1
0
mirror of synced 2026-10-24 12:59:22 +03:00

Commit Graph

  • b942d40b8a chore(deps): bump the actions group across 1 directory with 10 updates (#4990) dependabot[bot] 2026-07-06 14:44:57 -07:00
  • 6b3bc6cc5b chore(deps): bump github.com/go-openapi/swag/conv from 0.26.1 to 0.27.0 (#4985) dependabot[bot] 2026-07-06 14:38:34 -07:00
  • 9df8764480 chore(deps): bump github.com/buildkite/agent/v3 from 3.127.2 to 3.130.0 (#4988) dependabot[bot] 2026-07-06 14:38:19 -07:00
  • 57ec843ae8 chore(deps): bump the gomod group across 1 directory with 8 updates (#4983) dependabot[bot] 2026-07-05 14:48:08 -07:00
  • 5121398c0a docs: add OVHcloud KMS in available external plugins (#4962) Kevin Demy 2026-07-05 22:42:58 +02:00
  • ef3e3b446a fix(release): restore signing-step auth and fail on image signing errors (#4978) Stefan Kuhn 2026-07-05 22:38:23 +02:00
  • 95d7d2e5dc chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4953) dependabot[bot] 2026-07-05 13:18:11 -07:00
  • 99ad69a482 docs: fix dead TOC anchor in SIGNATURE_SPEC (#4966) Nikhil J 2026-07-06 01:47:26 +05:30
  • 16ddbcf904 feat(signing-config): add --base-config flag to override services from base config (#4977) Firas Ghanmi 2026-07-05 01:57:05 +02:00
  • f17f812494 fix: pass NewBundleFormat to KeyOpts in sign command (#4981) Jason Power 2026-07-05 00:45:07 +01:00
  • 9e69e9ea0c Remove new bundle format flag from conformance Aaron Lew 2026-06-30 14:48:11 -04:00
  • 38f73bb8fd Add insecure registry flag to ko publish in kind-verify-attestation workflow (#4970) Aaron Lew 2026-06-30 15:28:34 -04:00
  • 8184126082 feat: improve verify flag shell completions (#4965) Ville Skyttä 2026-06-30 20:23:05 +03:00
  • 6ef8d9d040 fix: ignore build stage references in dockerfile verify (#4961) Ricard Bejarano 2026-06-23 09:47:17 +02:00
  • 8dbdef5616 fix: allow '=' in annotation values (#4957) SEONGHYUN HONG 2026-06-19 03:14:56 +09:00
  • 2e0749ac11 Deprecate --output-attestation (#4958) Aaron Lew 2026-06-18 14:02:55 -04:00
  • ed0efe8cb4 docs: fix Short style and add Example fields to piv-tool subcommands (#4942) Ogulcan Aydogan 2026-06-15 18:35:59 +01:00
  • a44f389f94 update builder to use go1.26.4 (#4949) Carlos Tadeu Panato Junior 2026-06-15 18:51:21 +02:00
  • a633e3a327 fix(inspect test): Replace non-existent tsa.GetTimestampedSignature with new helper (#4946) Aaron Lew 2026-06-12 17:12:47 -04:00
  • 6d39eb9e98 docs: drop trailing periods from cobra Short descriptions (#4944) Ogulcan Aydogan 2026-06-12 19:01:58 +01:00
  • 0fc9811059 Remove unused signing code (#4918) Aaron Lew 2026-06-12 07:57:20 -04:00
  • 95dceda0e7 Remove unused OCI code (#4935) Aaron Lew 2026-06-12 07:56:32 -04:00
  • b1dd2e9524 Remove unused ephemeral signer (#4938) Aaron Lew 2026-06-12 07:55:46 -04:00
  • d41b86c63c docs: add Example fields to env and bundle create commands (#4941) Ogulcan Aydogan 2026-06-11 21:51:11 +01:00
