github/slsa-verifier
1
0
Fork 0
mirror of https://github.com/slsa-framework/slsa-verifier.git synced 2026-05-06 08:37:00 +00:00
Code Issues Packages Projects Releases Wiki Activity
128 Commits 40 Branches 45 Tags
2adefa0e01049e02e4c44b0924eaf6f4ffa2d84a
Commit Graph

128 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
WhiteSource Renovate
2adefa0e01 chore(deps): update github-actions (#240) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-02 16:01:16 +00:00
WhiteSource Renovate
0ff60a240a fix(deps): update module github.com/sigstore/cosign to v1.11.1 (#239) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-01 15:31:07 +00:00
laurentsimon
0c543fcce0 update (#244) 2022-09-01 01:00:56 +00:00
laurentsimon
26c928f5b7 Verify text provenance for GCB (#242) 
* update

* update

* update

* update

* update

* comments

* comments
 2022-08-30 23:08:46 +00:00
asraa
71cf0397cd release: add v1.0.3 (#235) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-08-29 09:48:21 -07:00
laurentsimon
362e8c1077 Update README.md (#241) 
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-08-29 13:54:48 +09:00
laurentsimon
3b5c68f561 feat: Support for GCB verification (#202) 
* add testing folder

Signed-off-by: Asra Ali <asraa@google.com>

* add tests

Signed-off-by: Asra Ali <asraa@google.com>

* update

* updated comments

Signed-off-by: Asra Ali <asraa@google.com>

* update

* update

* update

* update

* update

* update

* update

* draft

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

Signed-off-by: Asra Ali <asraa@google.com>
Co-authored-by: Asra Ali <asraa@google.com>
 2022-08-24 10:17:14 -07:00
WhiteSource Renovate
77f8bc623b chore(deps): update gcr.io/distroless/base:nonroot docker digest to 533c15e (#228) 
Co-authored-by: asraa <asraa@google.com>
 2022-08-23 20:18:17 +00:00
WhiteSource Renovate
3fc1dbde46 fix(deps): update module github.com/sigstore/rekor to v0.11.0 (#225) 2022-08-23 09:38:20 -05:00
WhiteSource Renovate
ab0daccd34 fix(deps): update module github.com/sigstore/cosign to v1.11.0 (#224) 
Co-authored-by: asraa <asraa@google.com>
 2022-08-23 14:13:21 +00:00
WhiteSource Renovate
106f50c7ee chore(deps): update actions/checkout action to v3 (#227) 2022-08-23 09:03:56 -05:00
WhiteSource Renovate
ab70a51d20 chore(deps): update github-actions (#222) 2022-08-22 14:47:52 -07:00
WhiteSource Renovate
90406fa7ca chore(deps): update golang:1.18 docker digest to 616aa98 (#214) 
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-08-19 19:04:44 +00:00
WhiteSource Renovate
459608e7d8 fix(deps): update module github.com/go-openapi/swag to v0.22.3 (#215) 2022-08-19 11:55:11 -07:00
asraa
7b4b9cde06 feat: support oci image verification (#147) 
* feat: support oci image verification

Signed-off-by: Asra Ali <asraa@google.com>

* add testing folder

Signed-off-by: Asra Ali <asraa@google.com>

* update name and make fix

Signed-off-by: Asra Ali <asraa@google.com>

* add tests

Signed-off-by: Asra Ali <asraa@google.com>

* Add initial testing

Signed-off-by: Asra Ali <asraa@google.com>

* updated comments

Signed-off-by: Asra Ali <asraa@google.com>

* update

Signed-off-by: Asra Ali <asraa@google.com>

* fix digest calculation

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-08-17 15:59:01 -05:00
asraa
ccb0786c88 release: release v1.3.0 of verifier (#218) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-08-15 13:50:24 -07:00
laurentsimon
5bb13ef508 feat: add a -workflow-input option (#216) 
* update
v1.3.0 		2022-08-15 19:38:15 +00:00
asraa
fc6a8e0499 fix invalid dir (#217) 
Signed-off-by: Asra Ali <asraa@google.com>
 2022-08-15 19:17:46 +00:00
asraa
5c43d4062f ci: add release workflow test at presubmit (#212) 
* ci: add release workflow test 

Signed-off-by: Asra Ali <asraa@google.com>
 2022-08-15 10:13:26 -05:00
asraa
108f52bac5 ci: fix path to binary for release (#210) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-08-12 10:46:21 -07:00
asraa
0de1860f7f fix: use experimental flag value 1 (#209) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-08-12 09:32:01 -07:00
laurentsimon
6790a1b311 feat: make builder-id flag experimental until fully tested (#207) 
* update

* update
 2022-08-11 19:46:04 +00:00
Carlos Tadeu Panato Junior
d6c68a496f update link to download the binary to use the latest release (v1.2.0) (#204) 
Signed-off-by: cpanato <ctadeu@gmail.com>
 2022-08-10 13:42:34 +00:00
laurentsimon
4ca6320994 feat: make branch optional (#192) 
* update

