1
0
mirror of synced 2026-10-24 12:59:22 +03:00

Commit Graph

  • 56c10c00a1 Update ko.yaml to use different base image (#3250) Hayden B 2023-09-21 01:24:19 -07:00
  • e456b2bac8 chore(deps): bump google.golang.org/api from 0.141.0 to 0.142.0 (#3252) dependabot[bot] 2023-09-20 17:35:16 +00:00
  • 54f84103cd chore(deps): bump go.step.sm/crypto from 0.35.0 to 0.35.1 (#3249) dependabot[bot] 2023-09-20 08:26:35 +02:00
  • 44f77036da Stop using deprecated in_toto.ProvenanceStatement (#3243) Luiz Carvalho 2023-09-18 13:08:08 -04:00
  • d5b8c35f43 feat: dedent line in cosign copy doc (#3244) Vishal Choudhary 2023-09-16 20:37:32 +05:30
  • 80def23b0d feat: add platform flag to cosign copy command (#3234) Vishal Choudhary 2023-09-16 19:51:15 +05:30
  • ee66f352f5 chore(deps): bump google.golang.org/api from 0.140.0 to 0.141.0 (#3242) dependabot[bot] 2023-09-15 19:18:38 +02:00
  • 90610446c1 Update .ko.yaml (#3240) Appu 2023-09-15 10:36:08 -04:00
  • f4805006b9 chore(deps): bump github.com/buildkite/agent/v3 from 3.54.0 to 3.55.0 (#3241) dependabot[bot] 2023-09-15 09:13:39 +02:00
  • b2cdbbb46d Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219) ziel 2023-09-13 16:08:04 -04:00
  • 7babfb1d92 chore(deps): bump google.golang.org/api from 0.139.0 to 0.140.0 (#3238) dependabot[bot] 2023-09-13 10:01:49 +02:00
  • 1ee8bf9dd2 Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237) John Kjell 2023-09-12 16:52:48 -05:00
  • 86252aaf9e fix: update error in SignedEntity to be more descriptive (#3233) Vishal Choudhary 2023-09-10 22:46:03 +05:30
  • b09f72d66a chore(deps): bump actions/cache from 3.3.1 to 3.3.2 (#3231) dependabot[bot] 2023-09-10 09:15:51 +02:00
  • f456266ea6 chore(deps): bump google.golang.org/api from 0.138.0 to 0.139.0 (#3232) dependabot[bot] 2023-09-10 09:15:16 +02:00
  • 0d48aa17cf Fail timestamp verification if no root is provided (#3224) Hayden B 2023-09-08 12:31:22 -07:00
  • 29396d66f0 Remove security policy (#3230) Hayden B 2023-09-08 03:52:37 -07:00
  • ab01451a10 chore(deps): bump github.com/buildkite/agent/v3 from 3.53.0 to 3.54.0 (#3229) dependabot[bot] 2023-09-08 12:10:58 +02:00
  • 4173265e4d chore(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 (#3228) dependabot[bot] 2023-09-07 17:03:32 +00:00
  • d4f2b80e16 chore(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 (#3223) dependabot[bot] 2023-09-07 18:25:27 +02:00
  • 660b0c5c1c update builder to use go1.21.1 and bump cosign image (#3227) Carlos Tadeu Panato Junior 2023-09-07 18:09:17 +02:00
  • a9821df896 attest: pass OCI remote opts to att resolver. (#3225) Billy Lynch 2023-09-07 03:09:52 -04:00
  • 575fe44856 bump scaffolding to newest release (#3226) Bob Callaway 2023-09-06 18:08:42 -06:00
  • 3a6f2ab88a chore(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0 (#3220) dependabot[bot] 2023-09-05 16:46:11 +00:00
  • 6c6a73dfcf chore(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 (#3217) dependabot[bot] 2023-09-05 08:43:10 +02:00
