1
0
mirror of synced 2026-10-24 12:59:22 +03:00

Commit Graph

  • 8c7c09d4b1 chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4394) dependabot[bot] 2025-09-08 22:01:37 +00:00
  • a57176af23 chore(deps): bump golang.org/x/term from 0.34.0 to 0.35.0 (#4388) dependabot[bot] 2025-09-08 21:51:40 +00:00
  • 8e3dc33549 chore(deps): bump the actions group with 4 updates (#4396) dependabot[bot] 2025-09-08 14:17:42 -07:00
  • f527319dae chore(deps): bump actions/github-script from 7.0.1 to 8.0.0 (#4392) dependabot[bot] 2025-09-08 14:17:23 -07:00
  • 67d8d30802 chore(deps): bump github.com/buildkite/agent/v3 from 3.103.1 to 3.104.0 (#4390) dependabot[bot] 2025-09-08 14:17:09 -07:00
  • 0d478dc5f6 chore(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0 (#4395) dependabot[bot] 2025-09-08 14:16:15 -07:00
  • fd1bf740d6 chore(deps): bump actions/setup-go from 5.5.0 to 6.0.0 (#4397) dependabot[bot] 2025-09-08 14:16:02 -07:00
  • 62a960c034 chore(deps): bump golang from 1.25.0 to 1.25.1 in the all group (#4398) dependabot[bot] 2025-09-08 17:26:18 +00:00
  • a2cbedabcc Add support for SigningConfig in sign/attest (#4371) Hayden 2025-09-04 13:32:50 -07:00
  • eed2a117b8 chore(deps): bump chainguard-dev/actions in the actions group (#4376) dependabot[bot] 2025-09-04 10:18:41 -07:00
  • 59b9930775 Support self-managed keys when signing with sigstore-go (#4368) Hayden 2025-09-03 12:21:29 -07:00
  • 40c308c15a chore(deps): bump gitlab.com/gitlab-org/api/client-go in the gomod group (#4385) dependabot[bot] 2025-09-03 16:38:46 +02:00
  • b36644f793 Remove SHA256 assumption in sign-blob/verify-blob (#4050) Riccardo Schirone 2025-09-03 00:00:46 +02:00
  • 66fd8de43e chore(deps): bump github.com/open-policy-agent/opa from 1.7.1 to 1.8.0 (#4379) dependabot[bot] 2025-09-02 19:20:51 +02:00
  • 402cc2aae4 introduce dockerfile to pin the go version to decouple go version from go.mod (#4369) Carlos Tadeu Panato Junior 2025-09-02 19:06:12 +02:00
  • be9d024bcd chore(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#4380) dependabot[bot] 2025-09-02 11:16:37 +02:00
  • 62f0cb1a93 chore(deps): bump google-github-actions/auth from 2.1.12 to 3.0.0 (#4381) dependabot[bot] 2025-09-02 08:33:18 +02:00
  • a40b90785e chore(deps): bump the gomod group with 6 updates (#4382) dependabot[bot] 2025-09-02 08:32:58 +02:00
  • dafb08b6e5 chore(deps): bump k8s.io/client-go from 0.33.4 to 0.34.0 (#4383) dependabot[bot] 2025-09-02 08:30:39 +02:00
  • 68caffdb10 refactor: extract function to write referrer attestations (#4357) Andrew McNamara 2025-08-29 10:08:00 -04:00
  • fd5fcfbf07 Break import cycle with e2e build tag (#4370) Hayden 2025-08-28 11:42:30 -07:00
  • b6ce93da38 Update conformance test binary for signing config (#4367) Hayden 2025-08-27 09:45:05 -07:00
  • fbb7ca11b5 update builder image to use go1.25 (#4366) Carlos Tadeu Panato Junior 2025-08-27 14:45:13 +02:00
  • 5ad3dfe0a6 chore(deps): bump google.golang.org/api from 0.247.0 to 0.248.0 (#4359) dependabot[bot] 2025-08-26 10:55:21 +02:00
