3c5abb613f
chore(deps): update dependency typescript to v5 ( #545 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
Co-authored-by: Ian Lewis <ianlewis@google.com >
2023-04-11 00:08:54 +00:00
Ian Lewis and GitHub
f96d91bdd2
fix: Support pre-releases on trusted repos ( #552 )
...
Support pre-releases on trusted repos
---------
Signed-off-by: Ian Lewis <ianlewis@google.com >
2023-04-11 08:54:33 +09:00
b01cb9d69c
chore: report scheduled release workflow failures ( #543 )
...
* chore: report scheduled release workflow failures
Signed-off-by: Asra Ali <asraa@google.com >
* fix: fix yamllint
Signed-off-by: Asra Ali <asraa@google.com >
* empty commit
Signed-off-by: Asra Ali <asraa@google.com >
---------
Signed-off-by: Asra Ali <asraa@google.com >
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com >
2023-03-24 23:40:49 +00:00
Mend Renovate and GitHub
ed7976a0d4
chore(deps): update github-actions ( #529 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-03-24 14:36:38 +00:00
a09c6aa06a
fix(deps): update github.com/sigstore/protobuf-specs digest to c8a23a4 ( #528 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
Co-authored-by: asraa <asraa@google.com >
2023-03-24 13:45:48 +00:00
Mend Renovate and GitHub
c4400c7475
chore(deps): update github-actions (major) ( #536 )
...
chore(deps): update github-actions
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-03-24 08:33:31 -05:00
laurentsimon and GitHub
37e3b406cb
feat: GCB tag and versioned-tag support for containers ( #540 )
...
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
---------
Signed-off-by: laurentsimon <laurentsimon@google.com >
2023-03-23 16:57:34 +00:00
5c377787ec
feat: verification for provenance ( #537 )
...
* verification for provenance
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com >
* Fix linter warnings
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com >
---------
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com >
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com >
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com >
2023-03-21 19:11:35 -07:00
asraa and GitHub
e8ce5c0204
chore: update docs for release v2.1.0 ( #530 )
...
* chore: update docs for release v2.1.0
Signed-off-by: Asra Ali <asraa@google.com >
---------
Signed-off-by: Asra Ali <asraa@google.com >
2023-03-17 15:07:25 +00:00
Ian Lewis and GitHub
a1be080731
fix: Update references check ( #533 )
...
Fix references check
Signed-off-by: Ian Lewis <ianlewis@google.com >
2023-03-17 09:54:07 -05:00
Mend Renovate and GitHub
1ed3847709
chore(deps): update npm dev ( #517 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-03-14 11:58:36 +09:00
58786d3274
chore: add a file extension ".exe" to Windows artifacts ( #527 )
...
Signed-off-by: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com >
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com >
2023-03-10 21:57:56 +00:00
laurentsimon and GitHub
20b06426ff
docs: update installation to cover the Action and to receive updates ( #523 )
...
docs: update installation to cover the Action and to receive updates (#523 )
Signed-off-by: laurentsimon <laurentsimon@google.com >
2023-03-10 15:46:04 -06:00
ae38103ecf
feat: verify sourceURI for npm packages ( #521 )
...
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* Update verifiers/internal/gha/provenance.go
Co-authored-by: Ian Lewis <ianlewis@google.com >
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
---------
Signed-off-by: laurentsimon <laurentsimon@google.com >
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com >
Co-authored-by: Ian Lewis <ianlewis@google.com >
2023-03-10 17:13:29 +00:00
asraa and GitHub
5a77b25fb4
fix: fix GCB verification with git material source prefix ( #519 )
...
Signed-off-by: Asra Ali <asraa@google.com >
2023-03-09 10:00:19 +09:00
Kevin Halk and GitHub
47495c7d5b
feat: Update SLSA verifier to support a global signing key for GCB V1 which… ( #509 )
...
