.com/xanzy/go-gitlab from 0.92.1 to 0.92.3 (#3270) dependabot[bot] 2023-09-29 15:05:37 -04:00
  • 101b5ae56e Update contact for code of conduct (#3266) Hayden B 2023-09-28 18:22:52 -07:00
  • 0044432284 chore(deps): bump mikefarah/yq from 4.35.1 to 4.35.2 (#3261) dependabot[bot] 2023-09-26 13:16:46 -04:00
  • 4e4642c00f chore(deps): bump github.com/xanzy/go-gitlab from 0.91.1 to 0.92.1 (#3263) dependabot[bot] 2023-09-26 13:16:23 -04:00
  • fb0bb92005 chore(deps): bump google.golang.org/api from 0.142.0 to 0.143.0 (#3262) dependabot[bot] 2023-09-26 13:16:03 -04:00
  • 457701bb26 chore(deps): bump actions/checkout from 4.0.0 to 4.1.0 (#3259) dependabot[bot] 2023-09-25 16:00:40 -04:00
  • 8f0ab3b4b4 docs: improves the Contribution guidelines (#3257) Andres Galante 2023-09-25 17:00:01 -03:00
  • d12c5c6f3d Deprecate SBOM attachments (#3256) Luiz Carvalho 2023-09-25 13:32:12 -04:00
  • df7d15796a update go-github to v55 (#3254) Carlos Tadeu Panato Junior 2023-09-22 17:13:21 +02:00