  • 29f9349995 chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4360) dependabot[bot] 2025-08-26 10:55:03 +02:00
  • ec66f46de5 chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#4362) dependabot[bot] 2025-08-26 10:53:24 +02:00
  • 663b97c11a chore(deps): bump the actions group with 2 updates (#4361) dependabot[bot] 2025-08-26 10:12:56 +02:00
  • ef083d435d chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.5.0 to 2.6.0 (#4363) dependabot[bot] 2025-08-26 10:08:08 +02:00
  • 6dd6f52a49 chore(deps): bump google.golang.org/protobuf in the gomod group (#4364) dependabot[bot] 2025-08-26 08:36:25 +02:00
  • 8999f9eac5 chore(deps): bump github.com/buildkite/agent/v3 from 3.98.2 to 3.103.1 (#4365) dependabot[bot] 2025-08-26 08:36:04 +02:00
  • 76faaff0cf chore(deps): bump github.com/go-viper/mapstructure/v2 (#4355) dependabot[bot] 2025-08-21 17:58:46 +02:00
  • 5bca529e13 chore(deps): bump the gomod group with 4 updates (#4350) dependabot[bot] 2025-08-19 10:37:18 -07:00
  • b11824349c chore(deps): bump chainguard-dev/actions in the actions group (#4349) dependabot[bot] 2025-08-19 16:58:25 +02:00
  • ddca0f121f Relax go directive to 1.24.x (#4351) Hayden 2025-08-19 06:27:56 -07:00
  • e185b40d05 chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4352) dependabot[bot] 2025-08-19 15:24:41 +02:00
  • 47b5ffe8a1 chore(deps): bump google.golang.org/api from 0.246.0 to 0.247.0 (#4353) dependabot[bot] 2025-08-19 15:24:16 +02:00
  • 3a2e07606b Don't load content from TUF if trusted root path is specified (#4347) Zach Steindler 2025-08-18 13:34:59 -04:00
  • 36acb301e9 Don't require timestamps when verifying with a key (#4337) Hayden 2025-08-14 10:07:45 -07:00
  • a2a8ca3686 Fixes to cosign sign / verify for the new bundle format (#4346) Zach Steindler 2025-08-13 17:08:20 -04:00
  • 3e8eb0db1c chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.2 (#4341) dependabot[bot] 2025-08-12 14:51:46 +02:00
  • b77ae44dc3 chore(deps): bump golang.org/x/crypto from 0.40.0 to 0.41.0 (#4339) dependabot[bot] 2025-08-12 14:46:57 +02:00
  • c11b6b7037 chore(deps): bump the gomod group with 4 updates (#4343) dependabot[bot] 2025-08-12 14:14:16 +02:00
  • 275f2684e4 chore(deps): bump github.com/sigstore/sigstore-go (#4340) dependabot[bot] 2025-08-12 14:13:58 +02:00
  • 4702fb83f8 chore(deps): bump the actions group with 3 updates (#4345) dependabot[bot] 2025-08-12 13:16:13 +02:00
  • 18040e1217 chore(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#4338) dependabot[bot] 2025-08-12 09:18:02 +02:00
  • 1059a8007c update builder to use go1.24.6 (#4334) Carlos Tadeu Panato Junior 2025-08-08 17:22:47 +02:00
  • fbea0dd48a bump golangci-lint to v2.3.x (#4333) Carlos Tadeu Panato Junior 2025-08-08 17:22:15 +02:00
  • 0ac382ac71 Have cosign sign support bundle format (#4316) Zach Steindler 2025-08-07 14:41:10 -04:00
  • f011b93a85 Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319) Hayden 2025-08-07 09:20:58 -07:00
  • 7319eb457c chore(deps): bump google.golang.org/api from 0.243.0 to 0.244.0 (#4326) dependabot[bot] 2025-08-07 08:25:21 -07:00
