laurentsimon and GitHub
e986dfc0ff
feat: Digest for new release ( #722 )
...
#label:release v2.4.1
How to LGTM this PR:
Ensure you have installed the GitHub client from https://cli.github.com .
If it is not installed in your `PATH`, set `export GH=/path/to/your/gh`
Set your `export GH_TOKEN=...`
Use [verify-release.sh](./verify-release.sh) script in this repository:
```
bash verify-release v2.4.1
```
Once it completes, you will see the last line `Verifying artifact
/tmp/tmp.SomeRanDOm/` and do:
```bash
sha256sum /tmp/tmp.SomeRanDOm/* | grep -v intoto
```
This will print out the hashes. Compare them to the changes in this PR
---------
Signed-off-by: laurentsimon <laurentsimon@google.com >
2023-11-07 17:23:25 -08:00
laurentsimon and GitHub
2184d9d604
chore: bump versions ( #715 )
...
Signed-off-by: laurentsimon <laurentsimon@google.com >
2023-10-10 00:27:33 +00:00
Mend Renovate and GitHub
0e5b3a3d11
fix(deps): update golang.org/x/exp digest to 7918f67 ( #694 )
...
[](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| golang.org/x/exp | require | digest | `10a5072` -> `7918f67` |
---
### ⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the
Dependency Dashboard for more information.
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At
any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/slsa-framework/slsa-verifier ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi40My4yIiwidXBkYXRlZEluVmVyIjoiMzcuMC4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Signed-off-by: Mend Renovate <bot@renovateapp.com >
2023-10-09 09:59:53 -07:00
Mend Renovate and GitHub
dab7d387fa
fix(deps): update github.com/sigstore/protobuf-specs digest to 5ef5406 ( #606 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-06-12 01:33:18 +00:00
Mend Renovate and GitHub
5ca5eb0120
fix(deps): update module github.com/sigstore/rekor to v1.2.0 [security] ( #622 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-06-02 09:10:53 -05:00
Mend Renovate and GitHub
9b6ec903b9
fix(deps): update github.com/sigstore/protobuf-specs digest to 91485b4 ( #584 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-05-09 00:32:22 +09:00
asraa and GitHub
467e0820b6
chore: update slsa provenance to v1 ( #579 )
...
* chore: update slsa provenance to v1
Signed-off-by: Asra Ali <asraa@google.com >
* fix import path
Signed-off-by: Asra Ali <asraa@google.com >
* update dsse testcases
Signed-off-by: Asra Ali <asraa@google.com >
* fix cosign image verification in update
Signed-off-by: Asra Ali <asraa@google.com >
---------
Signed-off-by: Asra Ali <asraa@google.com >
2023-05-08 15:18:16 +00:00
Mend Renovate and GitHub
954a421526
fix(deps): update github.com/sigstore/protobuf-specs digest to 13e09aa ( #578 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-05-01 01:35:03 +00:00
0a7e71cb09
fix(deps): update github.com/sigstore/protobuf-specs digest to b6d2576 ( #559 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
Co-authored-by: Ian Lewis <ianlewis@google.com >
2023-04-19 13:34:26 +09:00
6137b13c0e
fix(deps): update github.com/sigstore/protobuf-specs digest to 4dbf10b ( #553 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
Co-authored-by: Ian Lewis <ianlewis@google.com >
2023-04-11 00:20:40 +00:00
a09c6aa06a
fix(deps): update github.com/sigstore/protobuf-specs digest to c8a23a4 ( #528 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
Co-authored-by: asraa <asraa@google.com >
2023-03-24 13:45:48 +00:00
Mend Renovate and GitHub
5fc3389c24
fix(deps): update github.com/sigstore/protobuf-specs digest to 44103a5 ( #499 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-22 12:21:03 +09:00
Mend Renovate and GitHub
64d1a7f5e9
fix(deps): update module github.com/sigstore/cosign/v2 to v2.0.0-rc.2 ( #481 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-14 07:12:13 +09:00
asraa and GitHub
5d6c770d43
feat: support branch and tag from slsa v1 provenance ( #476 )
...
* feat: support branch and tag from slsa v1 provenance
Signed-off-by: Asra Ali <asraa@google.com >
Signed-off-by: Asra Ali <asraa@google.com >
2023-02-10 21:33:16 +00:00
asraa and GitHub
239c4489ce
feat: add slsa v1?draft provenance experimental support ( #470 )
...
