1
0
mirror of synced 2026-10-24 12:59:22 +03:00

Commit Graph

  • ddf38b605e chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546) dependabot[bot] 2025-12-08 18:52:30 +01:00
  • 96cae2fb14 chore(deps): bump the actions group with 4 updates (#4544) dependabot[bot] 2025-12-08 09:07:40 -08:00
  • 5a60384c27 chore(deps): bump the gomod group across 1 directory with 5 updates (#4567) dependabot[bot] 2025-12-08 09:07:07 -08:00
  • 8fa909e78a chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568) dependabot[bot] 2025-12-08 16:53:52 +00:00
  • b5978d89f6 update builder to use go1.25.5 (#4566) Carlos Tadeu Panato Junior 2025-12-08 08:59:10 -06:00
  • dc8ad5e825 Protobuf bundle support for subcommand clean (#4539) Zach Steindler 2025-12-05 16:13:01 -05:00
  • b2102aafda Add staging flag to initialize with staging TUF metadata Aaron Lew 2025-12-04 14:57:05 -05:00
  • 51d542c7e1 update slack invite link (#4560) Frederic Wilhelm 2025-12-04 13:19:26 +01:00
  • 1e49088b9a Updating sign-blob to also support signing with a certificate (#4547) Zach Steindler 2025-12-03 09:38:24 -05:00
  • 38bf9e6a99 Bump sigstore library dependencies (#4532) Hayden 2025-12-01 23:39:21 -08:00
  • 4e3042ceba Protobuf bundle support for subcommands save and load (#4538) Zach Steindler 2025-11-25 07:16:59 -05:00
  • 7981e233cc Fix cert attachment for new bundle with signing config Colleen Murphy 2025-11-20 11:52:42 -08:00
  • 0cf496efd6 Fix OCI verification with local cert - old bundle Colleen Murphy 2025-11-07 15:16:59 -08:00
  • 18fb9578e7 chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519) dependabot[bot] 2025-11-20 14:03:21 +01:00
  • 8eba87c9fe chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535) dependabot[bot] 2025-11-20 14:03:05 +01:00
  • a53f5785aa chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536) dependabot[bot] 2025-11-20 12:55:39 +01:00
  • 2d110ab451 update go builder and cosign (#4529) Carlos Tadeu Panato Junior 2025-11-17 13:51:46 +01:00
  • f28a5964b5 chore(deps): bump the gomod group across 1 directory with 7 updates (#4528) dependabot[bot] 2025-11-14 16:33:28 -08:00
  • 5bf81a1051 chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478) dependabot[bot] 2025-11-14 12:28:00 -08:00
  • 6b85a7255b chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520) dependabot[bot] 2025-11-14 12:27:15 -08:00
  • e46683a431 chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515) dependabot[bot] 2025-11-14 12:26:58 -08:00
  • a27d400be8 chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518) dependabot[bot] 2025-11-14 12:26:44 -08:00
  • 23655977a7 chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524) dependabot[bot] 2025-11-14 20:19:55 +00:00
  • 07540c7db2 chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521) dependabot[bot] 2025-11-14 11:57:07 -08:00
  • b80e7e1d7c chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502) dependabot[bot] 2025-11-14 11:56:17 -08:00
  • 5cc633f83e chore(deps): bump the actions group across 1 directory with 2 updates (#4516) dependabot[bot] 2025-11-14 11:51:42 -08:00
  • 7d5ea875a8 chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523) dependabot[bot] 2025-11-14 11:51:14 -08:00
  • e073b488cf chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522) dependabot[bot] 2025-11-14 11:51:01 -08:00
  • b51a7c2a25 Deprecate tlog-upload flag (#4458) Hayden 2025-11-14 11:50:40 -08:00
  • 6eecec74d2 fix: Use signal context for sign cli package. Noel Georgi 2025-11-09 18:40:15 +05:30
  • e3fa92d97f update offline verification directions (#4526) Natalie Somersall 2025-11-12 09:36:28 -07:00
  • ee3d9fe1c5 Fix signing/verifying annotations for new bundle Colleen Murphy 2025-10-31 16:50:39 -07:00
