github/slsa-verifier
1
0
Fork 0
mirror of https://github.com/slsa-framework/slsa-verifier.git synced 2026-05-06 16:46:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
298 Commits 40 Branches 45 Tags
62c0dfdde996b84c42e8c4ea5cf0db07b0cdaa9f
Commit Graph

86 Commits

Author SHA1 Message Date
Mend Renovate
9c3152fe9f chore(deps): update github-actions (#544) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
 2023-04-11 02:09:29 +00:00
Ian Lewis
f96d91bdd2 fix: Support pre-releases on trusted repos (#552) 
Support pre-releases on trusted repos

---------

Signed-off-by: Ian Lewis <ianlewis@google.com>
 2023-04-11 08:54:33 +09:00
asraa
b01cb9d69c chore: report scheduled release workflow failures (#543) 
* chore: report scheduled release workflow failures

Signed-off-by: Asra Ali <asraa@google.com>

* fix: fix yamllint

Signed-off-by: Asra Ali <asraa@google.com>

* empty commit

Signed-off-by: Asra Ali <asraa@google.com>

---------

Signed-off-by: Asra Ali <asraa@google.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2023-03-24 23:40:49 +00:00
Mend Renovate
ed7976a0d4 chore(deps): update github-actions (#529) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2023-03-24 14:36:38 +00:00
Mend Renovate
c4400c7475 chore(deps): update github-actions (major) (#536) 
chore(deps): update github-actions

Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2023-03-24 08:33:31 -05:00
Batuhan Apaydın
5c377787ec feat: verification for provenance (#537) 
* verification for provenance

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>

* Fix linter warnings

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

---------

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2023-03-21 19:11:35 -07:00
Ian Lewis
a1be080731 fix: Update references check (#533) 
Fix references check

Signed-off-by: Ian Lewis <ianlewis@google.com>
 2023-03-17 09:54:07 -05:00
laurentsimon
20b06426ff docs: update installation to cover the Action and to receive updates (#523) 
docs: update installation to cover the Action and to receive updates (#523)

Signed-off-by: laurentsimon <laurentsimon@google.com>
 2023-03-10 15:46:04 -06:00
Mend Renovate
9f57e6add9 chore(deps): update github-actions (#502) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
 2023-03-06 00:48:50 +00:00
laurentsimon
82a12591ff feat: npm default runner support (#495) 
* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

---------

Signed-off-by: laurentsimon <laurentsimon@google.com>
 2023-03-02 21:53:29 +00:00
Mend Renovate
13b4c3e75b chore(deps): update github/codeql-action action to v2.2.4 (#480) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2023-02-13 14:36:07 +00:00
Mend Renovate
9578b3838e chore(deps): update github-actions (#460) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2023-01-30 05:33:14 -08:00
Pedro Nacht
5deacad765 ci: Ensure all version references are up-to-date prior to release (#447) 
* Create references.sh

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>

* WIP: check docs in pre-submits

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>

* Clean up

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>

* Fix based on comments

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>

* Add instructions to RELEASE.md

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>

* Check references match version in PR body

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>

---------

Signed-off-by: Pedro Kaj Kjellerup Nacht <pnacht@google.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2023-01-27 23:12:37 +00:00
Mend Renovate
5eea7c5537 chore(deps): update github/codeql-action action to v2.1.39 (#452) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: asraa <asraa@google.com>
 2023-01-25 15:59:45 +00:00
Mend Renovate
71e72f0a1f chore(deps): update github/codeql-action action to v2.1.38 (#444) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2023-01-16 10:37:41 +09:00
Ian Lewis
1da39d7e06 ci: Add javascript to CodeQL analysis (#413) 
Signed-off-by: Ian Lewis <ianlewis@google.com>

Signed-off-by: Ian Lewis <ianlewis@google.com>
 2023-01-11 10:21:11 -06:00
Mend Renovate
b06fbf5b04 chore(deps): update github-actions (#436) 
* chore(deps): update github-actions

Signed-off-by: Renovate Bot <bot@renovateapp.com>

* Use tag for actions/upload-artifact

Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: asraa <asraa@google.com>
 2023-01-09 15:28:47 +00:00
Shunsuke Suzuki
325f12aabf chore: release assets for multiple platforms (#434) 
* chore: release assets for multiple platforms

Signed-off-by: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com>

* ci: release assets for windows and macOS

Signed-off-by: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com>

* ci: add configuration files for macOS and windows

Signed-off-by: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com>

* ci: remove a workflow job `if-failed`

This job is unneeded anymore.

https://github.com/slsa-framework/slsa-verifier/pull/434#discussion_r1063427948

Signed-off-by: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com>

* ci: move configuration files to a directory `.slsa-goreleaser`

Signed-off-by: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com>

Signed-off-by: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2023-01-07 00:56:30 +00:00
Shunsuke Suzuki
a4d4074bf6 ci: fix a deprecation warning (#435) 
> args
> The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