* update

* update

* update

* Update verifiers/internal/gha/provenance.go

Co-authored-by: Ian Lewis <ianlewis@google.com>

* update

* update

* update

* update

* update

* update

* update

* update

Co-authored-by: Ian Lewis <ianlewis@google.com>
 2022-08-09 22:49:36 +00:00
WhiteSource Renovate
a7d3c61f21 fix(deps): update module github.com/sigstore/cosign to v1.10.1 (#198) 
Co-authored-by: asraa <asraa@google.com>
 2022-08-08 19:18:50 +00:00
WhiteSource Renovate
691fbbe75b chore(deps): update github/codeql-action action to v2.1.18 (#195) 
Co-authored-by: asraa <asraa@google.com>
 2022-08-08 16:51:08 +00:00
laurentsimon
edb1ffd807 Never panic, always return error (#199) 
* Update main.go

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update main.go

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-08-08 03:30:09 +00:00
laurentsimon
edb792b342 feat: Create interface for verifiers (#187) 
* update

* update

* unit tests

* update

* comments

* update

* update

* update

* update

* Use interface for builders

* update

* update

* update

* update

* fix

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
 2022-08-05 14:31:34 -07:00
laurentsimon
0cf9e9ce8f Update README.md (#185) 
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-08-03 20:53:41 -07:00
laurentsimon
caaf1c1b8e feat: Create a verifier as a service (#182) 
* update

* update

* update

* tests

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* comments

* update

* update

* update

* update

* update
 2022-08-03 14:29:25 -07:00
WhiteSource Renovate
8dab07b39b chore(deps): update github/codeql-action action to v2 (#168) 2022-08-03 13:11:28 -05:00
WhiteSource Renovate
cdbab2bf0a fix(deps): update module github.com/google/trillian to v1.4.2 (#176) 
Co-authored-by: asraa <asraa@google.com>
 2022-08-03 09:27:02 -05:00
WhiteSource Renovate
ab278de311 chore(deps): update github-actions (#175) 
Co-authored-by: asraa <asraa@google.com>
 2022-08-02 19:28:36 +00:00
WhiteSource Renovate
b911c68206 fix(deps): update module github.com/sigstore/sigstore to v1.3.1 (#177) 2022-08-02 14:19:30 -05:00
WhiteSource Renovate
13f7935ecf fix(deps): update module github.com/sigstore/rekor to v0.10.0 (#178) 2022-08-01 14:06:06 -05:00
Ceridwen Driskill
e2aca61b35 Releases url fix (#172) 
Signed-off-by: Ceridwen Driskill <cdriskill@google.com>
 2022-07-26 23:19:20 +00:00
WhiteSource Renovate
6dc5a273c7 chore(deps): update github-actions (#165) 2022-07-25 20:31:40 +00:00
laurentsimon
05def419b2 update (#170) 2022-07-25 20:14:00 +00:00
asraa
ad90b50548 release: add notes for release v1.2.0 (#171) 
Signed-off-by: Asra Ali <asraa@google.com>
 2022-07-25 11:49:49 -07:00
WhiteSource Renovate
fb9aeaf638 fix(deps): update module github.com/sigstore/cosign to v1.10.0 (#166) 
Co-authored-by: asraa <asraa@google.com>
v1.2.0 		2022-07-25 13:05:03 -05:00
asraa
952915ae4a test: add testing for generic builder multi subject (#162) 
* test: add testing for generic builder multi subject

Signed-off-by: Asra Ali <asraa@google.com>

* update comments

Signed-off-by: Asra Ali <asraa@google.com>
 2022-07-25 15:50:12 +00:00
WhiteSource Renovate
e154b5534a fix(deps): update module github.com/slsa-framework/slsa-github-generator to v1.2.0 (#167) 2022-07-25 10:12:15 -05:00
asraa
8c4373c533 fix: remove signing certificate output (#160) 
* remove signing certificate output

Signed-off-by: Asra Ali <asraa@google.com>
 2022-07-22 10:33:48 -05:00
asraa
562cb8410d debug: add error messages for debugging with rekor (#159) 
* add error messages for debugging with rekor

Signed-off-by: Asra Ali <asraa@google.com>
 2022-07-21 11:50:05 -05:00
asraa
7d53893561 add v1.2.0 generic and go tests (#154) 
Signed-off-by: Asra Ali <asraa@google.com>
 2022-07-19 15:31:15 -07:00
laurentsimon
6a2f070bf8 feat: Group GHA removatebot updates (#153) 
* update

* update
 2022-07-18 16:32:46 +00:00
WhiteSource Renovate
058cb80ec1 chore(deps): update ossf/scorecard-action digest to ccd0038 (#151) 
Co-authored-by: asraa <asraa@google.com>
 2022-07-18 13:16:08 +00:00
WhiteSource Renovate
390d18a96c fix(deps): update module github.com/go-openapi/strfmt to v0.21.3 (#152) 2022-07-18 08:05:26 -05:00
asraa
66533faf78 refactor: refactor packages and create verification options (#129) 
Signed-off-by: Asra Ali <asraa@google.com>
 2022-07-13 16:52:43 +00:00
Naveen
3b17f9c76f Refactor - deprecated libraries (#128) 
- Refactored to move away from github.com/google/trillian/merkle/logverifier"
and github.com/google/trillian/merkle/rfc6962

- Included go mod tidy for validation

- Fixes #https://github.com/slsa-framework/slsa-verifier/issues/61

Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>

Co-authored-by: asraa <asraa@google.com>
 2022-07-12 18:57:42 +00:00