  • 8a7174a1d4 docs: fix Short style and add Example fields to pkcs11-tool subcommands Ogulcan Aydogan 2026-06-11 20:41:08 +01:00
  • 2233166935 Add bundle inspect command (#4842) Aaron Lew 2026-06-09 19:34:33 -04:00
  • 7914231b34 Fix build for Go version 1.26.3 (#4933) v3.1.1 Hayden 2026-06-09 05:10:44 -07:00
  • d8e992a9dd chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 (#4929) dependabot[bot] 2026-06-08 17:01:22 -07:00
  • 305817bcf1 chore(deps): bump google.golang.org/api from 0.280.0 to 0.283.0 (#4925) dependabot[bot] 2026-06-08 17:01:08 -07:00
  • 09564f953e chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4926) dependabot[bot] 2026-06-08 17:00:46 -07:00
  • 702cbe09e6 chore(deps): bump golang in the all group across 1 directory dependabot[bot] 2026-06-08 16:24:17 +00:00
  • f3885a613c chore(deps): bump github.com/go-openapi/swag/conv in the gomod group dependabot[bot] 2026-06-08 16:22:47 +00:00
  • 76a5eec053 chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.6.0 to 2.7.0 dependabot[bot] 2026-06-08 16:23:10 +00:00
  • df2a334ff4 chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 dependabot[bot] 2026-06-08 16:23:19 +00:00
  • 2620da6c58 chore(deps): bump github.com/open-policy-agent/opa from 1.16.2 to 1.17.1 dependabot[bot] 2026-06-08 16:23:32 +00:00
  • 282ff330a6 chore(deps): bump the actions group across 1 directory with 4 updates dependabot[bot] 2026-06-08 16:25:07 +00:00
  • d253adffe0 chore(deps): bump the gomod group across 1 directory with 2 updates (#4919) v3.1.0 dependabot[bot] 2026-06-05 15:19:50 -07:00
  • c7b62530dc test(e2e): cover Rekor v2 hashedrekord behavior (#4916) Cody Soyland 2026-06-05 17:05:38 -04:00
  • 6115844a09 Update sigstore-go to v1.2.0 (#4914) Cody Soyland 2026-06-05 13:56:34 -04:00
  • 0008f0ecd5 fix(verify): copy CheckOpts inside VerifyNewBundle to fix data race (#4917) Cody Soyland 2026-06-05 13:52:25 -04:00
  • 5e053b312e fix(verify): Attach provided certificate and chain to loaded signature (#4737) Aaron Lew 2026-06-02 22:58:30 -04:00
  • 0add3b539d Remove docstring references to deprecated flags (#4910) Zach Steindler 2026-06-02 15:07:41 -04:00
  • ceeb6f4e4e Add staging support to conformance testing Aaron Lew 2026-06-01 20:12:26 -04:00
  • 8cedfdeddb Deprecate subcommands (#4894) Eric Pickard 2026-06-01 15:34:50 -04:00
  • 8f34218544 verify: return TUF errors for new bundle trusted roots CrazyMax 2026-05-20 11:22:52 +02:00
  • 4594450717 chore(deps): bump k8s.io/client-go from 0.35.3 to 0.36.1 (#4858) dependabot[bot] 2026-05-28 15:49:21 +02:00
  • 55f4d9e208 Enable initialize command output in conformance (#4892) Aaron Lew 2026-05-26 11:11:19 -04:00
  • 9146e3fdb3 Fix Ed25519ph check to respect custom signing configs in sign-blob (#4880) Aaron Lew 2026-05-26 11:09:28 -04:00
  • 0bfb59e074 chore(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.2 (#4833) dependabot[bot] 2026-05-26 11:57:04 +02:00
