1
0
mirror of synced 2026-10-24 12:59:22 +03:00

Commit Graph

  • 215b9d6886 chore(deps): bump github/codeql-action from 2.3.2 to 2.3.3 (#2955) dependabot[bot] 2023-05-05 11:26:24 -07:00
  • aee572194b chore(deps): bump github.com/transparency-dev/merkle from 0.0.1 to 0.0.2 (#2954) dependabot[bot] 2023-05-05 11:11:13 -07:00
  • 62167737aa chore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.5.0 to 0.6.0 (#2950) dependabot[bot] 2023-05-04 15:09:16 -07:00
  • f1180899d8 chore(deps): bump google.golang.org/api from 0.120.0 to 0.121.0 (#2952) dependabot[bot] 2023-05-04 18:32:59 +00:00
  • 0afa006c41 chore(deps): bump golang.org/x/sync from 0.1.0 to 0.2.0 (#2953) dependabot[bot] 2023-05-04 18:03:24 +00:00
  • 40d3806ce0 chore(deps): bump github.com/sigstore/fulcio from 1.3.0 to 1.3.1 (#2949) dependabot[bot] 2023-05-04 17:34:16 +00:00
  • f800f7bb77 chore(deps): bump github.com/buildkite/agent/v3 from 3.45.0 to 3.46.0 (#2951) dependabot[bot] 2023-05-04 17:27:14 +00:00
  • 807faf5ea8 chore(deps): bump golang.org/x/term from 0.7.0 to 0.8.0 (#2948) dependabot[bot] 2023-05-04 17:25:13 +00:00
  • f2692882ba Update cross builder and cosign images (#2947) Carlos Tadeu Panato Junior 2023-05-04 00:53:51 -07:00
  • 606a25d1fb chore(deps): bump github.com/sigstore/rekor from 1.1.0 to 1.1.1 (#2946) dependabot[bot] 2023-05-03 12:30:31 -07:00
  • bf98415713 chore(deps): bump github.com/sigstore/timestamp-authority (#2944) dependabot[bot] 2023-05-02 17:31:05 +00:00
  • a2dc178f71 chore(deps): bump github.com/sigstore/fulcio from 1.2.0 to 1.3.0 (#2945) dependabot[bot] 2023-05-02 17:30:29 +00:00
  • 2c2c663592 Removes old demo gif (#2943) Enyinna Ochulor 2023-04-29 03:45:23 -05:00
  • 21f0017ec6 chore(deps): bump github.com/open-policy-agent/opa from 0.51.0 to 0.52.0 (#2941) dependabot[bot] 2023-04-29 10:12:37 +02:00
  • 40bd4f0925 chore(deps): bump github/codeql-action from 2.3.1 to 2.3.2 (#2940) dependabot[bot] 2023-04-29 03:22:24 +02:00
  • e7bc78b291 Update release readme (#2942) Hayden B 2023-04-28 13:14:21 -07:00
  • cbb8af65dd verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845) Dmitry Savintsev 2023-04-28 21:34:29 +02:00
  • ef1b2a0207 chore(deps): bump github/codeql-action from 2.3.0 to 2.3.1 (#2938) dependabot[bot] 2023-04-27 17:35:22 -04:00
  • b1ba7bd87b chore(deps): bump google.golang.org/api from 0.119.0 to 0.120.0 (#2933) dependabot[bot] 2023-04-26 17:33:56 +00:00
  • 2defed8827 chore(deps): bump github.com/in-toto/in-toto-golang from 0.7.1 to 0.8.0 (#2935) dependabot[bot] 2023-04-26 17:32:43 +00:00
  • e34127c1a4 chore(deps): bump github.com/google/certificate-transparency-go (#2934) dependabot[bot] 2023-04-26 17:24:45 +00:00
  • 45c8c06206 remove COSIGN_EXPERIMENTAL setting for keyless in CI (#2932) Dmitry Savintsev 2023-04-26 16:56:37 +02:00
  • 3534a7df5b remove GODEBUG: x509sha1=1 setting for e2e tests (#2931) Dmitry Savintsev 2023-04-26 14:57:27 +02:00
  • 17cc13812d ggcr: Use remote.Reuse to make everything faster (#2929) Jon Johnson 2023-04-25 16:21:39 -07:00