  • d638393d1b chore(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.91.1 (#3216) dependabot[bot] 2023-09-05 08:42:52 +02:00
  • 2c4201b6c0 chore(deps): bump actions/checkout from 3.6.0 to 4.0.0 (#3215) dependabot[bot] 2023-09-05 08:42:22 +02:00
  • e517bf2fe9 chore(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2 (#3214) dependabot[bot] 2023-09-05 08:42:03 +02:00
  • f4ec380d98 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault (#3208) dependabot[bot] 2023-09-04 11:50:55 +02:00
  • fd9594519c chore(deps): bump github.com/sigstore/sigstore from 1.7.2 to 1.7.3 (#3210) dependabot[bot] 2023-09-04 11:50:24 +02:00
  • c70552fdad chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws (#3213) dependabot[bot] 2023-09-03 11:38:37 +02:00
  • b87225d0d5 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure (#3211) dependabot[bot] 2023-09-03 05:41:19 +00:00
  • ce9a95c2df chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp (#3209) dependabot[bot] 2023-09-03 07:06:50 +02:00
  • 865e7b3c43 chore(deps): bump github.com/buildkite/agent/v3 from 3.52.1 to 3.53.0 (#3206) dependabot[bot] 2023-09-01 09:32:32 +02:00
  • 976d617fde chore(deps): bump github.com/open-policy-agent/opa from 0.55.0 to 0.56.0 (#3207) dependabot[bot] 2023-09-01 09:32:16 +02:00
  • 546f1c5b91 add changelog for v2.2.0 (#3198) v2.2.0 Carlos Tadeu Panato Junior 2023-08-31 20:52:52 +02:00
  • 126474ccb4 add mTLS to TSA for sign-blob command (#3200) Dmitry Savintsev 2023-08-25 17:41:47 +02:00
  • 5f747c26bd chore(deps): bump github.com/buildkite/agent/v3 from 3.52.0 to 3.52.1 (#3204) dependabot[bot] 2023-08-25 10:26:59 +00:00
  • 2c5efb8f9f chore(deps): bump actions/checkout from 3.5.3 to 3.6.0 (#3203) dependabot[bot] 2023-08-24 17:06:46 +00:00
  • d557f47459 Add SECURITY.md file (#3201) David A. Wheeler 2023-08-23 23:28:02 -04:00
  • 1e9bac442e chore(deps): bump github.com/sigstore/timestamp-authority (#3199) dependabot[bot] 2023-08-23 16:47:18 +00:00
  • beefa3b6db Docs/update links (#3196) Colin Griffin 2023-08-23 12:19:34 -04:00
  • b6c986f695 chore(deps): bump go.step.sm/crypto from 0.34.0 to 0.35.0 (#3194) dependabot[bot] 2023-08-21 12:03:53 +02:00
  • 8df14d8f5a chore(deps): bump google.golang.org/api from 0.137.0 to 0.138.0 (#3195) dependabot[bot] 2023-08-18 20:08:26 +02:00
  • fdb1496224 chore(deps): bump github.com/buildkite/agent/v3 from 3.51.0 to 3.52.0 (#3193) dependabot[bot] 2023-08-17 16:49:01 +00:00
  • 9bad7c7eb2 chore(deps): bump google.golang.org/api from 0.136.0 to 0.137.0 (#3190) dependabot[bot] 2023-08-16 09:55:29 +00:00
  • 1527b96fe0 Upgrade to go1.21 (#3188) Carlos Tadeu Panato Junior 2023-08-16 10:30:16 +02:00
  • 619bc1f4b6 chore(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 (#3191) dependabot[bot] 2023-08-15 17:33:26 +00:00
  • 4f20478c1e chore(deps): bump github.com/buildkite/agent/v3 from 3.50.4 to 3.51.0 (#3189) dependabot[bot] 2023-08-15 16:47:55 +00:00
  • d1ef787765 Updates ci tests (#3142) Carlos Tadeu Panato Junior 2023-08-15 14:20:33 +02:00
  • b9831ca1c9 switch to uploading DSSE types to rekor instead of intoto (#3113) Bob Callaway 2023-08-15 07:43:30 -04:00
