1
0
mirror of synced 2026-10-24 12:59:22 +03:00

Commit Graph

  • 19ef59d3d5 docs: improve doc for --no-upload option (#4206) Travis Truman 2025-06-16 16:05:55 -04:00
  • 6839e636a0 Add CHANGELOG for v2.5.1 (#4245) Hayden B 2025-06-16 10:53:06 -07:00
  • a7345fb2ce Add Rekor v2 support for trusted-root create (#4242) v2.5.1 Colleen Murphy 2025-06-16 10:16:59 -07:00
  • 3df894ecc7 Add baseUrl and Uri to trusted-root create command Colleen Murphy 2025-06-13 14:46:49 -07:00
  • fb26ffdf7e update builder to use go1.24.4 (#4241) Carlos Tadeu Panato Junior 2025-06-12 19:18:08 +02:00
  • 5b82c30b6b Bump to sigstore-go v1.0, fix lint errors (#4240) Hayden B 2025-06-12 00:00:05 -07:00
  • a8fb9eee5c chore(deps): bump github.com/open-policy-agent/opa from 1.4.2 to 1.5.1 (#4233) dependabot[bot] 2025-06-10 23:43:03 +00:00
  • 8bbd4934c2 chore(deps): bump k8s.io/client-go from 0.28.3 to 0.33.1 (#4235) dependabot[bot] 2025-06-10 16:15:15 -07:00
  • 32a2d62a99 Upgrade to TUF v2 client with trusted root Colleen Murphy 2024-10-18 13:46:53 -07:00
  • 95bec1ad76 Run reusable dependency review workflow from main (#4239) Hayden B 2025-06-10 13:56:19 -07:00
  • 9b508f5507 chore(deps): bump google.golang.org/api from 0.234.0 to 0.236.0 (#4236) dependabot[bot] 2025-06-10 08:54:57 +02:00
  • 08c0240a40 chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4231) dependabot[bot] 2025-06-09 19:24:48 +02:00
  • 82c147cf12 chore(deps): bump golang.org/x/sync from 0.14.0 to 0.15.0 (#4228) dependabot[bot] 2025-06-09 19:24:24 +02:00
  • 8da6b86699 chore(deps): bump github.com/buildkite/agent/v3 from 3.97.0 to 3.98.1 (#4237) dependabot[bot] 2025-06-09 19:23:31 +02:00
  • ec496c9ce2 chore(deps): bump chainguard-dev/actions in the actions group (#4234) dependabot[bot] 2025-06-09 19:23:10 +02:00
  • c4091eb163 Don't verify SCT for a private PKI cert (#4225) Colleen Murphy 2025-06-08 21:39:30 -07:00
  • fce8b6d945 upgrade go-github to v72 (#4220) Carlos Tadeu Panato Junior 2025-06-04 16:30:37 +02:00
  • 545433645c Bump TSA library to relax EKU chain validation rules (#4219) Hayden B 2025-06-03 10:20:47 -07:00
  • c948138c19 chore(deps): bump the actions group across 1 directory with 5 updates (#4217) dependabot[bot] 2025-06-03 08:19:08 +02:00
  • 667ef61d5b chore(deps): bump the gomod group across 1 directory with 7 updates (#4218) dependabot[bot] 2025-06-03 08:06:11 +02:00
  • c03e2a8f88 More linting coverage (#4213) Ville Skyttä 2025-05-30 20:26:07 +03:00
  • 56d51141bd use git hash of a release tag instead of main (#4203) Carlos Tadeu Panato Junior 2025-05-12 18:39:08 +02:00
  • dfa6abe891 chore(deps): bump github.com/sigstore/fulcio from 1.6.6 to 1.7.1 (#4177) dependabot[bot] 2025-05-08 19:11:24 +00:00
  • 442248b40b update tests to run against latest k8s release (#4198) Bob Callaway 2025-05-08 10:31:08 -04:00
  • 9efcf7a36e chore(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 (#4190) dependabot[bot] 2025-05-08 07:14:08 -07:00
  • 459f1ab745 chore(deps): update chainguard-dev/actions requirement to 9c0be1ee0103db886d1887d114ec97f8766b7ef8 (#4189) dependabot[bot] 2025-05-08 09:14:15 -04:00
  • 7df3f73249 chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4178) dependabot[bot] 2025-05-08 09:13:31 -04:00
  • d9831a7599 chore(deps): bump the gomod group with 5 updates (#4179) dependabot[bot] 2025-05-08 09:13:01 -04:00
  • 194b5f478a chore(deps): bump mikefarah/yq in the actions group (#4191) dependabot[bot] 2025-05-08 09:12:24 -04:00
  • 5c7723b8cd chore(deps): bump github.com/open-policy-agent/opa from 1.1.0 to 1.3.0 (#4167) dependabot[bot] 2025-05-08 09:11:29 -04:00
  • 3faf2084c1 sort Go imports alphabetically (#4197) Dmitry Savintsev 2025-05-07 21:36:03 +02:00
  • abf4cde9cc cmd/cosign/cli/attest.go sort imports (#4196) Dmitry Savintsev 2025-05-07 21:00:01 +02:00
  • 5e89f03618 update builder to use go1.24.3 (#4195) Carlos Tadeu Panato Junior 2025-05-07 13:52:53 +02:00
