  WhiteSource RenovateandGitHub
|
17019c1c07
|
fix(deps): update module github.com/sigstore/rekor to v0.9.1 (#137)
|
2022-07-11 12:19:37 -05:00 |
|
 NaveenandGitHub
|
73d10ecfbf
|
Create scorecards.yml (#130)
|
2022-07-07 17:09:29 -07:00 |
|
|
6ac968186d
|
fix(deps): update module github.com/sigstore/sigstore to v1.3.0 (#123)
Co-authored-by: asraa <asraa@google.com>
|
2022-07-07 12:53:06 +00:00 |
|
|
NaveenandGitHub
|
9522708374
|
Clean up (#125)
- Cleaned up unused function.
- Fixed unnecessary type conversions.
- Fixed some long lines.
- Removed unused variable.
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
|
2022-07-07 07:44:39 -05:00 |
|
|
|
8e1e977a89
|
fix(deps): update module github.com/slsa-framework/slsa-github-generator to v1.1.1 (#124)
Co-authored-by: asraa <asraa@google.com>
|
2022-07-06 15:57:46 +00:00 |
|
|
|
d972ccaee0
|
fix(deps): update module github.com/sigstore/rekor to v0.9.0 (#122)
Co-authored-by: asraa <asraa@google.com>
|
2022-07-06 15:43:58 +00:00 |
|
|
WhiteSource RenovateandGitHub
|
83d02990d0
|
chore(deps): update actions/checkout digest to 2541b12 (#118)
|
2022-07-06 10:34:55 -05:00 |
|
 
|
257a510230
|
Configure Renovate (#110)
* chore(deps): add renovate.json
* Update renovate.json
* Delete dependabot.yml
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
|
2022-06-29 21:46:30 +00:00 |
|
|
asraaandGitHub
|
588ddc4344
|
add v1.1.1 hash (#114)
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-06-29 17:39:18 +00:00 |
|
|
laurentsimonandGitHub
|
c06d3f72a9
|
✨ Iterate thru subjects when verifying subject's hash (#112)
* Iterate thru subjects
* missing file
* update
|
2022-06-29 17:25:35 +00:00 |
|
|
asraaandGitHub
|
f568e1c254
|
test: fix test returns (#116)
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-06-29 17:17:16 +00:00 |
|
 
|
73b3f6a579
|
🌱 Bump github.com/sigstore/rekor from 0.8.1 to 0.8.2 (#109)
Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor) from 0.8.1 to 0.8.2.
- [Release notes](https://github.com/sigstore/rekor/releases)
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/rekor/compare/v0.8.1...v0.8.2)
---
updated-dependencies:
- dependency-name: github.com/sigstore/rekor
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-06-28 12:49:48 -05:00 |
|
|
asraaandGitHub
|
76a59d8413
|
tests: update to v1.1.1 testcases (#106)
* update v1.1.1 testcases
Signed-off-by: Asra Ali <asraa@google.com>
v1.1.1
|
2022-06-21 15:28:02 +00:00 |
|
|
laurentsimonandGitHub
|
4405bf51a0
|
Update RELEASE.md (#107)
|
2022-06-21 09:51:21 -05:00 |
|
|
asraaandGitHub
|
5110b6efc4
|
update to release 1.1.0 (#104)
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-06-20 21:35:08 +00:00 |
|
|
asraaandGitHub
|
5875b0a74f
|
bump release generator version (#103)
Signed-off-by: Asra Ali <asraa@google.com>
v1.1.0
|
2022-06-20 21:12:34 +00:00 |
|
|
asraaandGitHub
|
3a059ae446
|
fix: add verification without redis index (#97)
* add verification without redis index
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-06-20 15:05:20 -05:00 |
|
|
asraaandGitHub
|
fbada96c2c
|
chore: update sigstore components (#102)
* update sigstore components
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-06-20 12:01:58 -05:00 |
|
|
NaveenandGitHub
|
40e594d552
|
Upgrade to go 1.18 (#100)
The https://github.com/slsa-framework/slsa-github-generator is in go
1.18 and keeping it consistent.
Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
|
2022-06-20 11:32:59 -05:00 |
|
|
|
02bcbccec5
|
🌱 Bump actions/dependency-review-action from 1.0.2 to 2.0.2 (#96)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 1.0.2 to 2.0.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/a9c83d3af6b9031e20feba03b904645bb23d1dab...1c59cdf2a9c7f29c90e8da32237eb04b81bad9f0)
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-06-17 14:43:57 -05:00 |
|
|
laurentsimonandGitHub
|
73fd0b76d4
|
Update generator name (#94)
|
2022-06-14 08:34:33 +09:00 |
|
|
laurentsimonandGitHub
|
16af7c8185
|
🐛 Retrieve branch on release triggers (#89)
* updates
* unit test
* fixes
* updates
* typo
* unit test
|
2022-06-09 13:49:33 +00:00 |
|
|
asraaandGitHub
|
a717cc5512
|
feat: add an option to print provenance (#87)
* add an option to print provenance
Signed-off-by: Asra Ali <asraa@google.com>
fix
Signed-off-by: Asra Ali <asraa@google.com>
* print provenaace
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-06-08 13:35:59 -07:00 |
|
|
asraaandGitHub
|
2a0dd1c120
|
Update documentation for release v1.0.0 (#85)
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-06-07 15:53:22 -07:00 |
|
|
asraaandGitHub
|
c1b6db643d
|
fix: add v0.0.2 subfolder for builder testdata (#80)
* add subfolder for testdata
Signed-off-by: Asra Ali <asraa@google.com>
v1.0.0
|
2022-06-07 17:25:38 -05:00 |
|
|
laurentsimonandGitHub
|
380627ad54
|
Add installation option (#83)
|
2022-06-07 09:39:07 -07:00 |
|
|
asraaandGitHub
|
1d50070dc1
|
remove old refs to builders (#81)
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-06-07 08:42:22 -07:00 |
|
|
asraaandGitHub
|
0d8f412198
|
add tests for the e2e repository (#78)
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-06-06 16:05:59 -05:00 |
|
|
asraaandGitHub
|
c80938e298
|
fix prints to stdout and stderr and update README.md (#77)
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-06-02 16:07:21 -07:00 |
|
|
|
50e8539e35
|
print verified provenance on stdout (#76)
Signed-off-by: Asra Ali <asraa@google.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
|
2022-06-02 09:53:00 -07:00 |
|
|
laurentsimonandGitHub
|
21527372e3
|
📖 Release process for the verifier (#71)
* release for the verifier
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* comments
* updates
|
2022-06-02 01:20:24 +00:00 |
|
|
|
a72bb2573e
|
🌱 Bump actions/setup-go from 3.1.0 to 3.2.0 (#70)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/fcdc43634adb5f7ae75a9d7a9b9361790f7293e2...b22fbbc2921299758641fab08929b4ac52b32923)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-05-27 07:32:03 -07:00 |
|
|
asraaandGitHub
|
8596e23935
|
add e2e test malicious builder and cert expiry (#69)
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-05-26 21:46:24 +00:00 |
|
|
asraaandGitHub
|
a411040704
|
e2e: test signed provenance without rekor upload (#68)
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-05-26 14:12:06 -07:00 |
|
|
laurentsimonandGitHub
|
f9e31da2a5
|
✨ Allow main branch only for trusted builder and e2e tests repos (#63)
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* updates
* Fix unit tests
* unit tests
* updates
* updates
* updates
* updates
* updates
v0.0.1
|
2022-05-26 15:31:05 +00:00 |
|
|
|
87c99259e0
|
🌱 Bump actions/setup-go from 3.0.0 to 3.1.0 (#54)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/f6164bd8c8acb4a71fb2791a8b6c4024ff038dab...fcdc43634adb5f7ae75a9d7a9b9361790f7293e2)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
|
2022-05-26 15:16:27 +00:00 |
|
|
|
8f2dd288a6
|
🌱 Bump github.com/google/trillian from 1.4.0 to 1.4.1 (#52)
Bumps [github.com/google/trillian](https://github.com/google/trillian) from 1.4.0 to 1.4.1.