  • 3384f6a22a chore(deps): bump the actions group with 4 updates (#4890) dependabot[bot] 2026-05-26 11:24:52 +02:00
  • f317752319 chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#4891) dependabot[bot] 2026-05-26 11:24:31 +02:00
  • 074c598a42 chore(deps): bump k8s.io/apimachinery from 0.35.3 to 0.36.1 (#4859) dependabot[bot] 2026-05-26 11:24:10 +02:00
  • ca9906d15a chore(deps): bump github.com/buildkite/agent/v3 from 3.118.0 to 3.127.0 (#4861) dependabot[bot] 2026-05-25 16:15:52 +02:00
  • 5b603990dc update go-github to v88 (#4887) Carlos Tadeu Panato Junior 2026-05-24 14:27:48 +02:00
  • 29dc88b8ed bump static-debian to static-debian13 (#4888) Carlos Tadeu Panato Junior 2026-05-24 14:27:31 +02:00
  • 7465055093 update builder to use go1.26.3 (#4885) Carlos Tadeu Panato Junior 2026-05-24 14:27:11 +02:00
  • cb68b29724 bump golangci-lint (#4886) Carlos Tadeu Panato Junior 2026-05-24 14:26:52 +02:00
  • da174ac4cd Fix unsafe type assertion in Rego policy evaluation (#4882) Sebastien Tardif 2026-05-22 22:22:11 -07:00
  • b4e1761f76 fix: check HTTP status code in LoadFileOrURL (#4877) Sebastien Tardif 2026-05-22 15:31:25 -07:00
  • a01e484b73 Use the configured Target Repository more consistently. (#4836) Andrew Womeldorf 2026-05-21 09:22:30 -05:00
  • d3f481eb25 Deprecate Flags for v4: OCI Referrers (#4804) Eric Pickard 2026-05-21 09:40:36 -04:00
  • 6ea2f18739 Fix crash verifying timestamps when no timestamp was verified (#4881) Hayden 2026-05-21 08:30:29 -05:00
  • 7993b35078 Undo skip setcap for HashiCorp Vault (#4879) Aaron Lew 2026-05-20 11:58:46 -04:00
  • cd402b41f1 Fix impossible status code checks in GitHub provider PutSecret (#4876) Sebastien Tardif 2026-05-19 11:38:55 -07:00
  • f02ee6f5c1 chore(deps): bump github.com/open-policy-agent/opa from 1.14.1 to 1.16.2 (#4862) dependabot[bot] 2026-05-19 11:33:00 +02:00
  • cca05a3f87 chore(deps): bump github.com/go-piv/piv-go/v2 from 2.5.0 to 2.6.0 (#4863) dependabot[bot] 2026-05-19 09:36:02 +02:00
  • 2d3bebf1d9 chore(deps): bump github.com/in-toto/attestation from 1.1.2 to 1.2.0 (#4798) dependabot[bot] 2026-05-19 09:01:28 +02:00
  • 4df4c13c51 chore(deps): bump golang from 1.25.6 to 1.25.7 in the all group (#4690) dependabot[bot] 2026-05-19 08:29:12 +02:00
  • b2cc795048 chore(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 (#4800) dependabot[bot] 2026-05-19 08:28:43 +02:00
  • e5871155e9 chore(deps): bump github.com/in-toto/in-toto-golang (#4855) dependabot[bot] 2026-05-19 08:28:01 +02:00
  • 4df629efdd chore(deps): bump the actions group across 1 directory with 6 updates (#4864) dependabot[bot] 2026-05-19 08:27:28 +02:00
  • bf57b89820 feat(cli): add Rekor v2 flag to cosign signing-config create (#4868) Hayden 2026-05-18 15:30:02 -07:00
  • 8a86a7cf84 fix: use Header.Set to prevent duplicate Authorization on retry (#4870) Sebastien Tardif 2026-05-18 06:40:23 -07:00
  • b33aaacb9a fix: close file descriptor leaked in WriteSignedImageIndexImages loop (#4869) Sebastien Tardif 2026-05-17 15:10:13 -07:00