* Update SLSA verifier to support a global signing key for GCB V1 which creates the signature in a DSSE-conformant PAE format
- new public key for "global PAE signing key"
- test data and unit tests
Signed-off-by: Kevin Halk <khalk@google.com >
* Update SLSA verifier to support a global signing key for GCB V1 which creates the signature in a DSSE-conformant PAE format
- new public key for "global PAE signing key"
- test data and unit tests
Signed-off-by: Kevin Halk <khalk@google.com >
* Update SLSA verifier to support a global signing key for GCB V1 which creates the signature in a DSSE-conformant PAE format
- new public key for "global PAE signing key"
- test data and unit tests
Signed-off-by: Kevin Halk <khalk@google.com >
* Update SLSA verifier to support a global signing key for GCB V1 which creates the signature in a DSSE-conformant PAE format
- new public key for "global PAE signing key"
- test data and unit tests
Signed-off-by: Kevin Halk <khalk@google.com >
* Update SLSA verifier to support a global signing key for GCB V1 which creates the signature in a DSSE-conformant PAE format
- new public key for "global PAE signing key"
- test data and unit tests
Signed-off-by: Kevin Halk <khalk@google.com >
* Update SLSA verifier to support a global signing key for GCB V1 which creates the signature in a DSSE-conformant PAE format
- new public key for "global PAE signing key"
- test data and unit tests
Signed-off-by: Kevin Halk <khalk@google.com >
* Update SLSA verifier to support a global signing key for GCB V1 which creates the signature in a DSSE-conformant PAE format
- new public key for "global PAE signing key"
- test data and unit tests
Signed-off-by: Kevin Halk <khalk@google.com >
---------
Signed-off-by: Kevin Halk <khalk@google.com >
2023-03-06 16:02:30 +00:00
9f57e6add9
chore(deps): update github-actions ( #502 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
Co-authored-by: Ian Lewis <ianlewis@google.com >
2023-03-06 00:48:50 +00:00
laurentsimon and GitHub
82a12591ff
feat: npm default runner support ( #495 )
...
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
* update
Signed-off-by: laurentsimon <laurentsimon@google.com >
---------
Signed-off-by: laurentsimon <laurentsimon@google.com >
2023-03-02 21:53:29 +00:00
Ian Lewis and GitHub
12910ea596
test: Add test data for v1.5.0 ( #506 )
...
* Add test data for v1.5.0
* Fix container tests
---------
Signed-off-by: Ian Lewis <ianlewis@google.com >
2023-02-28 12:03:20 +09:00
Mend Renovate and GitHub
66931c71be
chore(deps): update npm dev ( #501 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-27 17:46:32 +09:00
Mend Renovate and GitHub
5fc3389c24
fix(deps): update github.com/sigstore/protobuf-specs digest to 44103a5 ( #499 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-22 12:21:03 +09:00
Mend Renovate and GitHub
f2b8ee8fff
chore(deps): update npm dev ( #497 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-22 10:52:04 +09:00
Mend Renovate and GitHub
48913f6c43
chore(deps): update golang:1.19 docker digest to 7ce31d1 ( #490 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-22 10:05:25 +09:00
asraa and GitHub
d8c2961d82
test: add docker based spport and start adding tests ( #486 )
...
Signed-off-by: Asra Ali <asraa@google.com >
2023-02-15 20:46:11 +00:00
Ian Lewis and GitHub
a2388a3c49
ci: Add go mod tidy to renovate post update ( #484 )
...
Signed-off-by: Ian Lewis <ianlewis@google.com >
2023-02-13 22:32:59 +00:00
Mend Renovate and GitHub
64d1a7f5e9
fix(deps): update module github.com/sigstore/cosign/v2 to v2.0.0-rc.2 ( #481 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-14 07:12:13 +09:00
Mend Renovate and GitHub
13b4c3e75b
chore(deps): update github/codeql-action action to v2.2.4 ( #480 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-13 14:36:07 +00:00
Mend Renovate and GitHub
878947f5e8
chore(deps): update npm dev ( #482 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-13 09:46:28 +00:00
Mend Renovate and GitHub
654a58c2af
chore(deps): update golang:1.19 docker digest to 572f680 ( #469 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-13 13:19:15 +09:00
asraa and GitHub
0bb98050f2
fix: use a uniform verifier interface for provenance type ( #478 )
...
* cleanup: use a uniform verifier interface for provenance type
Signed-off-by: Asra Ali <asraa@google.com >
* fix experimental gateg
Signed-off-by: Asra Ali <asraa@google.com >
* oops
Signed-off-by: Asra Ali <asraa@google.com >
---------
Signed-off-by: Asra Ali <asraa@google.com >
2023-02-10 14:04:12 -08:00
asraa and GitHub
5d6c770d43
feat: support branch and tag from slsa v1 provenance ( #476 )
...
* feat: support branch and tag from slsa v1 provenance
Signed-off-by: Asra Ali <asraa@google.com >
Signed-off-by: Asra Ali <asraa@google.com >
2023-02-10 21:33:16 +00:00
asraa and GitHub
239c4489ce
feat: add slsa v1?draft provenance experimental support ( #470 )
...