  • 0f1bf8394c Add support to download and attach for protobuf bundles (#4477) Zach Steindler 2025-11-04 10:48:11 -05:00
  • 8e7e0571a0 Add --signing-algorithm flag (#3497) Riccardo Schirone 2025-11-03 05:11:29 +01:00
  • 0b4362b15e Refactor signcommon bundle helpers Colleen Murphy 2025-10-27 14:02:22 -07:00
  • 4a2caf9f74 Add --bundle and fix --upload for new bundle Colleen Murphy 2025-10-24 17:36:11 -07:00
  • d470294ce6 Pass insecure registry flags through to referrers Colleen Murphy 2025-10-21 17:33:10 -07:00
  • 9ab3a73210 chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483) dependabot[bot] 2025-10-24 17:27:11 -04:00
  • 3c5b34b615 Add protobuf bundle support for tree subcommand (#4491) Zach Steindler 2025-10-24 15:40:13 -04:00
  • 1861d595ce Remove stale embed import (#4492) Joonas Bergius 2025-10-24 10:53:42 -05:00
  • f9a9a0b805 Support multiple container identities Emily Zheng 2025-09-02 14:59:35 +08:00
  • 3c9b15c999 chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484) dependabot[bot] 2025-10-22 15:35:18 +02:00
  • 32070b7c6b chore(deps): bump chainguard-dev/actions in the actions group (#4480) dependabot[bot] 2025-10-22 05:34:52 -07:00
  • 0c28652558 chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485) dependabot[bot] 2025-10-22 05:34:25 -07:00
  • f72baa9d27 chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486) dependabot[bot] 2025-10-22 05:33:44 -07:00
  • a0bf3d9866 chore(deps): bump cuelang.org/go in the gomod group (#4479) dependabot[bot] 2025-10-22 05:33:29 -07:00
  • 6826722cb0 upgrade OSS-Fuzz build tooling (#4487) AdamKorcz 2025-10-21 16:56:00 +01:00
  • 33b3939a34 Fix segfault when no attestations are found (#4472) Zach Steindler 2025-10-21 07:41:32 -04:00
  • 5ae3d57365 Use overridden repository for new bundle format (#4473) Colleen Murphy 2025-10-18 03:04:37 -07:00
  • 03ab1867f7 update go to 1.25.3 (#4471) Carlos Tadeu Panato Junior 2025-10-17 20:22:40 +02:00
  • ae3eecb2c4 Remove --out flag from cosign initialize (#4462) Alex Pyrgiotis 2025-10-16 20:54:09 +03:00
  • 6d95e9b522 chore(deps): bump the actions group with 2 updates (#4460) dependabot[bot] 2025-10-15 18:26:09 +02:00
  • aab0126a88 Deprecate offline flag (#4457) Hayden 2025-10-13 14:02:19 -07:00
  • b529ddf789 Deduplicate code in sign/attest* and verify* commands (#4449) Colleen Murphy 2025-10-13 13:35:20 -07:00
  • 925c965ff0 Cache signing config when calling initialize (#4456) Hayden 2025-10-13 11:07:22 -07:00
  • dccda706ef Update changelog for v3.0.2 (#4455) Hayden 2025-10-10 13:00:57 -07:00
  • a96437a430 chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0 dependabot[bot] 2025-10-09 21:59:19 +00:00
  • a47a4a3c0c chore(deps): bump gitlab.com/gitlab-org/api/client-go dependabot[bot] 2025-10-09 21:59:03 +00:00
  • 711b28b38e chore(deps): bump the actions group with 3 updates dependabot[bot] 2025-10-06 16:04:19 +00:00
  • 2c7631be55 chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0 dependabot[bot] 2025-10-06 16:05:30 +00:00
  • 84449696f0 choose different signature filename for KMS-signed release signatures (#4448) v3.0.2 Bob Callaway 2025-10-10 14:17:56 -04:00
  • 9b10de46e9 chore(deps): bump github.com/go-jose/go-jose/v4 (#4451) dependabot[bot] 2025-10-10 10:12:44 +02:00
  • 9fee551d08 Update rekor-tiles version path Colleen Murphy 2025-10-09 11:47:54 -07:00
  • 18f981e04b update CL for v3.0.1 release (#4447) v3.0.1 Bob Callaway 2025-10-07 18:15:25 -04:00
  • af194232f2 update goreleaser config for v3.0.0 release (#4446) Bob Callaway 2025-10-07 17:42:50 -04:00
  • 9b4b74c497 Create changelog for v3.0.0 (#4440) v3.0.0 Hayden 2025-10-07 09:02:53 -07:00
  • 479a0c128b Fetch service URLs from the TUF PGI signing config by default (#4428) Hayden 2025-10-07 08:52:47 -07:00
  • 544d76a709 Create changelog for v2.6.1 (#4439) Hayden 2025-10-02 12:01:09 -07:00
