1
0
mirror of synced 2026-10-24 12:59:22 +03:00

Commit Graph

  • 51c9bc2bd6 chore(deps): bump golang.org/x/oauth2 from 0.9.0 to 0.10.0 (#3101) dependabot[bot] 2023-07-06 00:48:06 +02:00
  • 79ef9853a6 chore(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0 (#3086) dependabot[bot] 2023-07-05 23:35:13 +02:00
  • 8f955e8c68 chore(deps): bump google.golang.org/api from 0.129.0 to 0.130.0 (#3100) dependabot[bot] 2023-07-05 23:34:53 +02:00
  • 824d654754 chore(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0 (#3098) dependabot[bot] 2023-07-05 22:55:41 +02:00
  • 34afd5240c chore(deps): bump golang.org/x/term from 0.9.0 to 0.10.0 (#3099) dependabot[bot] 2023-07-05 19:35:11 +02:00
  • 629fb6b1c2 chore(deps): bump github.com/sigstore/rekor (#3096) dependabot[bot] 2023-06-29 18:10:29 +00:00
  • 2a77460fb9 chore(deps): bump github.com/sigstore/fulcio from 1.3.1 to 1.3.2 (#3097) dependabot[bot] 2023-06-29 17:09:49 +00:00
  • f3bbc608b6 chore(deps): bump sigstore/cosign-installer from 3.1.0 to 3.1.1 (#3091) dependabot[bot] 2023-06-27 19:41:22 +02:00
  • baf97ccb49 add changelog for v2.1.1 (#3085) v2.1.1 Carlos Tadeu Panato Junior 2023-06-27 08:57:11 +02:00
  • 351874692b chore(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0 (#3087) dependabot[bot] 2023-06-26 17:26:56 +00:00
  • d3cd566251 wait for the workers become available again to continue the execution (#3084) Carlos Tadeu Panato Junior 2023-06-26 14:23:50 +02:00
  • 412a096895 fix help text when in a container (#3082) Carlos Tadeu Panato Junior 2023-06-26 09:36:42 +02:00
  • 885086cc50 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws (#3079) dependabot[bot] 2023-06-24 08:01:42 +00:00
  • 2659ec23de chore(deps): bump github.com/sigstore/sigstore from 1.7.0 to 1.7.1 (#3076) dependabot[bot] 2023-06-24 09:27:21 +02:00
  • 95d873532b chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp (#3077) dependabot[bot] 2023-06-24 09:26:44 +02:00
  • 9eb4f65c20 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault (#3075) dependabot[bot] 2023-06-24 03:03:51 +02:00
  • d944695c16 update changelog (#3080) priyawadhwa 2023-06-23 19:00:43 +01:00
  • b4d0bad6a8 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure (#3078) dependabot[bot] 2023-06-23 17:27:00 +00:00
  • 986848fbab DNM: Add CHANGELOG for v2.1.0 (#3068) v2.1.0 priyawadhwa 2023-06-23 18:13:03 +01:00
  • 84a5c8e60d use workers to limit the paralellism when verifying images (#3069) Carlos Tadeu Panato Junior 2023-06-23 19:12:49 +02:00
  • ff648d5fb4 Fix --sig-only in cosign copy (#3074) Jon Johnson 2023-06-21 15:09:24 -07:00
  • a476d2006d chore(deps): bump github.com/xanzy/go-gitlab from 0.85.0 to 0.86.0 (#3072) dependabot[bot] 2023-06-21 21:48:43 +02:00
  • ae8705df2f chore(deps): bump go.step.sm/crypto from 0.32.0 to 0.32.1 (#3071) dependabot[bot] 2023-06-21 17:44:10 +00:00
  • 11c0e26c18 chore(deps): bump github.com/buildkite/agent/v3 from 3.48.0 to 3.49.0 (#3073) dependabot[bot] 2023-06-21 17:38:52 +00:00
  • 1e00e4100b drop depguard check (#3070) Carlos Tadeu Panato Junior 2023-06-21 10:26:03 +02:00