  • 4fe206f05a fix: bump golangci-lint version (#4194) arthurus-rex 2025-05-06 15:08:08 -04:00
  • d6392bd7ac chore(deps): bump github.com/open-policy-agent/opa from 1.1.0 to 1.4.0 (#4192) dependabot[bot] 2025-05-06 07:33:41 -04:00
  • 63bdaf1d8b Update GoReleaser configuration (#4188) Emmanuel Ferdman 2025-05-04 14:50:18 +03:00
  • b438935ad3 remove unused recursive flag on attest command (#4187) Bob Callaway 2025-04-30 11:18:32 -04:00
  • 0ee2584d31 chore(deps): bump the actions group with 3 updates (#4182) dependabot[bot] 2025-04-29 08:02:11 +02:00
  • 667053ebea chore(deps): bump github.com/buildkite/agent/v3 from 3.95.1 to 3.97.0 (#4181) dependabot[bot] 2025-04-29 08:01:10 +02:00
  • c74b2a99c8 chore(deps): bump google.golang.org/api from 0.229.0 to 0.230.0 (#4180) dependabot[bot] 2025-04-29 08:00:38 +02:00
  • d6c40c940f chore(deps): bump the actions group across 1 directory with 2 updates (#4173) dependabot[bot] 2025-04-21 17:35:51 +00:00
  • fb1c1fe862 chore(deps): bump the gomod group across 1 directory with 8 updates (#4172) dependabot[bot] 2025-04-21 17:32:08 +00:00
  • 35f552c014 chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4171) dependabot[bot] 2025-04-15 09:01:04 +02:00
  • 55e4f02bd9 update builder image to use go1.24.2 (#4164) Carlos Tadeu Panato Junior 2025-04-14 15:36:07 +02:00
  • de9b6e12ff Bump sigstore-go to pick up log index=0 fix (#4162) Hayden B 2025-04-11 09:38:56 -07:00
  • 7aa4c0518b Fix indentation in verify-blob cmd examples (#4160) Babak K. Shandiz 2025-04-10 15:33:43 +01:00
  • 18c234816f Update SHA-1 CT certificates in tests (#4156) Hayden B 2025-04-09 08:01:29 -07:00
  • 3ce3080775 ensure we copy the latest tags on each release (#4157) Bob Callaway 2025-04-09 10:19:09 -04:00
  • 9ece0dec50 Add CHANGELOG for v2.5.0 (#4155) Hayden B 2025-04-07 16:32:03 -07:00
  • 38bb986970 chore(deps): bump cuelang.org/go in the gomod group across 1 directory (#4154) v2.5.0 dependabot[bot] 2025-04-07 13:33:49 -07:00
  • 076da85292 chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4149) dependabot[bot] 2025-04-07 22:29:13 +02:00
  • e7099da7a6 chore(deps): bump github.com/buildkite/agent/v3 from 3.93.1 to 3.95.1 (#4139) dependabot[bot] 2025-04-07 12:42:54 -07:00
  • c351ca819a chore(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 (#4147) dependabot[bot] 2025-04-07 12:42:39 -07:00
  • 76d23ba9de Update sigstore-go to pick up bug fixes (#4150) Hayden B 2025-04-07 12:03:29 -07:00
  • c6c96ea4c9 chore(deps): bump golang.org/x/crypto from 0.36.0 to 0.37.0 (#4148) dependabot[bot] 2025-04-07 19:41:38 +02:00
  • 6e7a9f9568 Update golangci-lint to v2, update golangci-lint-action (#4143) Hayden B 2025-04-04 14:21:40 -07:00
  • 37bae90768 Feat/non filename completions (#4115) Ville Skyttä 2025-03-25 21:30:11 +02:00
  • 4c329965c5 chore(deps): bump the gomod group with 5 updates (#4129) dependabot[bot] 2025-03-25 11:28:10 -04:00
  • 11b12fa69e chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#4125) dependabot[bot] 2025-03-25 15:01:20 +00:00
  • 1236772f62 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws (#4131) dependabot[bot] 2025-03-25 15:00:32 +00:00
  • 693b3d5cc1 chore(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 (#4114) dependabot[bot] 2025-03-25 14:59:52 +00:00
  • 74fd39af25 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault (#4130) dependabot[bot] 2025-03-25 14:59:34 +00:00
  • f835ec4d5b chore(deps): bump the actions group with 4 updates (#4127) dependabot[bot] 2025-03-25 10:34:52 -04:00
  • 6acd18b985 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure (#4132) dependabot[bot] 2025-03-25 10:34:04 -04:00
  • c08a22d450 chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 (#4124) dependabot[bot] 2025-03-25 10:33:09 -04:00
  • 8d5a5c1aaf update builder to use go1.24.1 (#4116) Carlos Tadeu Panato Junior 2025-03-17 16:41:54 +01:00
  • 62cd6278f8 chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp dependabot[bot] 2025-03-10 16:07:41 +00:00