* feat: add slsa v1?draft provenance support
Signed-off-by: Asra Ali <asraa@google.com >
Signed-off-by: Asra Ali <asraa@google.com >
2023-02-09 17:21:15 +00:00
Mend Renovate and GitHub
69da812e1c
fix(deps): update github.com/sigstore/protobuf-specs digest to 9b722b6 ( #465 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-07 20:15:42 +00:00
53ca117e3c
chore(deps): update npm dev ( #466 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
Co-authored-by: asraa <asraa@google.com >
2023-02-06 15:01:12 +00:00
Mend Renovate and GitHub
be04b2a04c
fix(deps): update module github.com/in-toto/in-toto-golang to v0.6.0 ( #468 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-02-06 08:52:55 -06:00
asraa and GitHub
fec5b6a7b5
refactor: generalize provenance out of predicate type info ( #463 )
...
* refactor: generalize provenance out of predicate type info
Signed-off-by: Asra Ali <asraa@google.com >
2023-02-03 23:30:23 +00:00
asraa and GitHub
362bd1a331
feat: add offline bundle signature verification ( #457 )
...
* feat: add bundle signature verification
Signed-off-by: Asra Ali <asraa@google.com >
2023-02-03 09:31:40 -06:00
Mend Renovate and GitHub
0af383c2bd
chore(deps): update golang:1.19 docker digest to bb9811f ( #261 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-01-30 05:50:04 -08:00
Mend Renovate and GitHub
9578b3838e
chore(deps): update github-actions ( #460 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-01-30 05:33:14 -08:00
Mend Renovate and GitHub
3c012d278e
chore(deps): update npm dev ( #459 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-01-30 05:23:26 -08:00
5deacad765
ci: Ensure all version references are up-to-date prior to release ( #447 )
...
* Create references.sh
Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com >
* WIP: check docs in pre-submits
Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com >
* Clean up
Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com >
* Fix based on comments
Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com >
* Add instructions to RELEASE.md
Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com >
* Check references match version in PR body
Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com >
---------
Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com >
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com >
2023-01-27 23:12:37 +00:00
asraa and GitHub
2444233891
test: add builder id tests for short form ( #455 )
...
Signed-off-by: Asra Ali <asraa@google.com >
Signed-off-by: Asra Ali <asraa@google.com >
2023-01-26 09:35:22 -06:00
asraa and GitHub
bcd23c945e
chore: enable some Go linters ( #456 )
...
* enable deadcode
Signed-off-by: Asra Ali <asraa@google.com >
* enable unconvert
Signed-off-by: Asra Ali <asraa@google.com >
* enable thelper
Signed-off-by: Asra Ali <asraa@google.com >
* enable stylecheck
Signed-off-by: Asra Ali <asraa@google.com >
* enable misspell
Signed-off-by: Asra Ali <asraa@google.com >
* enable gocritic
Signed-off-by: Asra Ali <asraa@google.com >
* enable godot
Signed-off-by: Asra Ali <asraa@google.com >
* enable staticcheck
Signed-off-by: Asra Ali <asraa@google.com >
* address experimental deadcode
Signed-off-by: Asra Ali <asraa@google.com >
Signed-off-by: Asra Ali <asraa@google.com >
2023-01-25 19:51:10 +00:00
5eea7c5537
chore(deps): update github/codeql-action action to v2.1.39 ( #452 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
Signed-off-by: Renovate Bot <bot@renovateapp.com >
Co-authored-by: asraa <asraa@google.com >
2023-01-25 15:59:45 +00:00
Mend Renovate and GitHub
b0c071b496
fix(deps): update go ( #453 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-01-25 09:52:35 -06:00
asraa and GitHub
703fca0fbc
test: add v1.4.0 build tests for gha_go gha_generic and gha_generic_container ( #439 )
...
* test: add v1.4.0 build tests for gha_go gha_generic and gha_generic_container
Signed-off-by: Asra Ali <asraa@google.com >
* gitignore oops
Signed-off-by: Asra Ali <asraa@google.com >
Signed-off-by: Asra Ali <asraa@google.com >
2023-01-17 16:40:09 +00:00
Mend Renovate and GitHub
fb8ab2af45
chore(deps): update npm dev ( #445 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-01-16 05:51:13 +00:00
Mend Renovate and GitHub
71e72f0a1f
chore(deps): update github/codeql-action action to v2.1.38 ( #444 )
...
Signed-off-by: Renovate Bot <bot@renovateapp.com >
2023-01-16 10:37:41 +09:00
Ian Lewis and GitHub
1da39d7e06
ci: Add javascript to CodeQL analysis ( #413 )
...
Signed-off-by: Ian Lewis <ianlewis@google.com >
Signed-off-by: Ian Lewis <ianlewis@google.com >
2023-01-11 10:21:11 -06:00
Ian Lewis and GitHub
771f842244
docs: Add instructions for GHA container generator ( #438 )
...
Signed-off-by: Ian Lewis <ianlewis@google.com >
2023-01-11 11:34:50 +09:00
Kevin HalkandGitHub
