github/slsa-verifier
1
0
Fork 0
mirror of https://github.com/slsa-framework/slsa-verifier.git synced 2026-08-26 09:37:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
477 Commits 41 Branches 45 Tags
less-parallel-tests
Commit Graph
477 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
WhiteSource Renovateandasraa 429634c0e6 chore(deps): update dependency eslint to v8.26.0 (#323) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-25 14:55:53 +00:00
laurentsimon e9e3ab2e33 Make GitHub token optional (#324) 
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-10-25 11:04:34 +00:00
kpk47 37cf8fd48d Fix installer: Add arguments to actions/checkout so that it checks ou… (#319) 
* Fix installer: Add arguments to actions/checkout so that it checks out slsa-framework/slsa-verifier instead of the repo using the Action.

Signed-off-by: kpk47 <kkris@google.com>

* Switch to JS action

* rebuild TS

Signed-off-by: kpk47 <kkris@google.com>
 2022-10-25 10:42:00 +00:00
Wietse Venema 27597feff8 Add optional (#316) 
* Update README.md

Add missing [optional] indicators to the "verify-artifact" --help example.

Signed-off-by: Wietse Venema <72045954+wietse-gmail@users.noreply.github.com>

* Add missing [optional] indicators to the verify-artifact help message

Signed-off-by: Wietse Venema <72045954+wietse-gmail@users.noreply.github.com>

Signed-off-by: Wietse Venema <72045954+wietse-gmail@users.noreply.github.com>
 2022-10-23 23:33:39 +00:00
asraa e9cd6b763c fix: address gcb verifier comments and add gcb documentation (#300) 
* address gcb verifier comments

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-21 21:06:22 +00:00
asraa efc53fc78e docs: update release.md docs to describe a pre-release (#314) 
* update docs

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-21 15:37:12 -05:00
asraa c151f47368 add v1.2.1 builder tests (#310) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-20 01:45:22 -07:00
asraa 6766be33a8 tests: fix builder id matching (#308) 
* fix builder id matching

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-18 16:02:08 -05:00
WhiteSource Renovate 4ec69efd87 chore(deps): update dependency eslint to v8.25.0 (#273) 2022-10-17 13:25:37 -05:00
asraa 05d247fb14 rekor: use rekor client with retries (#301) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-17 16:55:40 +00:00
WhiteSource Renovateandasraa beada4bd09 fix(deps): update module github.com/go-openapi/runtime to v0.24.2 (#304) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-17 16:33:55 +00:00
WhiteSource Renovateandasraa 94b6087e2b chore(deps): update dependency eslint-plugin-github to v4.4.0 (#305) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-17 11:26:05 -05:00
WhiteSource Renovate 4a8f4bd0d9 chore(deps): update gcr.io/distroless/base:nonroot docker digest to a6441d1 (#306) 2022-10-17 10:53:38 -05:00
WhiteSource Renovateandasraa 3ab86db547 chore(deps): update gcr.io/distroless/base:nonroot docker digest to 3778d4f (#293) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-12 14:45:11 +00:00
WhiteSource Renovateandasraa 4f09605a47 fix(deps): update module github.com/sigstore/sigstore to v1.4.4 (#294) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-12 14:26:35 +00:00
WhiteSource Renovate b7b67c6740 chore(deps): update github-actions (#295) 2022-10-12 09:15:59 -05:00
asraa e6428d7da5 fix: env vars are case sensitive in configuration (#298) 
Signed-off-by: Asra Ali <asraa@google.com>
v1.4.1 		2022-10-08 15:11:48 -04:00
asraa 936dc46aca ci: fix path to config (#297) 
Signed-off-by: Asra Ali <asraa@google.com>

use k8s versioning to show commit and tree state

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
v1.4.0 		2022-10-08 18:31:10 +00:00
asraa 93f88b9937 update version information for release (#296) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-08 17:23:03 +00:00
asraa a6e069c0ab gcb: add gcb compatibility (#292) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-07 14:21:50 -07:00
WhiteSource Renovate 300cb9003d chore(deps): update dependency jasmine to v4.4.0 (#283) 2022-10-05 15:44:34 -05:00
WhiteSource RenovateandIan Lewis fc50b662fc chore(deps): pin dependencies (#269) 
Co-authored-by: Ian Lewis <ianlewis@google.com>
 2022-10-04 01:00:02 +00:00
asraa 168f9c3568 release: add release hash for v1.1.2 and v1.0.4 (#291) 
* release: add hash for v1.1.2

