Commit Graph

140 Commits

Author SHA1 Message Date
laurentsimon
533d347a4b feat: support builderID matching with or without semver for GHA (#257)
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
2022-09-15 14:32:03 -07:00
WhiteSource Renovate
cddba700c8 fix(deps): update module github.com/google/go-cmp to v0.5.9 (#253)
Co-authored-by: asraa <asraa@google.com>
2022-09-14 17:47:23 +00:00
WhiteSource Renovate
aa6f6a56ea chore(deps): update ossf/scorecard-action action to v2 (#255)
Co-authored-by: asraa <asraa@google.com>
2022-09-13 14:52:53 +00:00
WhiteSource Renovate
11203e8546 chore(deps): update golang docker tag to v1.19 (#196) 2022-09-13 09:44:44 -05:00
laurentsimon
b58e752378 feat: support builderID matching with or without semver for GCB (#256)
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
2022-09-12 17:17:46 -07:00
laurentsimon
d12dce9526 feat: CLI tests for GCB verification (#251)
* update

* update

* update
2022-09-08 13:36:56 -07:00
asraa
26155fe9a3 fix: fix CLI flag mishap (#250)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-09-07 08:27:28 -07:00
laurentsimon
e0edc0c46f feat: support for GCB v0.3 verification (#248)
* update

* update

* update

* update
2022-09-06 23:54:59 +00:00
asraa
ff0ced42ef refactor: add subcommands and separate functionality from artifacts a… (#231)
* refactor: add subcommands and separate functionality from artifacts and images

Signed-off-by: Asra Ali <asraa@google.com>
2022-09-06 17:10:58 -05:00
WhiteSource Renovate
0211941480 chore(deps): update golang:1.18 docker digest to 5540a6a (#238)
Co-authored-by: asraa <asraa@google.com>
2022-09-06 14:09:42 +00:00
WhiteSource Renovate
a040702c4e chore(deps): update github/codeql-action action to v2.1.22 (#249) 2022-09-06 08:40:16 -05:00
laurentsimon
d5b56c334e feat: add CLI tests for GCB verification (#245)
* update

* update

* update

* update
2022-09-02 20:42:40 +00:00
WhiteSource Renovate
2adefa0e01 chore(deps): update github-actions (#240)
Co-authored-by: asraa <asraa@google.com>
2022-09-02 16:01:16 +00:00
WhiteSource Renovate
0ff60a240a fix(deps): update module github.com/sigstore/cosign to v1.11.1 (#239)
Co-authored-by: asraa <asraa@google.com>
2022-09-01 15:31:07 +00:00
laurentsimon
0c543fcce0 update (#244) 2022-09-01 01:00:56 +00:00
laurentsimon
26c928f5b7 Verify text provenance for GCB (#242)
* update

* update

* update

* update

* update

* comments

* comments
2022-08-30 23:08:46 +00:00
asraa
71cf0397cd release: add v1.0.3 (#235)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-08-29 09:48:21 -07:00
laurentsimon
362e8c1077 Update README.md (#241)
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-08-29 13:54:48 +09:00
laurentsimon
3b5c68f561 feat: Support for GCB verification (#202)
* add testing folder

Signed-off-by: Asra Ali <asraa@google.com>

* add tests

Signed-off-by: Asra Ali <asraa@google.com>

* update

* updated comments

Signed-off-by: Asra Ali <asraa@google.com>

* update

* update

* update

* update

* update

* update

* update

* draft

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

Signed-off-by: Asra Ali <asraa@google.com>
Co-authored-by: Asra Ali <asraa@google.com>
2022-08-24 10:17:14 -07:00
WhiteSource Renovate
77f8bc623b chore(deps): update gcr.io/distroless/base:nonroot docker digest to 533c15e (#228)
Co-authored-by: asraa <asraa@google.com>
2022-08-23 20:18:17 +00:00
WhiteSource Renovate
3fc1dbde46 fix(deps): update module github.com/sigstore/rekor to v0.11.0 (#225) 2022-08-23 09:38:20 -05:00
WhiteSource Renovate
ab0daccd34 fix(deps): update module github.com/sigstore/cosign to v1.11.0 (#224)
Co-authored-by: asraa <asraa@google.com>
2022-08-23 14:13:21 +00:00
WhiteSource Renovate
106f50c7ee chore(deps): update actions/checkout action to v3 (#227) 2022-08-23 09:03:56 -05:00
WhiteSource Renovate
ab70a51d20 chore(deps): update github-actions (#222) 2022-08-22 14:47:52 -07:00
WhiteSource Renovate
90406fa7ca chore(deps): update golang:1.18 docker digest to 616aa98 (#214)
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-08-19 19:04:44 +00:00
WhiteSource Renovate
459608e7d8 fix(deps): update module github.com/go-openapi/swag to v0.22.3 (#215) 2022-08-19 11:55:11 -07:00
asraa
7b4b9cde06 feat: support oci image verification (#147)
* feat: support oci image verification