  • 10a52377fd test using latest release of scaffolding (#3187) Bob Callaway 2023-08-14 14:28:18 -04:00
  • b43ce66500 chore(deps): bump github.com/theupdateframework/go-tuf from 0.5.2 to 0.6.1 (#3183) dependabot[bot] 2023-08-14 11:48:22 +02:00
  • 4c04fa8232 update doc links (#3186) 张志强 2023-08-14 16:25:43 +08:00
  • 667e328d12 Switch to cryptoutils function for SANS (#3185) Hayden B 2023-08-12 12:22:54 -07:00
  • 9c9a33f249 chore(deps): bump mikefarah/yq from 4.34.2 to 4.35.1 (#3184) dependabot[bot] 2023-08-11 17:32:04 +00:00
  • 1c3208b3a9 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault (#3176) dependabot[bot] 2023-08-10 08:14:41 +00:00
  • 6c06e52d3f chore(deps): bump github.com/sigstore/sigstore from 1.7.1 to 1.7.2 (#3180) dependabot[bot] 2023-08-10 09:46:29 +02:00
  • 88f412b9a4 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure (#3177) dependabot[bot] 2023-08-10 09:43:57 +02:00
  • a0c83b638f chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws (#3174) dependabot[bot] 2023-08-09 17:17:23 +00:00
  • db8bca9edf chore(deps): bump cuelang.org/go from 0.5.0 to 0.6.0 (#3179) dependabot[bot] 2023-08-09 16:40:42 +00:00
  • 60f1fb0466 chore(deps): bump google.golang.org/api from 0.135.0 to 0.136.0 (#3178) dependabot[bot] 2023-08-09 16:35:44 +00:00
  • 007b05c316 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp (#3175) dependabot[bot] 2023-08-09 16:35:21 +00:00
  • c049cef04a Handle HTTP_1_1_REQUIRED errors in github provider (#3172) Jon Johnson 2023-08-09 03:04:13 -07:00
  • 665e53bace chore(deps): bump actions/setup-go from 4.0.1 to 4.1.0 (#3170) dependabot[bot] 2023-08-08 19:55:46 +02:00
  • 6b6ffa0984 chore(deps): bump go.step.sm/crypto from 0.33.0 to 0.34.0 (#3161) dependabot[bot] 2023-08-08 19:55:28 +02:00
  • 2d1d013acc chore(deps): bump google.golang.org/api from 0.134.0 to 0.135.0 (#3171) dependabot[bot] 2023-08-08 18:49:15 +02:00
  • 992ab6b89e chore(deps): bump github.com/google/go-containerregistry (#3159) dependabot[bot] 2023-08-08 15:33:13 +02:00
  • bd8bb8ae71 chore(deps): bump golang.org/x/oauth2 from 0.10.0 to 0.11.0 (#3166) dependabot[bot] 2023-08-08 13:16:37 +00:00
  • d67752deca chore(deps): bump github.com/xanzy/go-gitlab from 0.89.0 to 0.90.0 (#3165) dependabot[bot] 2023-08-08 14:45:55 +02:00
  • bcae31d51e chore(deps): bump golang.org/x/term from 0.10.0 to 0.11.0 (#3162) dependabot[bot] 2023-08-08 14:45:41 +02:00
  • 40ff4b957f ci: free up disk space for the gh runner (#3169) Hector Fernandez 2023-08-08 14:10:13 +02:00
  • 46a0b1c740 make VerifyImageAttestation function public (#3156) Priya Wadhwa 2023-08-02 17:52:51 -07:00
  • 84290f4337 chore(deps): bump github.com/open-policy-agent/opa from 0.54.0 to 0.55.0 (#3143) dependabot[bot] 2023-08-01 23:12:09 +02:00
  • 39e004657d chore(deps): bump google.golang.org/api from 0.132.0 to 0.134.0 (#3140) dependabot[bot] 2023-08-01 20:07:00 +00:00
  • 7db509a844 chore(deps): bump go.step.sm/crypto from 0.32.4 to 0.33.0 (#3144) dependabot[bot] 2023-08-01 21:28:35 +02:00
