AdamKorcz 8ac891ff0e Merge pull request from GHSA-vfp6-jrw2-99g9 ...

* Add limit to number of sigs and attestations

Signed-off-by: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com>

* Update pkg/cosign/fetch.go

Co-authored-by: Cody Soyland <codysoyland@gmail.com>
Signed-off-by: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com>

* Update error message

Signed-off-by: Hayden B <hblauzvern@google.com>

* fix compilation error

Signed-off-by: Hayden Blauzvern <hblauzvern@google.com>

* Add e2e tests

Signed-off-by: Hayden Blauzvern <hblauzvern@google.com>

---------

Signed-off-by: AdamKorcz <44787359+AdamKorcz@users.noreply.github.com>
Signed-off-by: Hayden B <hblauzvern@google.com>
Signed-off-by: Hayden Blauzvern <hblauzvern@google.com>
Co-authored-by: Cody Soyland <codysoyland@gmail.com>
Co-authored-by: Hayden B <hblauzvern@google.com>

2023-11-07 06:59:07 -05:00

..

blob

feat: Implement 'env' package to handle environment variables in cosign (#2322)

2022-10-17 21:37:35 +00:00

cosign

Merge pull request from GHSA-vfp6-jrw2-99g9

2023-11-07 06:59:07 -05:00

oci

Set go to min 1.21 and update dependencies (#3327)

2023-10-29 09:14:11 -07:00

policy

Stop using deprecated in_toto.ProvenanceStatement (#3243)

2023-09-18 10:08:08 -07:00

providers

Handle HTTP_1_1_REQUIRED errors in github provider (#3172)

2023-08-09 12:04:13 +02:00

signature

Upgrade to go1.20 (#2689)

2023-02-06 11:26:09 +01:00

types

Fix spdx json media type (#2479)

2022-11-25 08:12:52 +01:00