  • 9da30eacfc Verify sigs and attestations in parallel (#3066) priyawadhwa 2023-06-20 16:39:29 +01:00
  • b0072d5668 Fix links to sigstore/docs in markdown files (#3064) Jakub Hrozek 2023-06-19 12:26:41 +02:00
  • 14b7674931 Fix pkg/cosign/errors (#3050) Jon Johnson 2023-06-16 14:07:45 -07:00
  • 03c25230f3 chore(deps): bump google.golang.org/api from 0.127.0 to 0.128.0 (#3062) dependabot[bot] 2023-06-16 17:28:31 +00:00
  • 4b8c04ac86 Deep inspect attestations when filtering download (#3031) Luiz Carvalho 2023-06-15 17:35:44 -04:00
  • 7739f5f172 refactor bundle validation code, add support for DSSE rekor type (#3016) Bob Callaway 2023-06-15 14:27:50 -04:00
  • 80c0f88f78 update sigstore/sigstore and k8s dependencies (#3061) Carlos Tadeu Panato Junior 2023-06-15 11:47:58 +02:00
  • 4a2f67e796 chore(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0 (#3058) dependabot[bot] 2023-06-14 17:36:16 +00:00
  • 0556634725 chore(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 (#3057) dependabot[bot] 2023-06-14 14:50:34 +02:00
  • 1f632e860e chore(deps): bump google.golang.org/api from 0.126.0 to 0.127.0 (#3056) dependabot[bot] 2023-06-14 14:50:10 +02:00
  • ddc18d7bc3 chore(deps): bump go.step.sm/crypto from 0.31.2 to 0.32.0 (#3054) dependabot[bot] 2023-06-14 14:49:50 +02:00
  • a687489812 chore(deps): bump golang.org/x/crypto from 0.9.0 to 0.10.0 (#3053) dependabot[bot] 2023-06-14 13:56:48 +02:00
  • 78aacd1db3 Update golangci-lint and add depguard rules (#3051) Carlos Tadeu Panato Junior 2023-06-13 13:21:10 +02:00
  • 86da4aa7b5 Allow overriding remote options (#3049) Jon Johnson 2023-06-13 02:42:32 -07:00
  • 1660de7865 chore(deps): bump github.com/go-openapi/swag from 0.22.3 to 0.22.4 (#3046) dependabot[bot] 2023-06-12 17:30:46 +00:00
  • 4912fa9f81 chore(deps): bump github.com/xanzy/go-gitlab from 0.84.0 to 0.85.0 (#3047) dependabot[bot] 2023-06-12 17:27:23 +00:00
  • 8549e13815 chore(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 (#3048) dependabot[bot] 2023-06-12 17:26:39 +00:00
  • 288c45881d fix: update doc to refer to github-actions oidc provider (#3040) Yolanda Robla Mota 2023-06-12 16:56:57 +02:00
  • 4293942252 fix: prefer GitHub OIDC provider if enabled (#3044) Jason Hall 2023-06-11 05:21:34 -04:00
  • d825bd5ec9 chore(deps): bump github/codeql-action from 2.3.6 to 2.13.4 (#3043) dependabot[bot] 2023-06-11 11:17:00 +02:00
  • b94acfddc6 chore(deps): bump actions/checkout from 3.5.2 to 3.5.3 (#3042) dependabot[bot] 2023-06-10 11:04:47 +02:00
  • d0cc9853c9 feat: adds no cert found on sig exit code (#3038) Chris Burns 2023-06-09 22:59:23 +01:00
  • f4f319bc72 chore(deps): bump google.golang.org/api from 0.125.0 to 0.126.0 (#3041) dependabot[bot] 2023-06-09 08:36:39 +00:00
  • 2d3be8eaaa chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.5 to 2.1.6 (#3036) dependabot[bot] 2023-06-09 10:08:31 +02:00
  • 2742dceac0 chore(deps): bump github.com/buildkite/agent/v3 from 3.47.0 to 3.48.0 (#3037) dependabot[bot] 2023-06-08 19:55:49 +02:00