  • bdf1c76315 chore(deps): bump sigstore/cosign-installer from 3.0.2 to 3.0.3 (#2928) dependabot[bot] 2023-04-25 16:39:13 +00:00
  • 4012c4794f clone rekor repo if no rekor dir found (#2927) Dmitry Savintsev 2023-04-25 08:43:04 +02:00
  • 8d869b090f Add CHANGELOG for v2.0.2 (#2926) Hayden B 2023-04-24 12:27:43 -07:00
  • 871448050b chore(deps): bump github/codeql-action from 2.2.12 to 2.3.0 (#2924) v2.0.2 dependabot[bot] 2023-04-24 17:31:42 +00:00
  • dc22795441 Remove experimental warning from Fulcio flags (#2923) priyawadhwa 2023-04-24 18:07:58 +01:00
  • 0da5bc03be add missing oidc provider (#2922) Hector Fernandez 2023-04-24 17:19:51 +02:00
  • 37f75f602e Add zot as a supported registry (#2920) Ramkumar Chinchani 2023-04-24 05:51:18 -07:00
  • dc101a1686 Bump sigstore/sigstore dependency to 1.6.3 (#2918) Hayden B 2023-04-22 00:14:27 -07:00
  • a1d40cd3ff chore(deps): bump codecov/codecov-action from 3.1.2 to 3.1.3 (#2917) dependabot[bot] 2023-04-22 07:24:02 +02:00
  • 80c035fac4 chore(deps): bump google.golang.org/api from 0.118.0 to 0.119.0 (#2916) dependabot[bot] 2023-04-20 20:24:18 +02:00
  • 08e9a86d56 minor comments changes (#2913) Dmitry Savintsev 2023-04-20 13:49:05 +02:00
  • 771e323cb2 chore(deps): bump github.com/go-openapi/runtime from 0.25.0 to 0.26.0 (#2911) dependabot[bot] 2023-04-18 22:13:28 +02:00
  • 57eff08499 chore(deps): bump google-github-actions/auth from 1.0.0 to 1.1.0 (#2912) dependabot[bot] 2023-04-18 22:12:53 +02:00
  • 82fcb7a884 feat: Make cosign copy faster (#2901) Jon Johnson 2023-04-17 11:54:43 -07:00
  • b2227a4512 chore(deps): bump github.com/xanzy/go-gitlab from 0.82.0 to 0.83.0 (#2909) dependabot[bot] 2023-04-17 17:25:16 +00:00
  • b930e80837 chore(docs) deprecate note for usage docs (#2906) Chris Burns 2023-04-17 15:13:57 +01:00
  • c408ce608f chore(deps): bump go.step.sm/crypto from 0.29.2 to 0.29.3 (#2905) dependabot[bot] 2023-04-14 17:25:12 +00:00
  • 319a89699a chore(deps): bump github/codeql-action from 2.2.11 to 2.2.12 (#2902) dependabot[bot] 2023-04-13 20:17:33 +02:00
  • 3a1ef45240 chore(deps): bump actions/checkout from 3.5.1 to 3.5.2 (#2903) dependabot[bot] 2023-04-13 20:17:19 +02:00
  • f883b14ff5 chore(deps): bump cuelang.org/go from 0.4.3 to 0.5.0 (#2894) dependabot[bot] 2023-04-13 16:06:33 +00:00
  • 262abd0cda deprecates kms_support docs (#2900) Chris Burns 2023-04-13 16:51:39 +01:00
  • 82328cc7a9 adds note of deprecation for examples.md docs (#2899) Chris Burns 2023-04-13 08:35:01 +01:00
  • b36c874d48 chore(deps): bump google.golang.org/api from 0.116.0 to 0.118.0 (#2895) dependabot[bot] 2023-04-12 22:08:19 +02:00
  • 24f6b48b74 chore(deps): bump go.step.sm/crypto from 0.29.1 to 0.29.2 (#2896) dependabot[bot] 2023-04-12 21:08:56 +02:00
  • a948cb9175 chore(deps): bump codecov/codecov-action from 3.1.1 to 3.1.2 (#2897) dependabot[bot] 2023-04-12 21:08:37 +02:00
  • f686d6a508 chore(deps): bump actions/checkout from 3.5.0 to 3.5.1 (#2898) dependabot[bot] 2023-04-12 21:08:22 +02:00
