github/slsa-verifier
1
0
Fork 0
mirror of https://github.com/slsa-framework/slsa-verifier.git synced 2026-05-06 16:46:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
184 Commits 40 Branches 45 Tags
1dfd8ba693f1720126df64997ba1a552fd40de03
Commit Graph

184 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
WhiteSource Renovate
1dfd8ba693 chore(deps): update github-actions (#342) 2022-10-31 18:13:42 +00:00
WhiteSource Renovate
12d81454a0 chore(deps): update dependency @types/node to v18.11.8 (#341) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-31 16:38:18 +00:00
WhiteSource Renovate
9a0c0ce3c4 chore(deps): update github-actions to v3 (#344) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-31 09:39:45 -05:00
WhiteSource Renovate
f0d1b30dca chore(deps): update dependency jasmine to v4.5.0 (#345) 2022-10-31 09:24:08 -05:00
WhiteSource Renovate
585539ab5f chore(deps): update dependency typescript to v4.8.4 (#270) 
Co-authored-by: Ian Lewis <ianlewis@google.com>
 2022-10-28 04:58:23 +00:00
Ian Lewis
c845407336 Update sigstore libraries (#326) 
* Update sigstore libraries

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* Update slsa-github-generator

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* go mod tidy

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>
Co-authored-by: asraa <asraa@google.com>
 2022-10-27 14:36:36 +00:00
laurentsimon
78187e501f feat: run CLI tests daily (#327) 
* update

* update

* update

* update

* update
 2022-10-27 05:46:10 -07:00
WhiteSource Renovate
429634c0e6 chore(deps): update dependency eslint to v8.26.0 (#323) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-25 14:55:53 +00:00
laurentsimon
e9e3ab2e33 Make GitHub token optional (#324) 
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-10-25 11:04:34 +00:00
kpk47
37cf8fd48d Fix installer: Add arguments to actions/checkout so that it checks ou… (#319) 
* Fix installer: Add arguments to actions/checkout so that it checks out slsa-framework/slsa-verifier instead of the repo using the Action.

Signed-off-by: kpk47 <kkris@google.com>

* Switch to JS action

* rebuild TS

Signed-off-by: kpk47 <kkris@google.com>
 2022-10-25 10:42:00 +00:00
Wietse Venema
27597feff8 Add optional (#316) 
* Update README.md

Add missing [optional] indicators to the "verify-artifact" --help example.

Signed-off-by: Wietse Venema <72045954+wietse-gmail@users.noreply.github.com>

* Add missing [optional] indicators to the verify-artifact help message

Signed-off-by: Wietse Venema <72045954+wietse-gmail@users.noreply.github.com>

Signed-off-by: Wietse Venema <72045954+wietse-gmail@users.noreply.github.com>
 2022-10-23 23:33:39 +00:00
asraa
e9cd6b763c fix: address gcb verifier comments and add gcb documentation (#300) 
* address gcb verifier comments

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-21 21:06:22 +00:00
asraa
efc53fc78e docs: update release.md docs to describe a pre-release (#314) 
* update docs

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-21 15:37:12 -05:00
asraa
c151f47368 add v1.2.1 builder tests (#310) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-20 01:45:22 -07:00
asraa
6766be33a8 tests: fix builder id matching (#308) 
* fix builder id matching

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-18 16:02:08 -05:00
WhiteSource Renovate
4ec69efd87 chore(deps): update dependency eslint to v8.25.0 (#273) 2022-10-17 13:25:37 -05:00
asraa
05d247fb14 rekor: use rekor client with retries (#301) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-17 16:55:40 +00:00
WhiteSource Renovate
beada4bd09 fix(deps): update module github.com/go-openapi/runtime to v0.24.2 (#304) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-17 16:33:55 +00:00
WhiteSource Renovate
94b6087e2b chore(deps): update dependency eslint-plugin-github to v4.4.0 (#305) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-17 11:26:05 -05:00
WhiteSource Renovate
4a8f4bd0d9 chore(deps): update gcr.io/distroless/base:nonroot docker digest to a6441d1 (#306) 2022-10-17 10:53:38 -05:00
WhiteSource Renovate
3ab86db547 chore(deps): update gcr.io/distroless/base:nonroot docker digest to 3778d4f (#293) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-12 14:45:11 +00:00
WhiteSource Renovate
4f09605a47 fix(deps): update module github.com/sigstore/sigstore to v1.4.4 (#294) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-12 14:26:35 +00:00
WhiteSource Renovate
b7b67c6740 chore(deps): update github-actions (#295) 2022-10-12 09:15:59 -05:00
asraa
e6428d7da5 fix: env vars are case sensitive in configuration (#298) 
Signed-off-by: Asra Ali <asraa@google.com>
v1.4.1 		2022-10-08 15:11:48 -04:00
asraa
936dc46aca ci: fix path to config (#297) 
Signed-off-by: Asra Ali <asraa@google.com>