  • cd1dbc9bca Make predicate a required flag in attest commands (#3033) Luiz Carvalho 2023-06-07 11:45:08 -04:00
  • 71014a969d update builder image to use go1.20.5 (#3035) Carlos Tadeu Panato Junior 2023-06-07 17:21:08 +02:00
  • 1d98747c26 chore(refactor) refactors error handling with exit codes (#2976) Chris Burns 2023-06-06 07:34:09 +01:00
  • 1894263827 Added support for attaching Time stamp authority Response in attach command (#3001) Mukuls77 2023-06-06 11:17:09 +05:30
  • 255ac311bb Add sign --sign-container-identity CLI (#2984) Sascha Grunert 2023-06-05 19:08:04 +02:00
  • f254dcdf16 chore(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 (#3032) dependabot[bot] 2023-06-02 20:23:43 +02:00
  • f9ee49897e Feature: Allow cosign to sign digests before they are uploaded. (#2959) Matt Moore 2023-06-02 10:37:44 -07:00
  • 83c08ce4f3 chore(deps): bump github.com/xanzy/go-gitlab from 0.83.0 to 0.84.0 (#3026) dependabot[bot] 2023-06-02 08:22:19 +02:00
  • 1ea292bcff chore(deps): bump github/codeql-action from 2.3.5 to 2.3.6 (#3028) dependabot[bot] 2023-06-01 17:28:36 +00:00
  • 5ba0db0b7f chore(deps): bump go.step.sm/crypto from 0.31.1 to 0.31.2 (#3027) dependabot[bot] 2023-06-01 17:28:15 +00:00
  • d48cc6532e Beautify help flags (#3011) Chok Yip Lau 2023-05-31 12:59:32 -04:00
  • c17a36a9ce accepts attachment-tag-prefix for cosign copy (#3014) Mritunjay Kumar Sharma 2023-05-31 20:02:37 +05:30
  • 0a4db33042 chore(deps): bump go.step.sm/crypto from 0.31.0 to 0.31.1 (#3022) dependabot[bot] 2023-05-31 09:17:24 +02:00
  • bf8373b4ff bump sigstore/sigstore dep to @v1.6.5 (#3020) Jason Hall 2023-05-31 01:47:40 -04:00
  • 489fbcd143 chore(deps): bump google.golang.org/api from 0.124.0 to 0.125.0 (#3021) dependabot[bot] 2023-05-30 20:33:54 +00:00
  • 22a9eff022 chore(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#3017) dependabot[bot] 2023-05-30 21:57:22 +02:00
  • ec4c01ee04 chore(deps): bump github.com/spf13/viper from 1.15.0 to 1.16.0 (#3018) dependabot[bot] 2023-05-30 17:26:56 +00:00
  • 7e0768c5d1 chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.4 to 2.1.5 (#3013) dependabot[bot] 2023-05-29 20:30:36 +02:00
  • 6236366b6c chore(deps): bump github/codeql-action from 2.3.4 to 2.3.5 (#3008) dependabot[bot] 2023-05-26 19:44:08 +02:00
  • 7811177313 chore(deps): bump go.step.sm/crypto from 0.30.0 to 0.31.0 (#3010) dependabot[bot] 2023-05-26 19:43:35 +02:00
  • b831958685 chore(deps): bump github.com/sigstore/rekor from 1.1.1 to 1.2.1 (#3009) dependabot[bot] 2023-05-26 19:43:12 +02:00
  • 8220025ee7 chore(deps): bump github.com/buildkite/agent/v3 from 3.46.1 to 3.47.0 (#3005) dependabot[bot] 2023-05-25 17:33:25 +00:00
  • 0da1a74052 chore(deps): bump github/codeql-action from 2.3.3 to 2.3.4 (#3004) dependabot[bot] 2023-05-25 17:30:12 +00:00
  • 65eb28af97 chore(deps): bump mikefarah/yq from 4.33.3 to 4.34.1 (#3002) dependabot[bot] 2023-05-23 17:31:42 +00:00
  • ab45e7fe3a chore(deps): bump google.golang.org/api from 0.123.0 to 0.124.0 (#3003) dependabot[bot] 2023-05-23 17:26:42 +00:00