  • 09d3b9cffb chore(deps): bump github.com/docker/docker (#2893) dependabot[bot] 2023-04-12 16:47:44 +00:00
  • c6d7abb74b Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891) Hayden B 2023-04-11 11:01:07 -07:00
  • 04b4be72a0 chore(deps): bump mikefarah/yq from 4.33.2 to 4.33.3 (#2890) dependabot[bot] 2023-04-11 17:25:30 +00:00
  • 8cb0813c2e chore(deps): bump go.step.sm/crypto from 0.29.0 to 0.29.1 (#2888) dependabot[bot] 2023-04-11 17:23:55 +00:00
  • a8f57b66e8 remove sget (#2885) Carlos Tadeu Panato Junior 2023-04-10 04:29:39 +02:00
  • de8753b5c7 Require a payload to be provided with a signature (#2785) Miloslav Trmač 2023-04-08 16:27:52 +02:00
  • 12097ebff0 chore(deps): bump golang.org/x/crypto from 0.7.0 to 0.8.0 (#2880) dependabot[bot] 2023-04-07 17:10:58 -04:00
  • b4593128bf chore(deps): bump go.step.sm/crypto from 0.28.0 to 0.29.0 (#2882) dependabot[bot] 2023-04-07 20:31:15 +02:00
  • e75245b060 cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876) eiffel-fl 2023-04-07 19:26:25 +01:00
  • d8e4dd2ff8 chore(deps): bump sigstore/cosign-installer from 3.0.1 to 3.0.2 (#2884) dependabot[bot] 2023-04-07 17:37:15 +00:00
  • 27265e63dd chore(deps): bump golang.org/x/oauth2 from 0.6.0 to 0.7.0 (#2881) dependabot[bot] 2023-04-07 17:29:32 +00:00
  • a0ac56eed6 chore(deps): bump github/codeql-action from 2.2.10 to 2.2.11 (#2883) dependabot[bot] 2023-04-07 17:28:56 +00:00
  • de03ebbf72 Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878) Jon Johnson 2023-04-07 00:41:08 -07:00
  • 8faaee4d2b Remove force flag from release script (#2877) v2.0.1 Hayden B 2023-04-06 12:10:33 -07:00
  • f2821fe797 Add CHANGELOG for 2.0.1 (#2875) Hayden B 2023-04-06 10:53:20 -07:00
  • 288ba8c174 chore(deps): bump actions/github-script from 6.4.0 to 6.4.1 (#2874) dependabot[bot] 2023-04-06 17:29:36 +00:00
  • 9cc65ee559 chore(deps): bump google.golang.org/api from 0.115.0 to 0.116.0 (#2873) dependabot[bot] 2023-04-06 17:29:05 +00:00
  • cb6a581893 chore: remove cosign policy command (#2846) Radoslav Dimitrov 2023-04-06 14:15:15 +03:00
  • 9b482a5e37 Add environment variable token provider. (#2864) Billy Lynch 2023-04-06 07:04:42 -04:00
  • e52c492c63 bump cross builder image to use go1.20.3 (#2872) Carlos Tadeu Panato Junior 2023-04-06 13:04:00 +02:00
  • 543071605d chore(deps): bump github.com/sigstore/sigstore from 1.6.0 to 1.6.1 (#2866) dependabot[bot] 2023-04-05 18:08:25 +00:00
  • 3182d28916 chore(deps): bump golang.org/x/term from 0.6.0 to 0.7.0 (#2869) dependabot[bot] 2023-04-05 18:06:43 +00:00
  • 70b2270abd chore(deps): bump github.com/in-toto/in-toto-golang from 0.7.0 to 0.7.1 (#2867) dependabot[bot] 2023-04-05 17:38:13 +00:00
  • 60d7af6ab0 chore(deps): bump github/codeql-action from 2.2.9 to 2.2.10 (#2870) dependabot[bot] 2023-04-05 17:30:25 +00:00
  • abbb4d98b4 chore(deps): bump google.golang.org/api from 0.114.0 to 0.115.0 (#2868) dependabot[bot] 2023-04-05 17:29:09 +00:00