  • 2ec2734e84 chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432) dependabot[bot] 2025-09-30 12:54:17 +02:00
  • a5c4e8e0e3 chore(deps): bump the gomod group with 2 updates (#4429) dependabot[bot] 2025-09-30 09:51:45 +02:00
  • 2c0f5789f8 chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433) dependabot[bot] 2025-09-30 09:50:49 +02:00
  • 7fb2415b77 chore(deps): bump the actions group with 3 updates (#4434) dependabot[bot] 2025-09-30 09:47:13 +02:00
  • 148caf61b7 chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435) dependabot[bot] 2025-09-30 09:46:47 +02:00
  • 0b25535a46 chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436) dependabot[bot] 2025-09-30 09:46:31 +02:00
  • 638cee6c1b chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437) dependabot[bot] 2025-09-30 08:57:06 +02:00
  • 8e3a787545 Bump module version to v3 for Cosign v3.0 (#4427) Hayden 2025-09-26 13:31:26 -07:00
  • 634fabe54f Bump sigstore-go, move conformance back to tagged release v2.6.1 Hayden 2025-09-26 09:31:31 -07:00
  • c5545eda23 Partially populate the output of cosign verify when working with new bundles (#4416) Zach Steindler 2025-09-25 09:03:26 -04:00
  • e191024a63 bump go builder to use 1.25.1 and cosign (#4417) Carlos Tadeu Panato Junior 2025-09-18 23:43:16 +02:00
  • 870b27d23d Move sigstore-conformance back to tagged release (#4425) Hayden 2025-09-26 09:57:44 -07:00
  • dfc71f9ff6 Bump sigstore-go to v1.1.3 (#4423) Hayden 2025-09-26 09:31:34 -07:00
  • 8d756cf2bd Partially populate the output of cosign verify when working with new bundles (#4416) Zach Steindler 2025-09-25 09:03:26 -04:00
  • f7506870ae chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419) dependabot[bot] 2025-09-23 08:44:24 +02:00
  • 0d33bbcb75 chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418) dependabot[bot] 2025-09-23 08:44:00 +02:00
  • aa33f409f2 chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420) dependabot[bot] 2025-09-23 08:43:38 +02:00
  • 40f9e35d81 chore(deps): bump chainguard-dev/actions in the actions group (#4421) dependabot[bot] 2025-09-23 08:43:12 +02:00
  • da0a2f61d4 bump go builder to use 1.25.1 and cosign (#4417) Carlos Tadeu Panato Junior 2025-09-18 23:43:16 +02:00
  • 45bda40b8e Bump sigstore-go for more precise user agents (#4413) Hayden 2025-09-16 17:58:53 -07:00
  • 0a1de88dd0 chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408) dependabot[bot] 2025-09-16 10:44:00 -07:00
  • 78538ae058 chore(deps): bump the actions group with 2 updates (#4407) dependabot[bot] 2025-09-16 10:43:10 -07:00
  • 5add8659bb chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410) dependabot[bot] 2025-09-16 10:42:44 -07:00
  • fb2fb6b530 chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411) dependabot[bot] 2025-09-16 10:42:20 -07:00
  • b952363fb2 Default to using the new protobuf format (#4318) Zach Steindler 2025-09-16 13:31:06 -04:00
  • 6431af15a8 Add CHANGELOG for v2.6.0 (#4404) Hayden 2025-09-12 14:04:52 -07:00
  • 37fbfc7018 Require exclusively a SigningConfig or service URLs when signing (#4403) v2.6.0 Hayden 2025-09-12 12:49:02 -07:00
  • b1acaeb92c Add a terminal spinner while signing with sigstore-go (#4402) Hayden 2025-09-12 09:33:44 -07:00
  • 2581dfd2bf chore(deps): bump the gomod group across 1 directory with 8 updates (#4401) dependabot[bot] 2025-09-11 16:07:29 +00:00
  • 11163ae7d8 Bump sigstore-go, support alternative hash algorithms with keys (#4386) Hayden 2025-09-11 08:32:25 -07:00
  • 153df46c9e chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 (#4391) dependabot[bot] 2025-09-09 09:08:24 -07:00
  • 1a1ee13ce9 chore(deps): bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 (#4393) dependabot[bot] 2025-09-08 16:23:54 -07:00