  • 0544abd8fc Feature: adds '--allow-insecure-registry' for cosign load (#3000) Mritunjay Kumar Sharma 2023-05-23 19:03:26 +05:30
  • f21081a182 chore(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#2996) dependabot[bot] 2023-05-19 17:31:14 +00:00
  • da604ca512 chore(deps): bump sigstore/cosign-installer from 3.0.4 to 3.0.5 (#2992) dependabot[bot] 2023-05-19 11:08:17 +02:00
  • 92df24c7d5 chore(deps): bump google.golang.org/api from 0.122.0 to 0.123.0 (#2993) dependabot[bot] 2023-05-18 22:47:24 +02:00
  • b57ccbc835 retry GH OIDC requests up to 3 times (#2991) Jason Hall 2023-05-18 12:13:14 -04:00
  • f6d8481511 chore(docs): deprecates hardware tokens and PKCS11 docs (#2970) Chris Burns 2023-05-18 12:42:51 +01:00
  • fc61f43262 use github.com/google/go-containerregistry v0.15.2 (#2990) Dmitry Savintsev 2023-05-17 09:07:56 +02:00
  • 663db3fe99 chore(deps): bump codecov/codecov-action from 3.1.3 to 3.1.4 (#2988) dependabot[bot] 2023-05-16 19:51:22 +02:00
  • c99c2c0577 chore(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.4 (#2987) dependabot[bot] 2023-05-16 17:34:52 +00:00
  • d3e90a744e download attestation: support --platform flag (#2980) Jason Hall 2023-05-15 23:25:38 -04:00
  • 5d5be2815b chore(deps): bump actions/setup-go from 4.0.0 to 4.0.1 (#2981) dependabot[bot] 2023-05-15 17:37:21 +00:00
  • 40dbbd8b09 chore(deps): bump sigs.k8s.io/release-utils from 0.7.3 to 0.7.4 (#2982) dependabot[bot] 2023-05-15 17:33:54 +00:00
  • 95ae338878 chore(deps): bump github.com/docker/distribution (#2975) dependabot[bot] 2023-05-12 01:54:14 +02:00
  • 369f6c16bb chore(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 (#2974) dependabot[bot] 2023-05-11 21:20:54 +00:00
  • f54562e678 chore(deps): bump github.com/google/certificate-transparency-go (#2971) dependabot[bot] 2023-05-11 17:37:14 +00:00
  • ce711bd35b chore(deps): bump go.step.sm/crypto from 0.29.3 to 0.30.0 (#2968) dependabot[bot] 2023-05-10 18:05:08 +00:00
  • efc4260795 chore(deps): bump google.golang.org/api from 0.121.0 to 0.122.0 (#2969) dependabot[bot] 2023-05-10 10:38:03 -07:00
  • cc96994342 chore(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0 (#2965) dependabot[bot] 2023-05-09 17:58:31 +00:00
  • a617815fa8 chore(deps): bump github.com/sigstore/timestamp-authority (#2967) dependabot[bot] 2023-05-09 17:32:54 +00:00
  • f157cfbb8b chore(deps): bump golang.org/x/oauth2 from 0.7.0 to 0.8.0 (#2966) dependabot[bot] 2023-05-09 17:30:43 +00:00
  • b0d4f426b2 chore(deps): bump google-github-actions/auth from 1.1.0 to 1.1.1 (#2964) dependabot[bot] 2023-05-09 17:25:23 +00:00
  • 5b873047bf chore(deps): bump github.com/buildkite/agent/v3 from 3.46.0 to 3.46.1 (#2963) dependabot[bot] 2023-05-08 16:36:56 +00:00
  • fa32dd530b Cleanup: Add Digest to the SignedEntity interface. (#2960) Matt Moore 2023-05-08 07:23:10 -07:00
  • 3121a17d13 chore(deps): bump github.com/google/go-containerregistry (#2958) dependabot[bot] 2023-05-05 20:13:29 +00:00
  • a8b627e5f9 chore(deps): bump github.com/sigstore/sigstore from 1.6.3 to 1.6.4 (#2957) dependabot[bot] 2023-05-05 12:38:48 -07:00