1
0
mirror of synced 2026-10-24 12:59:22 +03:00

Commit Graph

  • 081ad98a52 use go1.22.6 to build cosign (#3862) Carlos Tadeu Panato Junior 2024-09-03 17:53:38 +02:00
  • f90977c9f8 chore(deps): bump github.com/open-policy-agent/opa from 0.67.1 to 0.68.0 (#3861) dependabot[bot] 2024-09-02 22:33:37 +02:00
  • c1e508521d chore(deps): bump google.golang.org/api from 0.194.0 to 0.195.0 (#3860) dependabot[bot] 2024-09-02 20:00:09 +02:00
  • 42fd5f2161 chore(deps): bump github.com/mozillazg/docker-credential-acr-helper (#3859) dependabot[bot] 2024-09-02 19:29:21 +02:00
  • 4beb7f49ff chore(deps): bump github.com/buildkite/agent/v3 from 3.78.0 to 3.79.0 (#3858) dependabot[bot] 2024-09-02 19:29:01 +02:00
  • 247c9dcb8d chore(deps): bump go.step.sm/crypto in the gomod group (#3857) dependabot[bot] 2024-09-02 19:28:43 +02:00
  • 842d3cc86c chore(deps): bump actions/upload-artifact in the actions group (#3856) dependabot[bot] 2024-09-02 18:28:47 +02:00
  • 8defb0e72b chore(deps): bump google.golang.org/api from 0.192.0 to 0.194.0 (#3852) dependabot[bot] 2024-08-27 08:37:29 +02:00
  • fe71244d19 chore(deps): bump github.com/xanzy/go-gitlab from 0.107.0 to 0.108.0 (#3851) dependabot[bot] 2024-08-27 08:37:04 +02:00
  • 84e979df87 chore(deps): bump the actions group across 1 directory with 3 updates (#3853) dependabot[bot] 2024-08-27 08:27:40 +02:00
  • 198b8e4972 chore(deps): bump github.com/buildkite/agent/v3 from 3.77.0 to 3.78.0 (#3850) dependabot[bot] 2024-08-27 08:24:35 +02:00
  • 282070958f chore(deps): bump github.com/sigstore/fulcio in the gomod group (#3848) dependabot[bot] 2024-08-26 20:30:43 +02:00
  • d712844a06 add oss-fuzz build script, seeds and dictionaries (#3843) AdamKorcz 2024-08-20 23:48:45 +01:00
  • 8a4f390466 chore(deps): bump github.com/sigstore/fulcio from 1.5.1 to 1.6.2 (#3839) dependabot[bot] 2024-08-19 20:34:02 +02:00
  • be4cdc231b chore(deps): bump google.golang.org/api from 0.191.0 to 0.192.0 (#3837) dependabot[bot] 2024-08-19 20:01:04 +02:00
  • 30c1d0f53b chore(deps): bump github.com/sigstore/sigstore-go from 0.5.1 to 0.6.0 (#3840) dependabot[bot] 2024-08-19 20:00:36 +02:00
  • 9c0c81cba0 fuzzing: add fuzzers for multiple packages (#3834) AdamKorcz 2024-08-19 04:25:28 +01:00
  • 3694644fdc chore(deps): bump the gomod group with 2 updates (#3824) dependabot[bot] 2024-08-13 01:15:35 +02:00
  • 182f64b3d7 chore(deps): bump github.com/buildkite/agent/v3 from 3.76.2 to 3.77.0 (#3828) dependabot[bot] 2024-08-12 22:55:29 +02:00
  • fa12845710 chore(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 (#3825) dependabot[bot] 2024-08-12 21:07:53 +02:00
  • cddce0f1ed chore(deps): bump google.golang.org/api from 0.190.0 to 0.191.0 (#3830) dependabot[bot] 2024-08-12 19:33:29 +02:00
  • e99c1a536e chore(deps): bump github.com/docker/docker (#3823) dependabot[bot] 2024-08-11 13:36:13 +02:00
  • b23586d639 Add changelog for v2.4.0 (#3821) Hayden B 2024-08-07 01:12:08 -07:00
  • cb338e9f78 Add missing permission to push containers (#3822) Hayden B 2024-08-07 01:11:44 -07:00
