Zack Brady
c0294c733b
update release/2.0 from main ( #546 )
...
* fix: handling of file referenced dependencies without repository field (#514 )
co-authored-by: devleitner <devleitner@protonmail.com >
* bump go.opentelemetry.io/otel/sdk (#520 )
bumps the go_modules group with 1 update in the / directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go ).
updates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-version: 1.40.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* dev.md file (#521 )
* smaller changes and updates for v1.4.2 release (#524 )
* smaller changes and updates for v1.4.2 release
* removed unused env variable
* over-"haul": replace oras v1 and cosign fork with native containerd-based implementation (#515 )
* remove oras from hauler
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* remove cosign fork and use upstream cosign for verification
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* added support for oci referrers
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* updated README.md projects list
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* updates for copilot PR review
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* bug fix for unsafe type assertions
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* bug fix for http getter and dead code
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* fixes for more clarity and better error handling
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* bug fix for resource leaks and unchecked errors
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* bug fix for rewrite logic for docker.io images due to cosign removal
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* bug fix for sigs and referrers
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* bug fix for index.json missing mediatype
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* bug fix to make sure manifest.json doesnt include anything other than actual container images
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* bump github.com/docker/cli in the go_modules group across 1 directory (#526 )
bumps the go_modules group with 1 update in the / directory: [github.com/docker/cli](https://github.com/docker/cli ).
updates `github.com/docker/cli` from 29.0.3+incompatible to 29.2.0+incompatible
- [Commits](https://github.com/docker/cli/compare/v29.0.3...v29.2.0 )
---
updated-dependencies:
- dependency-name: github.com/docker/cli
dependency-version: 29.2.0+incompatible
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* removed deprecated code (#528 )
* removed deprecated code
* removed all supported for v1alpha1
* fix extract for oci files (#529 )
* fix extract for oci files
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* have extract guard against path traversal
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* improved test coverage (#530 )
* improved test coverage
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* adjusted mapper_test for oddball oci files
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* adjust extract to handle an image index appropriately (#531 )
* adjust extract to handle images and image indices appropriately
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* updates for review feedback
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* fix dockerhub default host bug (#534 )
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* adjust hauler's kind annotation to not reflect cosign (#535 )
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* bump google.golang.org/grpc in the go_modules group across 1 directory (#536 )
bumps the go_modules group with 1 update in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go ).
updates `google.golang.org/grpc` from 1.78.0 to 1.79.3
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.3
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* add cherry-pick workflow for release branches (#533 )
this workflow automates cherry-picking changes from merged pull requests to specified release branches based on comments... it handles permission checks, version parsing, and conflict resolution during the cherry-pick process.
Signed-off-by: Camryn Carter <camryn.carter@ranchergovernment.com >
* images.txt testdata file (#539 )
* fix keep registry logic (#537 )
* fixed keep registry logic
* trim library/
* updated test
* test updates
* option to sync images.txt files natively (#538 )
* sync images.txt files
* test worklflow sync w image list
* images.txt
* chunk the haul (#519 )
* chunk the haul
* validate numeric suffix on join
* enforce valid chunk size
* containerd warning
* updated test.go files
* bump github.com/go-jose/go-jose/v4 (#542 )
bumps the go_modules group with 1 update in the / directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ).
updates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.4
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
dependency-version: 4.1.4
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* allow multiple prefix references (#532 )
* allow multiple prefix references
* fixed some duplications
* add optional flag for excluding extra artifacts when pulling from a registry (#541 )
* add optional flag for excluding extra artifacts when pulling from a registry
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* add optional flag to charts for excluding extra artifacts when pulling from a registry
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
Signed-off-by: Camryn Carter <camryn.carter@ranchergovernment.com >
Co-authored-by: devLeitner <87783219+devLeitner@users.noreply.github.com >
Co-authored-by: devleitner <devleitner@protonmail.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Camryn Carter <camryn.carter@ranchergovernment.com >
Co-authored-by: Adam Martin <adam.martin@ranchergovernment.com >
2026-04-08 12:09:23 -04:00
Zack Brady
ded947d609
added/fixed helm chart images/dependencies features ( #485 )
...
* added/fixed helm chart images/dependencies features
* added helm chart images/dependencies features to sync/manifests
* more fixes for helm chart images/dependencies features
* fixed tests for incorrect referenced images
* fixed sync for helm chart images/dependencies
* added helm chart image annotations and registry/platform features
* updated ordering of experimental
* added more parsing types for helm images/dependencies
* a few more remove artifacts updates
---------
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
2026-01-09 13:39:52 -05:00
Zack Brady
ff3cece87f
more experimental feature updates ( #486 )
...
* updates for experimental features and renamed delete to remove
* added examples back for experimental features
* update stability warning message
Co-authored-by: Camryn Carter <camryn.carter@ranchergovernment.com >
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
* fixed more tests to use ghcr for hauler
* updated test data workflow
---------
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
Co-authored-by: Camryn Carter <camryn.carter@ranchergovernment.com >
2026-01-08 14:57:52 -05:00
Camryn Carter
c54065f316
add experimental notes ( #483 )
2026-01-08 00:59:23 -05:00
Camryn Carter
96bab7b81f
path rewrites ( #475 )
...
* image reference rewrite
* remove need for rewrite-provider
* handle charts
* handle leading slash and missing tags
* tests
* tool cleanup
* removed intermediate store cleanup
* fix?
* test cleanup
* clean up tools folder again
* debug test
* clear tempdir after each filename provided by load
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* update tar command in load integration test
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
* clean up debug prints
* clean up debug prints
* fix typo
---------
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
Co-authored-by: Adam Martin <adam.martin@ranchergovernment.com >
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2026-01-06 11:48:49 -05:00
Adam Martin
ea53002f3a
formatting and flag text updates
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-04-22 12:43:04 -04:00
Nathaniel Churchill
4d0f779ae6
add keyless signature verification ( #434 )
2025-04-21 15:27:17 -04:00
Adam Martin
5021f3ab6b
cleanup new tlog flag typos and add shorthand ( #426 )
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-03-28 13:15:48 -04:00
Adam Martin
db065a1088
default public transparency log verification to false to be airgap friendly but allow override ( #425 )
...
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com >
2025-03-27 09:13:23 -04:00
Zack Brady
407ed94a0b
updated/standardize command descriptions ( #313 )
...
* initial desc formatting/updates
* fixed typos
* updated commands base on feedback
* more updates based on feedback
---------
Signed-off-by: Zack Brady <zackbrady123@gmail.com >
2024-09-20 18:19:49 -04:00
will
2d930b5653
feat-273: TLS Flags ( #303 )
...
* fix: move constant and flags to prevent loop
* feat: add tls cert to serve
* fix: add tls cli description
* fix: remove unnecessary code
* small updates/fixed unit test errors
* fix: migrate all flags, use exported vars
* fix: standardize to AddFlags
---------
Signed-off-by: will <30413278+wcrum@users.noreply.github.com >
Co-authored-by: Zack Brady <zackbrady123@gmail.com >
2024-08-25 16:16:37 -04:00