  • cd8bc0b738 Bump deps for cuelang and others (#4332) Hayden 2025-08-07 01:40:32 -07:00
  • bfd10447f9 chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4323) dependabot[bot] 2025-08-05 15:37:41 +02:00
  • f385b03d1d chore(deps): bump the actions group with 3 updates (#4329) dependabot[bot] 2025-08-05 15:36:45 +02:00
  • 674c9c102b chore(deps): bump github.com/secure-systems-lab/go-securesystemslib (#4321) dependabot[bot] 2025-08-05 15:19:29 +02:00
  • 806fcd3f05 chore(deps): bump github.com/sigstore/rekor from 1.3.10 to 1.4.0 (#4325) dependabot[bot] 2025-08-05 15:18:48 +02:00
  • f8e6db50ec Verify subject with bundle only when checking claims (#4320) Hayden 2025-08-04 12:53:29 -07:00
  • 1a5bcdfad3 chore(deps): bump sigs.k8s.io/release-utils from 0.11.1 to 0.12.0 (#4313) dependabot[bot] 2025-07-29 11:08:47 +02:00
  • c27c714f54 chore(deps): bump the gomod group with 4 updates (#4311) dependabot[bot] 2025-07-28 19:38:30 +00:00
  • ba769d9798 chore(deps): bump github.com/buildkite/agent/v3 from 3.102.1 to 3.103.0 (#4310) dependabot[bot] 2025-07-28 19:36:50 +00:00
  • 4d7befb953 chore(deps): bump github.com/go-piv/piv-go/v2 from 2.3.0 to 2.4.0 (#4312) dependabot[bot] 2025-07-28 21:10:30 +02:00
  • df1eaeca7a chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4314) dependabot[bot] 2025-07-28 21:10:04 +02:00
  • 4b02aba260 chore(deps): bump google.golang.org/api from 0.241.0 to 0.243.0 (#4315) dependabot[bot] 2025-07-28 19:09:13 +00:00
  • cbe24d967d chore(deps): bump the actions group with 4 updates (#4309) dependabot[bot] 2025-07-28 20:04:28 +02:00
  • fc4b1a2600 Add to attest-blob the ability to supply a complete in-toto statement, and add to verify-blob-attestation the ability to verify with just a digest (#4306) Zach Steindler 2025-07-25 16:47:12 -04:00
  • ade0d32818 Add changelog for v2.5.3 (#4299) Hayden 2025-07-17 13:34:23 -07:00
  • 488ef8ceed Add signing-config create command (#4280) v2.5.3 Hayden 2025-07-17 12:56:47 -07:00
  • 722207e005 Allow multiple services to be specified for trusted-root create (#4285) Hayden 2025-07-16 13:54:49 -07:00
  • e31d70b4f1 bump go-github to v73 (#4297) Carlos Tadeu Panato Junior 2025-07-16 16:53:21 +02:00
  • 2ee22fcdf5 force when copying the latest image to overwrite (#4298) Carlos Tadeu Panato Junior 2025-07-16 16:19:36 +02:00
  • 86560e15eb Fix cert verification logic for trusted-root/SCTs (#4294) Colleen Murphy 2025-07-15 15:26:17 -07:00
  • 9f3b013feb Fix lint error for types package (#4295) Colleen Murphy 2025-07-15 14:14:40 -07:00
  • 34f0ff9fd7 chore(deps): bump github.com/buildkite/agent/v3 from 3.101.0 to 3.102.1 (#4288) dependabot[bot] 2025-07-15 12:48:41 +02:00
  • b2b94625e9 chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.3 to 0.5.0 (#4289) dependabot[bot] 2025-07-15 12:48:24 +02:00
  • 60d47a037c chore(deps): bump google.golang.org/api from 0.240.0 to 0.241.0 (#4291) dependabot[bot] 2025-07-15 12:48:08 +02:00
  • 5dac117e81 chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 (#4293) dependabot[bot] 2025-07-15 10:20:22 +02:00