Signed-off-by: Asra Ali <asraa@google.com>

* add releaes v1.0

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-04 09:41:40 +09:00
asraa e269a00945 release: add release v1.3.1 and v1.2.1 (#288) 
* release: add release v1.3.1 and v1.2.1

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-03 10:27:24 -05:00
Ian Lewis 951ae240b2 Update pre-submits (#289) 
Signed-off-by: Ian Lewis <ianlewis@google.com>

Signed-off-by: Ian Lewis <ianlewis@google.com>
 2022-10-03 09:58:15 -05:00
WhiteSource Renovate 35fd91f381 chore(deps): update github-actions (#284) 2022-10-03 09:46:34 +09:00
asraa 0ad6136f60 fix: make client shard aware when verifying (#282) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-09-30 16:08:33 -05:00
laurentsimon a2f6c3b8f9 Update README.md (#276) 
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-09-27 14:52:58 -05:00
WhiteSource Renovateandasraa 7bb343116e fix(deps): update module github.com/sigstore/sigstore to v1.4.2 (#272) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-26 11:35:50 +00:00
WhiteSource Renovateandasraa 3ee3cca59d chore(deps): update github-actions (#274) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-26 11:22:46 +00:00
laurentsimon ad0648c097 doc: add links to GH builders (#268) 
* Update README.md

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update README.md

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-09-26 06:12:31 -05:00
laurentsimon b5da86b168 doc: document build id and GCB vs GHA (#266) 
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* comments

* update
 2022-09-23 19:04:51 +00:00
WhiteSource Renovate 5f98831104 fix(deps): update module github.com/sigstore/sigstore to v1.4.1 (#263) 2022-09-23 14:04:06 +00:00
kpk47 b9c3c9d87e Add a GitHub Action for installing slsa-verifier. (#246) 2022-09-22 18:58:40 +00:00
WhiteSource Renovate aa75f1b7bb chore(deps): update github/codeql-action action to v2.1.24 (#262) 2022-09-21 16:48:34 +00:00
WhiteSource Renovateandasraa eec5dd4c26 chore(deps): update gcr.io/distroless/base:nonroot docker digest to 33fac4d (#260) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-19 20:43:51 +00:00
WhiteSource Renovate 78a225d3bd fix(deps): update module github.com/sigstore/cosign to v1.12.0 (#264) 2022-09-19 16:33:55 -04:00
laurentsimon 533d347a4b feat: support builderID matching with or without semver for GHA (#257) 
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
 2022-09-15 14:32:03 -07:00
WhiteSource Renovateandasraa cddba700c8 fix(deps): update module github.com/google/go-cmp to v0.5.9 (#253) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-14 17:47:23 +00:00
WhiteSource Renovateandasraa aa6f6a56ea chore(deps): update ossf/scorecard-action action to v2 (#255) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-13 14:52:53 +00:00
WhiteSource Renovate 11203e8546 chore(deps): update golang docker tag to v1.19 (#196) 2022-09-13 09:44:44 -05:00
laurentsimon b58e752378 feat: support builderID matching with or without semver for GCB (#256) 
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
 2022-09-12 17:17:46 -07:00
laurentsimon d12dce9526 feat: CLI tests for GCB verification (#251) 
* update

* update

* update
 2022-09-08 13:36:56 -07:00
asraa 26155fe9a3 fix: fix CLI flag mishap (#250) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-09-07 08:27:28 -07:00
laurentsimon e0edc0c46f feat: support for GCB v0.3 verification (#248) 
* update

* update

* update

* update
 2022-09-06 23:54:59 +00:00
asraa ff0ced42ef refactor: add subcommands and separate functionality from artifacts a… (#231) 
* refactor: add subcommands and separate functionality from artifacts and images

Signed-off-by: Asra Ali <asraa@google.com>
 2022-09-06 17:10:58 -05:00
WhiteSource Renovateandasraa 0211941480 chore(deps): update golang:1.18 docker digest to 5540a6a (#238) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-06 14:09:42 +00:00
WhiteSource Renovate a040702c4e chore(deps): update github/codeql-action action to v2.1.22 (#249) 2022-09-06 08:40:16 -05:00
laurentsimon d5b56c334e feat: add CLI tests for GCB verification (#245) 
* update

* update

* update

* update
 2022-09-02 20:42:40 +00:00
WhiteSource Renovateandasraa 2adefa0e01 chore(deps): update github-actions (#240) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-02 16:01:16 +00:00