  • dd559e33e9 chore(deps): bump golang.org/x/term from 0.29.0 to 0.30.0 dependabot[bot] 2025-03-10 16:07:20 +00:00
  • 982ce6d7ce Add support for new bundle specification for attesting/verifying OCI image attestations (#3889) Cody Soyland 2025-03-14 13:08:31 -04:00
  • 785e154c83 Remove cert log line (#4113) Cody Soyland 2025-03-13 14:14:14 -04:00
  • 647eca1376 cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111) Riccardo Schirone 2025-03-12 18:42:25 +01:00
  • 8c172e778d chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#4089) dependabot[bot] 2025-03-09 12:51:41 +11:00
  • 194543a145 chore(deps): bump github.com/go-jose/go-jose/v4 in /test/fakeoidc (#4086) dependabot[bot] 2025-03-09 12:51:14 +11:00
  • e6a9c3619d chore(deps): bump google.golang.org/api from 0.222.0 to 0.223.0 (#4093) dependabot[bot] 2025-03-07 13:30:49 -05:00
  • 33f3258135 chore(deps): bump github.com/buildkite/agent/v3 from 3.92.1 to 3.93.1 (#4094) dependabot[bot] 2025-03-07 13:23:23 -05:00
  • dadbd75aaf chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4096) dependabot[bot] 2025-03-07 13:23:00 -05:00
  • 6ae52aaf71 bump to latest scaffolding release for testing (#4099) Bob Callaway 2025-03-04 12:53:09 -05:00
  • cf98a6b0de chore(deps): bump the actions group with 3 updates (#4092) dependabot[bot] 2025-03-03 17:07:23 +00:00
  • 277219f5d6 increase 2e2_test docker compose tiemout to 180s (#4091) Ramon Petgrave 2025-02-28 16:20:02 -05:00
  • beb9cf21bc update builder to use go1.24 (#4088) Carlos Tadeu Panato Junior 2025-02-26 14:33:45 +01:00
  • 8dd9e9b724 Fix replace with compliant image mediatype (#4077) Stef Graces 2025-02-25 13:51:46 +01:00
  • c5c649d3c4 chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#4085) dependabot[bot] 2025-02-25 09:01:28 +01:00
  • 51dd1ce966 chore(deps): bump golang.org/x/crypto from 0.33.0 to 0.35.0 (#4084) dependabot[bot] 2025-02-24 19:48:27 +00:00
  • a3f1817e4f chore(deps): bump google.golang.org/api from 0.221.0 to 0.222.0 (#4083) dependabot[bot] 2025-02-24 20:25:03 +01:00
  • a36c25f358 chore(deps): bump golang.org/x/oauth2 from 0.26.0 to 0.27.0 (#4082) dependabot[bot] 2025-02-24 20:24:47 +01:00
  • 64c0ca638d chore(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#4081) dependabot[bot] 2025-02-24 20:24:28 +01:00
  • 6197fa8a41 chore(deps): bump the actions group with 4 updates (#4080) dependabot[bot] 2025-02-24 19:09:38 +01:00
  • 891116811b Add TSA certificate related flags and fields for cosign attest (#4079) Dmitry Savintsev 2025-02-22 00:09:16 +01:00
  • eac84afc64 Add changelog for v2.4.3 (#4075) Hayden B 2025-02-19 12:03:14 -08:00
  • 6a7abbf3ae chore(deps): bump the gomod group across 1 directory with 4 updates (#4074) v2.4.3 dependabot[bot] 2025-02-19 11:34:52 -08:00
  • 0b69cc585a chore(deps): bump github.com/buildkite/agent/v3 from 3.91.0 to 3.92.1 (#4066) dependabot[bot] 2025-02-19 10:14:37 -08:00
  • 3564b3e285 chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4065) dependabot[bot] 2025-02-19 10:14:22 -08:00
  • d6aeeb24e4 Enable fetching signatures without remote get. (#4047) Tomasz Janiszewski 2025-02-19 19:13:53 +01:00
  • 26d0ee5447 Bump sigstore/sigstore to support KMS plugins (#4073) Hayden B 2025-02-19 09:20:14 -08:00
  • 51816233a0 chore(deps): bump golangci/golangci-lint-action in the actions group (#4070) dependabot[bot] 2025-02-19 18:05:34 +01:00
  • c1b1a78608 chore(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 (#4067) dependabot[bot] 2025-02-19 08:51:34 -08:00
  • a0b20b7dd8 sort properly Go imports (#4071) Dmitry Savintsev 2025-02-19 17:49:57 +01:00
  • b4be5f7a43 chore(deps): bump google.golang.org/api from 0.220.0 to 0.221.0 (#4068) dependabot[bot] 2025-02-17 18:42:31 +01:00
  • 01fde81715 sync comment with parameter name in function signature (#4063) Dmitry Savintsev 2025-02-17 18:42:01 +01:00
  • cce71fdaf6 chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4069) dependabot[bot] 2025-02-17 18:41:52 +01:00