* feat: add slsa v1?draft provenance support
Signed-off-by: Asra Ali <asraa@google.com >
Signed-off-by: Asra Ali <asraa@google.com >
2023-02-09 17:21:15 +00:00
Mend Renovate and GitHub
69da812e1c
fix(deps): update github.com/sigstore/protobuf-specs digest to 9b722b6 ( #465 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-07 20:15:42 +00:00
Mend Renovate and GitHub
be04b2a04c
fix(deps): update module github.com/in-toto/in-toto-golang to v0.6.0 ( #468 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-06 08:52:55 -06:00
asraa and GitHub
362bd1a331
feat: add offline bundle signature verification ( #457 )
...
* feat: add bundle signature verification
Signed-off-by: Asra Ali <asraa@google.com >
2023-02-03 09:31:40 -06:00
Mend Renovate and GitHub
b0c071b496
fix(deps): update go ( #453 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-01-25 09:52:35 -06:00
e8c3438638
fix(deps): update go ( #386 )
...
Co-authored-by: Ian Lewis <ianlewis@google.com >
2022-12-15 01:39:54 +00:00
a5568ee8ba
fix(deps): update module github.com/spf13/cobra to v1.6.1 ( #340 )
...
Co-authored-by: asraa <asraa@google.com >
2022-10-31 18:24:56 +00:00
c845407336
Update sigstore libraries ( #326 )
...
* Update sigstore libraries
Signed-off-by: Ian Lewis <ianmlewis@gmail.com >
* Update slsa-github-generator
Signed-off-by: Ian Lewis <ianmlewis@gmail.com >
* go mod tidy
Signed-off-by: Ian Lewis <ianmlewis@gmail.com >
Signed-off-by: Ian Lewis <ianmlewis@gmail.com >
Co-authored-by: asraa <asraa@google.com >
2022-10-27 14:36:36 +00:00
asraa and GitHub
05d247fb14
rekor: use rekor client with retries ( #301 )
...
Signed-off-by: Asra Ali <asraa@google.com >
Signed-off-by: Asra Ali <asraa@google.com >
2022-10-17 16:55:40 +00:00
beada4bd09
fix(deps): update module github.com/go-openapi/runtime to v0.24.2 ( #304 )
...
Co-authored-by: asraa <asraa@google.com >
2022-10-17 16:33:55 +00:00
4f09605a47
fix(deps): update module github.com/sigstore/sigstore to v1.4.4 ( #294 )
...
Co-authored-by: asraa <asraa@google.com >
2022-10-12 14:26:35 +00:00
asraa and GitHub
936dc46aca
ci: fix path to config ( #297 )
...
Signed-off-by: Asra Ali <asraa@google.com >
use k8s versioning to show commit and tree state
Signed-off-by: Asra Ali <asraa@google.com >
Signed-off-by: Asra Ali <asraa@google.com >
2022-10-08 18:31:10 +00:00
7bb343116e
fix(deps): update module github.com/sigstore/sigstore to v1.4.2 ( #272 )
...
Co-authored-by: asraa <asraa@google.com >
2022-09-26 11:35:50 +00:00
WhiteSource Renovate and GitHub
5f98831104
fix(deps): update module github.com/sigstore/sigstore to v1.4.1 ( #263 )
2022-09-23 14:04:06 +00:00
WhiteSource Renovate and GitHub
78a225d3bd
fix(deps): update module github.com/sigstore/cosign to v1.12.0 ( #264 )
2022-09-19 16:33:55 -04:00
cddba700c8
fix(deps): update module github.com/google/go-cmp to v0.5.9 ( #253 )
...
Co-authored-by: asraa <asraa@google.com >
2022-09-14 17:47:23 +00:00
laurentsimon and GitHub
d5b56c334e
feat: add CLI tests for GCB verification ( #245 )
...
* update
* update
* update
* update
2022-09-02 20:42:40 +00:00
0ff60a240a
fix(deps): update module github.com/sigstore/cosign to v1.11.1 ( #239 )
...
Co-authored-by: asraa <asraa@google.com >
2022-09-01 15:31:07 +00:00
laurentsimon and GitHub
26c928f5b7
Verify text provenance for GCB ( #242 )
...