  • 47579cfd68 chore(deps): bump github.com/xanzy/go-gitlab from 0.81.0 to 0.82.0 (#2865) dependabot[bot] 2023-04-05 17:28:18 +00:00
  • fdeea9fd15 chore(deps): bump github.com/open-policy-agent/opa from 0.50.2 to 0.51.0 (#2857) dependabot[bot] 2023-04-04 15:35:17 -07:00
  • d33e75b696 chore(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3 (#2852) dependabot[bot] 2023-04-04 15:34:11 -07:00
  • 09004f2c5d update golangci-lint to v1.52.2 (#2851) Carlos Tadeu Panato Junior 2023-04-05 00:33:55 +02:00
  • 4e99b4040c chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.3 to 2.1.4 (#2856) dependabot[bot] 2023-04-04 18:02:03 +00:00
  • 52859ddce7 chore(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#2862) dependabot[bot] 2023-04-04 17:29:33 +00:00
  • c900e9acc2 chore(deps): bump mikefarah/yq from 4.33.1 to 4.33.2 (#2855) dependabot[bot] 2023-04-01 12:05:11 +02:00
  • a6d039aa8f Resolves #2685 (#2853) Derek Burdick 2023-03-31 13:16:28 -04:00
  • 062dd847b1 chore(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.0 (#2850) dependabot[bot] 2023-03-29 19:59:14 +02:00
  • 5b8af9cab4 chore(deps): bump github.com/go-openapi/strfmt from 0.21.5 to 0.21.7 (#2848) dependabot[bot] 2023-03-28 19:46:57 +02:00
  • 01a2b2adc4 chore(deps): bump github.com/sigstore/fulcio from 1.1.0 to 1.2.0 (#2847) dependabot[bot] 2023-03-28 19:45:48 +02:00
  • b41160e5f5 allow customising 'go' executable with GOEXE var (#2841) Dmitry Savintsev 2023-03-27 20:10:15 +02:00
  • 653695ac02 chore(deps): bump go.step.sm/crypto from 0.27.0 to 0.28.0 (#2842) dependabot[bot] 2023-03-27 19:57:24 +02:00
  • 5c24e0b459 chore(deps): bump mikefarah/yq from 4.32.2 to 4.33.1 (#2843) dependabot[bot] 2023-03-27 19:56:29 +02:00
  • 39050c1b6b chore(deps): bump github/codeql-action from 2.2.8 to 2.2.9 (#2844) dependabot[bot] 2023-03-27 19:56:07 +02:00
  • 486edb9ab1 Makefile: date format of log should not show signatures (#2835) Vincent Batts 2023-03-25 13:17:05 -04:00
  • 8a304d5cb3 feat: consistent tlog warnings during verification (#2840) Luiz Carvalho 2023-03-25 11:33:00 -04:00
  • 22055586ac chore(deps): bump actions/checkout from 3.4.0 to 3.5.0 (#2837) dependabot[bot] 2023-03-25 11:25:13 +01:00
  • e71faa1af0 feat: add riscv64 arch (#2821) Aleksandr Razumov 2023-03-24 16:42:02 +03:00
  • 324192e84f chore(deps): bump github/codeql-action from 2.2.7 to 2.2.8 (#2831) dependabot[bot] 2023-03-24 01:34:02 +01:00
  • 42c4b8d901 Add missing flags to cosign verify dockerfile/manifest (#2830) Hayden B 2023-03-23 07:08:40 -07:00
  • a2c2dc00ba chore(deps): bump actions/stale from 7.0.0 to 8.0.0 (#2829) dependabot[bot] 2023-03-23 13:10:46 +00:00
  • 4c4c5e1578 chore(deps): bump github.com/sigstore/timestamp-authority (#2828) dependabot[bot] 2023-03-22 17:30:31 +00:00
  • a00174fc6a chore(deps): bump github.com/open-policy-agent/opa from 0.50.1 to 0.50.2 (#2825) dependabot[bot] 2023-03-21 18:50:58 +01:00
  • b69cadeaa5 chore(deps): bump mikefarah/yq from 4.31.2 to 4.32.2 (#2822) dependabot[bot] 2023-03-20 17:36:12 +00:00