  • b5e7dc123a Add login for GHCR (#3820) v2.4.0 Hayden B 2024-08-06 14:39:53 -07:00
  • c3468255e8 Bump sigstore/sigstore (#3819) Hayden B 2024-08-06 13:32:07 -07:00
  • fd0368aead Conformance testing for cosign (#3806) Zach Steindler 2024-08-06 16:16:45 -04:00
  • 2387b500d4 chore(deps): bump google.golang.org/api from 0.189.0 to 0.190.0 (#3815) dependabot[bot] 2024-08-06 18:25:53 +02:00
  • be439028c4 move incremental builds per commit to GHCR instead of GCR (#3808) Bob Callaway 2024-08-06 11:55:54 -04:00
  • d0492cf447 chore(deps): bump github.com/buildkite/agent/v3 from 3.75.1 to 3.76.2 (#3813) dependabot[bot] 2024-08-06 17:55:36 +02:00
  • e3a3914c1f chore(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 (#3814) dependabot[bot] 2024-08-06 17:55:24 +02:00
  • 7bac5e99c8 tidy up validate release script (#3817) Bob Callaway 2024-08-06 08:37:42 -04:00
  • 983a3687b7 chore(deps): bump go.step.sm/crypto from 0.50.0 to 0.51.1 (#3812) dependabot[bot] 2024-08-06 08:36:58 -04:00
  • 71a49522ed chore(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (#3811) dependabot[bot] 2024-08-06 08:36:32 -04:00
  • b61b6892d2 chore(deps): bump the actions group across 1 directory with 4 updates (#3818) dependabot[bot] 2024-08-06 08:34:22 -04:00
  • 7e3c2f5f03 handle docker-compose v2, free up more space (#3809) Bob Callaway 2024-08-05 22:21:09 -04:00
  • 06d1290236 chore(deps): bump github.com/docker/docker (#3804) dependabot[bot] 2024-07-30 17:13:46 +02:00
  • f40ad0f2f2 chore(deps): bump sigs.k8s.io/release-utils in the gomod group (#3802) dependabot[bot] 2024-07-29 19:13:53 +02:00
  • ec2480eb4b chore(deps): bump github.com/open-policy-agent/opa from 0.66.0 to 0.67.0 (#3803) dependabot[bot] 2024-07-29 17:02:52 +00:00
  • 973bcd1055 chore(deps): bump ossf/scorecard-action in the actions group (#3801) dependabot[bot] 2024-07-29 18:56:56 +02:00
  • b4cf37b006 Add new bundle support to verify-blob and verify-blob-attestation (#3796) Zach Steindler 2024-07-29 11:13:42 -04:00
  • 0406602122 Add support for recording creation timestamp for cosign attest (#3797) Zsolt Horvath 2024-07-29 17:02:33 +02:00
  • 98c2cab021 bump scaffolding version in tests to 0.7.5 (#3800) Bob Callaway 2024-07-28 13:21:04 -04:00
  • 62a2cffd51 Include SCT verification failure details in error message (#3799) Slavek Kabrda 2024-07-27 00:03:18 +02:00
  • c6cdf1b376 Adding protobuf bundle support to sign-blob and attest-blob (#3752) Zach Steindler 2024-07-23 11:48:24 -04:00
  • ffde21e6a3 chore(deps): bump google.golang.org/api from 0.188.0 to 0.189.0 (#3791) dependabot[bot] 2024-07-22 17:39:19 +00:00
  • deed363152 chore(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0 (#3792) v2.3.0 dependabot[bot] 2024-07-22 10:19:10 -07:00
  • c6f89f83c9 chore(deps): bump github.com/buildkite/agent/v3 from 3.74.1 to 3.75.1 (#3793) dependabot[bot] 2024-07-22 10:18:56 -07:00
  • aeba4736c2 Add CHANGELOG for v2.3.0 (#3789) Hayden B 2024-07-22 10:18:09 -07:00
  • 20d472467a chore(deps): bump github.com/google/go-containerregistry (#3790) dependabot[bot] 2024-07-22 17:14:48 +00:00