  • d5891a86de deprecate private-infrastructure and record-creation-timestamp flags (#4854) Eric Pickard 2026-05-15 16:48:24 -04:00
  • a1ec073702 Add bundle upgrade command (#4820) Aaron Lew 2026-05-10 19:59:43 -04:00
  • 6a80f22cae Fix typo in map of verify fields unsupported for new bundle format (#4853) Aaron Lew 2026-05-09 00:49:49 -04:00
  • f15ac759ff Deprecate flags bundle (#4838) Eric Pickard 2026-05-08 11:21:40 -04:00
  • 08952e2c2c Deprecate flags signing config (#4844) Eric Pickard 2026-05-07 13:13:18 -04:00
  • f5373b0660 Switch from cosign copy to oras copy (#4819) Hayden 2026-05-06 13:40:07 -07:00
  • 5fff8869c8 Deprecate Flags for v4: Certificates (#4822) Eric Pickard 2026-05-06 16:08:12 -04:00
  • 39940de028 chore(deps): bump the gomod group across 1 directory with 10 updates (#4840) dependabot[bot] 2026-05-05 11:13:50 -07:00
  • 394ab4daab fix: honor --digestAlg when hashing a blob in verify-blob-attestation (#4813) Ali Asghar 2026-05-05 21:41:05 +05:00
  • f02250eb0b fix(load): pass NameOptions to name.ParseReference (#4786) Ricard Bejarano 2026-05-05 16:27:38 +02:00
  • 032c0ea4bf Update conformance to latest (#4843) Aaron Lew 2026-04-30 16:38:10 -04:00
  • 13a3d79e63 Require bundle output or registry upload (#4785) Aaron Lew 2026-04-23 15:03:07 -04:00
  • 3b72dabd61 Set e2e-kms vault version to 1.21.4 instead of latest set-vault-version Zach Steindler 2026-04-22 16:19:25 -04:00
  • 040443cf64 bundle create: Prevent IgnoreTlog when bundle contains SET (#4829) Aaron Lew 2026-04-20 19:28:58 -04:00
  • b7462fb607 ci: Skip setcap for HashiCorp Vault Aaron Lew 2026-04-16 13:13:06 -04:00
  • 1d5c7a6d34 Sign exclusively via sigstore-go (#4618) Aaron Lew 2026-04-13 19:50:12 -04:00
  • a6bd85fc8f fix(pkcs11-tool): GetKeysInfo not initializing YKCS11 correctly (#4803) Kynson Szetau 2026-04-08 01:41:32 +08:00
  • f1ad3ee952 Fix DSSE predicate check (GHSA-w6c6-c85g-mmv6) (#4801) v3.0.6 Hayden 2026-04-06 14:39:58 -07:00
  • fecddd3c22 Fix DSSE predicate check (#4802) v2.6.3 Colleen Murphy 2026-04-06 14:25:20 -07:00
  • 2b396bdfc8 chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4757) dependabot[bot] 2026-04-02 17:02:32 -07:00
  • eb5b1477ef chore(deps): bump the gomod group across 1 directory with 18 updates (#4789) dependabot[bot] 2026-04-02 15:57:48 -07:00
  • fb66c28fba fix(deps): CVE-2026-2303 / CVE-2026-2303 (#4764) Matthias Bruns 2026-04-03 00:05:05 +02:00
  • f3d74d4887 Fix 'the' typo in copyright name (#4788) Simon Josefsson 2026-04-02 16:47:30 +02:00
  • f4766a94d2 chore(deps): bump the actions group across 1 directory with 5 updates (#4784) dependabot[bot] 2026-04-01 09:07:02 -07:00
  • 4c9ba21b46 chore(deps): bump chainguard-dev/actions in the actions group (#4772) dependabot[bot] 2026-03-16 17:34:58 +00:00
  • af30fe6fa8 chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login dependabot[bot] 2026-03-09 18:05:43 +00:00