use k8s versioning to show commit and tree state

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
v1.4.0 		2022-10-08 18:31:10 +00:00
asraa
93f88b9937 update version information for release (#296) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-08 17:23:03 +00:00
asraa
a6e069c0ab gcb: add gcb compatibility (#292) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-07 14:21:50 -07:00
WhiteSource Renovate
300cb9003d chore(deps): update dependency jasmine to v4.4.0 (#283) 2022-10-05 15:44:34 -05:00
WhiteSource Renovate
fc50b662fc chore(deps): pin dependencies (#269) 
Co-authored-by: Ian Lewis <ianlewis@google.com>
 2022-10-04 01:00:02 +00:00
asraa
168f9c3568 release: add release hash for v1.1.2 and v1.0.4 (#291) 
* release: add hash for v1.1.2

Signed-off-by: Asra Ali <asraa@google.com>

* add releaes v1.0

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-04 09:41:40 +09:00
asraa
e269a00945 release: add release v1.3.1 and v1.2.1 (#288) 
* release: add release v1.3.1 and v1.2.1

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-03 10:27:24 -05:00
Ian Lewis
951ae240b2 Update pre-submits (#289) 
Signed-off-by: Ian Lewis <ianlewis@google.com>

Signed-off-by: Ian Lewis <ianlewis@google.com>
 2022-10-03 09:58:15 -05:00
WhiteSource Renovate
35fd91f381 chore(deps): update github-actions (#284) 2022-10-03 09:46:34 +09:00
asraa
0ad6136f60 fix: make client shard aware when verifying (#282) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-09-30 16:08:33 -05:00
laurentsimon
a2f6c3b8f9 Update README.md (#276) 
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-09-27 14:52:58 -05:00
WhiteSource Renovate
7bb343116e fix(deps): update module github.com/sigstore/sigstore to v1.4.2 (#272) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-26 11:35:50 +00:00
WhiteSource Renovate
3ee3cca59d chore(deps): update github-actions (#274) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-26 11:22:46 +00:00
laurentsimon
ad0648c097 doc: add links to GH builders (#268) 
* Update README.md

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update README.md

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-09-26 06:12:31 -05:00
laurentsimon
b5da86b168 doc: document build id and GCB vs GHA (#266) 
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* comments

* update
 2022-09-23 19:04:51 +00:00
WhiteSource Renovate
5f98831104 fix(deps): update module github.com/sigstore/sigstore to v1.4.1 (#263) 2022-09-23 14:04:06 +00:00
kpk47
b9c3c9d87e Add a GitHub Action for installing slsa-verifier. (#246) 2022-09-22 18:58:40 +00:00
WhiteSource Renovate
aa75f1b7bb chore(deps): update github/codeql-action action to v2.1.24 (#262) 2022-09-21 16:48:34 +00:00
WhiteSource Renovate
eec5dd4c26 chore(deps): update gcr.io/distroless/base:nonroot docker digest to 33fac4d (#260) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-19 20:43:51 +00:00
WhiteSource Renovate
78a225d3bd fix(deps): update module github.com/sigstore/cosign to v1.12.0 (#264) 2022-09-19 16:33:55 -04:00
laurentsimon
533d347a4b feat: support builderID matching with or without semver for GHA (#257) 
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
 2022-09-15 14:32:03 -07:00
WhiteSource Renovate
cddba700c8 fix(deps): update module github.com/google/go-cmp to v0.5.9 (#253) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-14 17:47:23 +00:00
WhiteSource Renovate
aa6f6a56ea chore(deps): update ossf/scorecard-action action to v2 (#255) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-13 14:52:53 +00:00
WhiteSource Renovate
11203e8546 chore(deps): update golang docker tag to v1.19 (#196) 2022-09-13 09:44:44 -05:00
laurentsimon
b58e752378 feat: support builderID matching with or without semver for GCB (#256) 
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
 2022-09-12 17:17:46 -07:00
laurentsimon
d12dce9526 feat: CLI tests for GCB verification (#251) 
* update

* update

* update
 2022-09-08 13:36:56 -07:00