  • 4684fd6545 chore(deps): bump the gomod group with 5 updates (#3780) dependabot[bot] 2024-07-16 08:27:59 +00:00
  • 3c6c5c92dc chore(deps): bump github.com/sigstore/fulcio from 1.4.5 to 1.5.1 (#3784) dependabot[bot] 2024-07-16 10:06:07 +02:00
  • 05026ee992 chore(deps): bump github.com/google/go-containerregistry (#3783) dependabot[bot] 2024-07-15 22:24:14 +00:00
  • f9270c01f5 chore(deps): bump google.golang.org/api from 0.187.0 to 0.188.0 (#3782) dependabot[bot] 2024-07-15 22:16:48 +00:00
  • 4fd699ca84 chore(deps): bump go.step.sm/crypto from 0.48.1 to 0.50.0 (#3781) dependabot[bot] 2024-07-15 23:57:20 +02:00
  • 13d3a56434 chore(deps): bump the actions group across 1 directory with 2 updates (#3785) dependabot[bot] 2024-07-15 20:57:47 +02:00
  • f7a5725317 Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776) Dmitry Savintsev 2024-07-11 21:24:57 +02:00
  • bdcbf44ee9 add handling of keyless verification for all verify commands (#3761) Dmitry Savintsev 2024-07-11 19:11:17 +02:00
  • ca682f2a43 chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 (#3774) dependabot[bot] 2024-07-10 11:18:46 +02:00
  • 811dba8d66 factor out keyless verification certificate loading function (#3762) Dmitry Savintsev 2024-07-09 11:51:29 +02:00
  • bc5f6c62f1 chore(deps): bump sigs.k8s.io/release-utils in the gomod group (#3767) dependabot[bot] 2024-07-09 11:17:29 +02:00
  • 2dd32f65d2 chore(deps): bump golang.org/x/term from 0.21.0 to 0.22.0 (#3770) dependabot[bot] 2024-07-08 21:09:39 +02:00
  • e5afa56572 chore(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 (#3771) dependabot[bot] 2024-07-08 21:09:28 +02:00
  • 58af4bb887 chore(deps): bump go.step.sm/crypto from 0.47.1 to 0.48.1 (#3768) dependabot[bot] 2024-07-08 18:23:27 +00:00
  • b310bc6d24 fix: extra whitespace in README.md (#3773) Hector Fernandez 2024-07-08 20:02:11 +02:00
  • bf2067a9a0 chore(deps): bump the gomod group across 1 directory with 7 updates (#3766) dependabot[bot] 2024-07-05 15:16:46 +02:00
  • d05a1204ff General housekeeping and go updates (#3765) Carlos Tadeu Panato Junior 2024-07-05 14:15:30 +02:00
  • 3d622d1d6d Update README.md to account for necessary new go version (#3764) bminahan73 2024-07-03 11:28:46 -05:00
  • 79db196e2d chore(deps): bump github.com/open-policy-agent/opa from 0.65.0 to 0.66.0 (#3756) dependabot[bot] 2024-07-02 15:51:09 +02:00
  • 7d74685da3 chore(deps): bump google.golang.org/api from 0.185.0 to 0.186.0 (#3755) dependabot[bot] 2024-07-02 15:42:25 +02:00
  • 8b55af280f Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745) Max Lambrecht 2024-07-01 14:44:33 -05:00
  • 40fc15f25a add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464) Dmitry Savintsev 2024-07-01 21:20:12 +02:00
  • 7c20052077 Fixing issue 3743 (#3744) Meeki1l 2024-06-25 20:07:10 +03:00
  • e924bc8f96 chore(deps): bump google.golang.org/api from 0.184.0 to 0.185.0 (#3747) dependabot[bot] 2024-06-25 09:17:42 +02:00
  • 8859e29d6b chore(deps): bump github.com/xanzy/go-gitlab from 0.105.0 to 0.106.0 (#3748) dependabot[bot] 2024-06-25 09:17:25 +02:00