  • ad1e5c1aaa chore(deps): bump the actions group with 2 updates (#4287) dependabot[bot] 2025-07-14 19:56:25 +00:00
  • 8ec7b274df chore(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 (#4286) dependabot[bot] 2025-07-14 12:38:08 -07:00
  • 3b3c0fc20b feat: Add OCI 1.1+ experimental support to tree (#4205) Ralph Bean 2025-07-14 09:50:09 -04:00
  • d92af6ab6c bump golangci-lint to v2.2.x (#4279) Carlos Tadeu Panato Junior 2025-07-09 20:19:21 +02:00
  • e55fd5dd65 use go1.24.5 to build cosign (#4278) Carlos Tadeu Panato Junior 2025-07-09 18:47:12 +02:00
  • be06752a9f chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4272) dependabot[bot] 2025-07-08 08:52:19 +02:00
  • c7f9bc20fd chore(deps): bump google.golang.org/api from 0.239.0 to 0.240.0 (#4273) dependabot[bot] 2025-07-08 08:51:56 +02:00
  • a0b5f477db chore(deps): bump chainguard-dev/actions in the actions group (#4274) dependabot[bot] 2025-07-08 08:51:35 +02:00
  • ec51456cae chore(deps): bump github.com/buildkite/agent/v3 from 3.100.1 to 3.101.0 (#4275) dependabot[bot] 2025-07-08 08:51:15 +02:00
  • de5de91dec chore(deps): bump github.com/sigstore/rekor-tiles in the gomod group (#4276) dependabot[bot] 2025-07-07 12:58:01 -07:00
  • 49c8d784a7 Add validity period end for trusted-root create (#4271) Colleen Murphy 2025-07-07 12:05:30 -07:00
  • c86498055d chore(deps): bump chainguard-dev/actions in the actions group (#4266) dependabot[bot] 2025-07-01 14:34:03 +02:00
  • edec8e5744 chore(deps): bump github.com/buildkite/agent/v3 from 3.98.2 to 3.100.1 (#4267) dependabot[bot] 2025-07-01 14:03:53 +02:00
  • 487efac6ec chore(deps): bump google.golang.org/api from 0.238.0 to 0.239.0 (#4268) dependabot[bot] 2025-07-01 14:03:26 +02:00
  • 52f372724d chore(deps): bump github.com/open-policy-agent/opa from 1.5.1 to 1.6.0 (#4269) dependabot[bot] 2025-07-01 11:18:46 +02:00
  • ba8214ec0c avoid double-loading trustedroot from file (#4264) Dmitry Savintsev 2025-06-30 19:33:50 +02:00
  • c36801ef34 chore(deps): bump google.golang.org/api from 0.237.0 to 0.238.0 (#4256) dependabot[bot] 2025-06-23 20:49:39 +02:00
  • 14de289d8c chore(deps): bump the actions group with 2 updates (#4257) dependabot[bot] 2025-06-23 20:48:22 +02:00
  • 1e5844909f chore(deps): bump the gomod group with 3 updates (#4255) dependabot[bot] 2025-06-23 17:13:39 +00:00
  • 6074ba657c update tests for latest scaffolding release (#4254) Bob Callaway 2025-06-23 11:38:45 -04:00
  • af5a988bb1 Add changelog for v2.5.2 (#4253) v2.5.2 Hayden B 2025-06-17 13:03:14 -07:00
  • 2eb0d916b8 chore(deps): bump the gomod group across 1 directory with 11 updates (#4252) dependabot[bot] 2025-06-17 12:48:52 -07:00
  • dbbe60e315 chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4246) dependabot[bot] 2025-06-17 12:19:13 -07:00
  • a71cb5162f chore(deps): bump chainguard-dev/actions in the actions group (#4249) dependabot[bot] 2025-06-17 12:18:43 -07:00
  • b1261098fb Do not load trusted root when CT env key is set Colleen Murphy 2025-06-17 11:31:28 -07:00