  • 66a190e644 chore(deps): bump github.com/xanzy/go-gitlab from 0.88.0 to 0.89.0 (#3147) dependabot[bot] 2023-08-01 18:37:24 +00:00
  • cc735db643 chore(deps): bump github.com/buildkite/agent/v3 from 3.50.3 to 3.50.4 (#3154) dependabot[bot] 2023-08-01 20:08:42 +02:00
  • 8f14abe839 doc: Add example of sign-blob with key in env var (#3152) Paulo Gomes 2023-08-01 16:27:21 +01:00
  • 5512553f67 add deprecation notice for cosign-releases GCS bucket (#3148) Bob Callaway 2023-08-01 08:53:22 -04:00
  • b8c59979dc improve error messages around bundle != payload hash (#3146) Jason Hall 2023-07-31 13:16:04 -04:00
  • af555d5da2 chore(deps): bump github.com/buildkite/agent/v3 from 3.50.2 to 3.50.3 (#3134) dependabot[bot] 2023-07-24 17:02:09 +00:00
  • 59a835cafd Fix nondeterminsitic timestamps (#3121) Jon Johnson 2023-07-24 01:12:16 -07:00
  • 1e2c91f4c3 chore(deps): bump github.com/open-policy-agent/opa from 0.52.0 to 0.54.0 (#3126) dependabot[bot] 2023-07-21 11:37:40 +02:00
  • 35ed797b45 chore(deps): bump github.com/buildkite/agent/v3 from 3.50.0 to 3.50.2 (#3125) dependabot[bot] 2023-07-21 10:14:32 +02:00
  • 6764ad9657 chore(deps): bump github.com/sigstore/fulcio from 1.3.4 to 1.4.0 (#3122) dependabot[bot] 2023-07-21 10:10:33 +02:00
  • 3789c44b83 chore(deps): bump github.com/xanzy/go-gitlab from 0.87.0 to 0.88.0 (#3124) dependabot[bot] 2023-07-21 09:35:16 +02:00
  • f6332211b9 add 'cosign sign' command-line parameters for mTLS (#3052) Dmitry Savintsev 2023-07-20 18:18:18 +02:00
  • 1861be17c5 chore(deps): bump github.com/xanzy/go-gitlab from 0.86.0 to 0.87.0 (#3119) dependabot[bot] 2023-07-19 19:07:40 +02:00
  • f192995697 chore(deps): bump github.com/buildkite/agent/v3 from 3.49.0 to 3.50.0 (#3118) dependabot[bot] 2023-07-19 09:25:25 +00:00
  • e08026b969 chore(deps): bump google.golang.org/api from 0.131.0 to 0.132.0 (#3117) dependabot[bot] 2023-07-19 09:18:19 +00:00
  • 9f6eb86a28 update go-github to v53 (#3116) Carlos Tadeu Panato Junior 2023-07-19 10:48:37 +02:00
  • 2e9d1d96f1 chore(deps): bump go.step.sm/crypto from 0.32.3 to 0.32.4 (#3115) dependabot[bot] 2023-07-18 16:39:51 +00:00
  • f68679ad3b call e2e test for cosign attach (#3112) Jubril Oyetunji 2023-07-17 18:56:29 +01:00
  • 731adeb0ad chore(deps): bump google.golang.org/api from 0.130.0 to 0.131.0 (#3109) dependabot[bot] 2023-07-13 17:14:57 +00:00
  • c9d82416d6 bump build cross to use go1.20.6 and cosign image to 2.1.1 (#3108) Carlos Tadeu Panato Junior 2023-07-13 16:48:51 +02:00
  • 6572d4f3db chore(deps): bump mikefarah/yq from 4.34.1 to 4.34.2 (#3107) dependabot[bot] 2023-07-13 09:11:41 +02:00
  • 79d4184cef chore(deps): bump go.step.sm/crypto from 0.32.2 to 0.32.3 (#3106) dependabot[bot] 2023-07-12 16:49:44 +00:00
  • 6f4f477ee4 chore(deps): bump github.com/secure-systems-lab/go-securesystemslib (#3105) dependabot[bot] 2023-07-11 19:05:58 +02:00
  • 8d60b83be4 chore(deps): bump github.com/sigstore/fulcio from 1.3.2 to 1.3.4 (#3103) dependabot[bot] 2023-07-10 21:35:51 +02:00