* update
* update
* update
* update
* update
* comments
* comments
2022-08-30 23:08:46 +00:00
WhiteSource Renovate and GitHub
3fc1dbde46
fix(deps): update module github.com/sigstore/rekor to v0.11.0 ( #225 )
2022-08-23 09:38:20 -05:00
ab0daccd34
fix(deps): update module github.com/sigstore/cosign to v1.11.0 ( #224 )
...
Co-authored-by: asraa <asraa@google.com >
2022-08-23 14:13:21 +00:00
WhiteSource Renovate and GitHub
459608e7d8
fix(deps): update module github.com/go-openapi/swag to v0.22.3 ( #215 )
2022-08-19 11:55:11 -07:00
7b4b9cde06
feat: support oci image verification ( #147 )
...
* feat: support oci image verification
Signed-off-by: Asra Ali <asraa@google.com >
* add testing folder
Signed-off-by: Asra Ali <asraa@google.com >
* update name and make fix
Signed-off-by: Asra Ali <asraa@google.com >
* add tests
Signed-off-by: Asra Ali <asraa@google.com >
* Add initial testing
Signed-off-by: Asra Ali <asraa@google.com >
* updated comments
Signed-off-by: Asra Ali <asraa@google.com >
* update
Signed-off-by: Asra Ali <asraa@google.com >
* fix digest calculation
Signed-off-by: Asra Ali <asraa@google.com >
Signed-off-by: Asra Ali <asraa@google.com >
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com >
2022-08-17 15:59:01 -05:00
a7d3c61f21
fix(deps): update module github.com/sigstore/cosign to v1.10.1 ( #198 )
...
Co-authored-by: asraa <asraa@google.com >
2022-08-08 19:18:50 +00:00
laurentsimon and GitHub
caaf1c1b8e
feat: Create a verifier as a service ( #182 )
...
* update
* update
* update
* tests
* update
* update
* update
* update
* update
* update
* update
* update
* update
* update
* comments
* update
* update
* update
* update
* update
2022-08-03 14:29:25 -07:00
cdbab2bf0a
fix(deps): update module github.com/google/trillian to v1.4.2 ( #176 )
...
Co-authored-by: asraa <asraa@google.com >
2022-08-03 09:27:02 -05:00
WhiteSource Renovate and GitHub
b911c68206
fix(deps): update module github.com/sigstore/sigstore to v1.3.1 ( #177 )
2022-08-02 14:19:30 -05:00
WhiteSource Renovate and GitHub
13f7935ecf
fix(deps): update module github.com/sigstore/rekor to v0.10.0 ( #178 )
2022-08-01 14:06:06 -05:00
fb9aeaf638
fix(deps): update module github.com/sigstore/cosign to v1.10.0 ( #166 )
...
Co-authored-by: asraa <asraa@google.com >
2022-07-25 13:05:03 -05:00
WhiteSource Renovate and GitHub
e154b5534a
fix(deps): update module github.com/slsa-framework/slsa-github-generator to v1.2.0 ( #167 )
2022-07-25 10:12:15 -05:00
WhiteSource Renovate and GitHub
390d18a96c
fix(deps): update module github.com/go-openapi/strfmt to v0.21.3 ( #152 )
2022-07-18 08:05:26 -05:00
3b17f9c76f
Refactor - deprecated libraries ( #128 )
...
- Refactored to move away from github.com/google/trillian/merkle/logverifier"
and github.com/google/trillian/merkle/rfc6962
- Included go mod tidy for validation
- Fixes #https://github.com/slsa-framework/slsa-verifier/issues/61
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com >
Co-authored-by: asraa <asraa@google.com >
2022-07-12 18:57:42 +00:00
WhiteSource Renovate and GitHub
17019c1c07
fix(deps): update module github.com/sigstore/rekor to v0.9.1 ( #137 )
2022-07-11 12:19:37 -05:00
6ac968186d
fix(deps): update module github.com/sigstore/sigstore to v1.3.0 ( #123 )
...
Co-authored-by: asraa <asraa@google.com >
2022-07-07 12:53:06 +00:00
8e1e977a89
fix(deps): update module github.com/slsa-framework/slsa-github-generator to v1.1.1 ( #124 )
...
Co-authored-by: asraa <asraa@google.com >
2022-07-06 15:57:46 +00:00
d972ccaee0
fix(deps): update module github.com/sigstore/rekor to v0.9.0 ( #122 )
...
Co-authored-by: asraa <asraa@google.com >
2022-07-06 15:43:58 +00:00
laurentsimonandGitHub
Mend RenovateandGitHub
asraaandGitHub