- [Release notes](https://github.com/google/trillian/releases)
- [Changelog](https://github.com/google/trillian/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/trillian/compare/v1.4.0...v1.4.1)
---
updated-dependencies:
- dependency-name: github.com/google/trillian
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-05-25 00:35:03 +00:00 |
|
|
|
ae2d059cef
|
🌱 Bump actions/dependency-review-action from 1.0.1 to 1.0.2 (#62)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/39e692fa323107ef86d8fdac0067ce647f239bd7...a9c83d3af6b9031e20feba03b904645bb23d1dab)
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-05-24 17:25:33 -07:00 |
|
|
|
5688cc79ad
|
🌱 Bump actions/dependency-review-action from 1.0.0 to 1.0.1 (#58)
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/3f943b86c9a289f4e632c632695e2e0898d9d67d...39e692fa323107ef86d8fdac0067ce647f239bd7)
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
|
2022-05-23 18:57:04 +00:00 |
|
|
laurentsimonandGitHub
|
e6f7527557
|
✨ Unit tests for prerelease and build semver (#60)
* tests for prerelease and build semver
* updates
|
2022-05-23 18:43:52 +00:00 |
|
|
laurentsimonandGitHub
|
e1494efa25
|
update (#59)
|
2022-05-19 00:14:11 +00:00 |
|
 Ian LewisandGitHub
|
8ad941a0f8
|
Add provenance only workflow (#53)
|
2022-05-16 08:23:48 +09:00 |
|
|
|
cecdad7373
|
🌱 Bump github.com/go-openapi/runtime from 0.24.0 to 0.24.1 (#50)
Bumps [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) from 0.24.0 to 0.24.1.
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](https://github.com/go-openapi/runtime/compare/v0.24.0...v0.24.1)
---
updated-dependencies:
- dependency-name: github.com/go-openapi/runtime
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-05-06 10:28:48 -05:00 |
|
|
laurentsimonandGitHub
|
74840d4cc7
|
updates (#48)
|
2022-05-06 08:44:46 -05:00 |
|
|
asraaandGitHub
|
dd34afdc3e
|
update verifier to check environment (#47)
Signed-off-by: Asra Ali <asraa@google.com>
|
2022-05-04 11:36:03 -05:00 |
|
|
|
6600fc3623
|
🌱 Bump github.com/go-openapi/runtime from 0.23.3 to 0.24.0 (#45)
Bumps [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) from 0.23.3 to 0.24.0.
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](https://github.com/go-openapi/runtime/compare/v0.23.3...v0.24.0)
---
updated-dependencies:
- dependency-name: github.com/go-openapi/runtime
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-04-29 14:20:34 -07:00 |
|
|
laurentsimonandGitHub
|
52a0bce84d
|
Update main.go (#44)
|
2022-04-29 09:28:49 +01:00 |
|
|
laurentsimonandGitHub
|
28964d3fd9
|
exit gracefully (#43)
|
2022-04-28 21:39:17 +01:00 |
|
|
|
f0ec07191c
|
🌱 Bump github.com/google/go-cmp from 0.5.7 to 0.5.8 (#41)
Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.7 to 0.5.8.
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](https://github.com/google/go-cmp/compare/v0.5.7...v0.5.8)
---
updated-dependencies:
- dependency-name: github.com/google/go-cmp
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
|
2022-04-28 00:55:33 +00:00 |
|
|
|
54a8196e78
|
🌱 Bump github/codeql-action from 1 to 2 (#39)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v1...v2)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2022-04-27 17:44:31 -07:00 |
|