Signed-off-by: Asra Ali <asraa@google.com>

* add testing folder

Signed-off-by: Asra Ali <asraa@google.com>

* update name and make fix

Signed-off-by: Asra Ali <asraa@google.com>

* add tests

Signed-off-by: Asra Ali <asraa@google.com>

* Add initial testing

Signed-off-by: Asra Ali <asraa@google.com>

* updated comments

Signed-off-by: Asra Ali <asraa@google.com>

* update

Signed-off-by: Asra Ali <asraa@google.com>

* fix digest calculation

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-08-17 15:59:01 -05:00
asraa
ccb0786c88 release: release v1.3.0 of verifier (#218)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-08-15 13:50:24 -07:00
laurentsimon
5bb13ef508 feat: add a -workflow-input option (#216)
* update
v1.3.0
2022-08-15 19:38:15 +00:00
asraa
fc6a8e0499 fix invalid dir (#217)
Signed-off-by: Asra Ali <asraa@google.com>
2022-08-15 19:17:46 +00:00
asraa
5c43d4062f ci: add release workflow test at presubmit (#212)
* ci: add release workflow test 

Signed-off-by: Asra Ali <asraa@google.com>
2022-08-15 10:13:26 -05:00
asraa
108f52bac5 ci: fix path to binary for release (#210)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-08-12 10:46:21 -07:00
asraa
0de1860f7f fix: use experimental flag value 1 (#209)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-08-12 09:32:01 -07:00
laurentsimon
6790a1b311 feat: make builder-id flag experimental until fully tested (#207)
* update

* update
2022-08-11 19:46:04 +00:00
Carlos Tadeu Panato Junior
d6c68a496f update link to download the binary to use the latest release (v1.2.0) (#204)
Signed-off-by: cpanato <ctadeu@gmail.com>
2022-08-10 13:42:34 +00:00
laurentsimon
4ca6320994 feat: make branch optional (#192)
* update

* update

* update

* update

* Update verifiers/internal/gha/provenance.go

Co-authored-by: Ian Lewis <ianlewis@google.com>

* update

* update

* update

* update

* update

* update

* update

* update

Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-08-09 22:49:36 +00:00
WhiteSource Renovate
a7d3c61f21 fix(deps): update module github.com/sigstore/cosign to v1.10.1 (#198)
Co-authored-by: asraa <asraa@google.com>
2022-08-08 19:18:50 +00:00
WhiteSource Renovate
691fbbe75b chore(deps): update github/codeql-action action to v2.1.18 (#195)
Co-authored-by: asraa <asraa@google.com>
2022-08-08 16:51:08 +00:00
laurentsimon
edb1ffd807 Never panic, always return error (#199)
* Update main.go

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update main.go

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-08-08 03:30:09 +00:00
laurentsimon
edb792b342 feat: Create interface for verifiers (#187)
* update

* update

* unit tests

* update

* comments

* update

* update

* update

* update

* Use interface for builders

* update

* update

* update

* update

* fix

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
2022-08-05 14:31:34 -07:00
laurentsimon
0cf9e9ce8f Update README.md (#185)
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-08-03 20:53:41 -07:00
laurentsimon
caaf1c1b8e feat: Create a verifier as a service (#182)
* update

* update

* update

* tests

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* comments

* update

* update

* update

* update

* update
2022-08-03 14:29:25 -07:00
WhiteSource Renovate
8dab07b39b chore(deps): update github/codeql-action action to v2 (#168) 2022-08-03 13:11:28 -05:00
WhiteSource Renovate
cdbab2bf0a fix(deps): update module github.com/google/trillian to v1.4.2 (#176)
Co-authored-by: asraa <asraa@google.com>
2022-08-03 09:27:02 -05:00
WhiteSource Renovate
ab278de311 chore(deps): update github-actions (#175)
Co-authored-by: asraa <asraa@google.com>
2022-08-02 19:28:36 +00:00
WhiteSource Renovate
b911c68206 fix(deps): update module github.com/sigstore/sigstore to v1.3.1 (#177) 2022-08-02 14:19:30 -05:00
WhiteSource Renovate
13f7935ecf fix(deps): update module github.com/sigstore/rekor to v0.10.0 (#178) 2022-08-01 14:06:06 -05:00
Ceridwen Driskill
e2aca61b35 Releases url fix (#172)
Signed-off-by: Ceridwen Driskill <cdriskill@google.com>
2022-07-26 23:19:20 +00:00
WhiteSource Renovate
6dc5a273c7 chore(deps): update github-actions (#165) 2022-07-25 20:31:40 +00:00
laurentsimon
05def419b2 update (#170) 2022-07-25 20:14:00 +00:00