  • 68d38a8579 chore(deps): bump github.com/hashicorp/go-retryablehttp (#3749) dependabot[bot] 2024-06-25 07:49:43 +02:00
  • 2b538f8963 adds tsa cert chain check for env var or tuf targets. (#3600) ian hundere 2024-06-19 06:21:59 -04:00
  • 9e3811bbb7 upgrade to go1.22 (#3739) Carlos Tadeu Panato Junior 2024-06-19 09:54:12 +02:00
  • 5209b38b68 Make config layers in ociremote mountable (#3741) Jon Johnson 2024-06-18 11:41:23 -07:00
  • 9f18570e42 chore(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 (#3715) dependabot[bot] 2024-06-18 18:20:00 +02:00
  • 9a9447db09 chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.2.0 to 2.3.0 (#3732) dependabot[bot] 2024-06-18 17:49:43 +02:00
  • 2525c9344d chore(deps): bump the gomod group with 4 updates (#3731) dependabot[bot] 2024-06-18 15:14:47 +02:00
  • e5937c5b0d chore(deps): bump the actions group across 1 directory with 5 updates (#3738) dependabot[bot] 2024-06-18 14:45:04 +02:00
  • 598c734c52 chore(deps): bump google.golang.org/api from 0.183.0 to 0.184.0 (#3734) dependabot[bot] 2024-06-18 14:44:49 +02:00
  • ee521e4957 bump builder image to ise go1.21.11 and update goreleaser to version 2 (#3737) Carlos Tadeu Panato Junior 2024-06-18 14:19:37 +02:00
  • 98fd801aef Bump scaffolding version (#3736) Hayden B 2024-06-18 04:59:00 -07:00
  • e72f47230e chore(deps): bump go.step.sm/crypto from 0.46.0 to 0.47.0 (#3723) dependabot[bot] 2024-06-11 20:13:04 +02:00
  • ca1733a02a Add debug providers command. (#3728) Billy Lynch 2024-06-11 09:28:45 -04:00
  • 5bbccd5cc3 chore(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0 (#3721) dependabot[bot] 2024-06-11 15:27:01 +02:00
  • eae74ff1f7 chore(deps): bump google.golang.org/api from 0.182.0 to 0.183.0 (#3726) dependabot[bot] 2024-06-10 19:44:41 +02:00
  • 098e892ae4 chore(deps): bump cuelang.org/go from 0.8.2 to 0.9.0 (#3725) dependabot[bot] 2024-06-10 19:44:16 +02:00
  • d275a272ec chore(deps): bump go.step.sm/crypto from 0.45.1 to 0.46.0 (#3717) dependabot[bot] 2024-06-03 19:11:36 +02:00
  • f3225b35f6 chore(deps): bump google.golang.org/api from 0.181.0 to 0.182.0 (#3716) dependabot[bot] 2024-06-03 19:11:10 +02:00
  • 6b6acc2fb8 chore(deps): bump the gomod group with 5 updates (#3713) dependabot[bot] 2024-06-03 19:10:41 +02:00
  • e62321748d chore(deps): bump github.com/open-policy-agent/opa from 0.64.1 to 0.65.0 (#3714) dependabot[bot] 2024-06-03 18:45:43 +02:00
  • 550dbf9433 chore(deps): bump go.step.sm/crypto in the gomod group (#3710) dependabot[bot] 2024-05-27 18:59:24 +02:00
  • 5ae2e31c30 chore(deps): bump go.step.sm/crypto from 0.44.8 to 0.45.0 (#3704) dependabot[bot] 2024-05-21 11:13:59 +02:00
  • 2359dbdf3d chore(deps): bump google.golang.org/api from 0.180.0 to 0.181.0 (#3703) dependabot[bot] 2024-05-21 10:03:21 +02:00
  • 6e2fcd6622 chore(deps): bump the actions group with 3 updates (#3706) dependabot[bot] 2024-05-21 09:58:01 +02:00
  • 2bb2e88ed1 Add README.md for tests (#3708) Colleen Murphy 2024-05-20 15:37:33 -07:00