Signed-off-by: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com>

Signed-off-by: Shunsuke Suzuki <suzuki.shunsuke.1989@gmail.com>
 2023-01-06 08:14:29 -06:00
Ian Lewis
452dcfac5f ci: Add large file pre-submit check (#433) 
Signed-off-by: Ian Lewis <ianlewis@google.com>
 2023-01-06 09:29:13 +09:00
asraa
bad943298a ci: add verifier e2e presubmit that runs CLI at main (#430) 
* ci: add verifier e2e presubmit that runs CLI at main

Signed-off-by: Asra Ali <asraa@google.com>
Signed-off-by: Asra Ali <asraa@google.com>
 2023-01-05 16:02:54 +00:00
Mend Renovate
652ec10cf9 chore(deps): update ossf/scorecard-action action to v2.1.2 (#417) 
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: asraa <asraa@google.com>
 2023-01-03 20:16:07 +00:00
Mend Renovate
5fd4ee25c1 chore(deps): update github-actions (#414) 
Co-authored-by: Ian Lewis <ianlewis@google.com>
 2022-12-17 07:11:23 +00:00
Mend Renovate
b40d88c1e7 chore(deps): update github-actions (#384) 
Co-authored-by: Ian Lewis <ianlewis@google.com>
 2022-12-15 01:59:36 +00:00
Ian Lewis
f439833d5e Add regression build tag (#400) 
Signed-off-by: Ian Lewis <ianlewis@google.com>
 2022-12-15 01:25:04 +00:00
Ian Lewis
1dffc4b135 Use github.token to create issues (#412) 
Signed-off-by: Ian Lewis <ianlewis@google.com>

Signed-off-by: Ian Lewis <ianlewis@google.com>
 2022-12-14 17:09:42 -08:00
laurentsimon
f0aec773a6 update (#410) 
Signed-off-by: laurentsimon <laurentsimon@google.com>

Signed-off-by: laurentsimon <laurentsimon@google.com>
 2022-12-14 14:34:54 -08:00
laurentsimon
41d551cd45 update (#408) 
Signed-off-by: laurentsimon <laurentsimon@google.com>

Signed-off-by: laurentsimon <laurentsimon@google.com>
 2022-12-14 18:42:59 +00:00
laurentsimon
552cfc411d fix: token permission in Installer scheduled tests (#407) 
* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

Signed-off-by: laurentsimon <laurentsimon@google.com>
 2022-12-14 10:02:28 -08:00
laurentsimon
b4257ed6bf Update schedule.installer.yml (#404) 
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
 2022-12-14 11:49:20 +09:00
laurentsimon
53b3aebdb9 feat: scheduled tests for installer Action (#398) 
* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

Signed-off-by: laurentsimon <laurentsimon@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
 2022-12-14 01:37:23 +00:00
laurentsimon
477ac0d88e fix: show version in version command (#392) 
* update

Signed-off-by: laurentsimon <laurentsimon@google.com>
 2022-12-06 20:13:35 +00:00
asraa
128324f488 ci: add pr workflow to check pr title format (#372) 
* ci: add pr workflow to check pr title format

Signed-off-by: Asra Ali <asraa@google.com>
 2022-11-30 21:35:33 +00:00
Mend Renovate
7bebbb9e1f chore(deps): update actions/dependency-review-action action to v3 (#358) 
Co-authored-by: asraa <asraa@google.com>
 2022-11-29 15:15:51 +00:00
Mend Renovate
0ef57a2b08 chore(deps): update github-actions (#359) 
* chore(deps): update github-actions

* Update release.yml

Co-authored-by: asraa <asraa@google.com>
 2022-11-28 18:02:24 +00:00
Ian Lewis
28b554f525 Add golangci-lint and yamllint (#365) 
* Add Makefile and yamllint config

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* Add golangci-lint config

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* Add golangci-lint config

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* add linters to pre-submit

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* add issue link to todos

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* Fix whitespace issue

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>
 2022-11-28 10:19:59 +09:00
Mend Renovate
6cd5d4ac68 chore(deps): update github-actions (#351) 
Co-authored-by: Ian Lewis <ianlewis@google.com>
 2022-11-14 22:55:08 +00:00
asraa
ef0f1a7a24 refactor: consolidate verification funcs for GHA (#348) 
* consolidate verification funcs

Signed-off-by: Asra Ali <asraa@google.com>
 2022-11-02 15:32:39 -05:00
WhiteSource Renovate
1dfd8ba693 chore(deps): update github-actions (#342) 2022-10-31 18:13:42 +00:00
WhiteSource Renovate
9a0c0ce3c4 chore(deps): update github-actions to v3 (#344) 
Co-authored-by: asraa <asraa@google.com>
 2022-10-31 09:39:45 -05:00
laurentsimon
78187e501f feat: run CLI tests daily (#327) 
* update

* update

* update

* update

* update
 2022-10-27 05:46:10 -07:00
WhiteSource Renovate
b7b67c6740 chore(deps): update github-actions (#295) 2022-10-12 09:15:59 -05:00
asraa
93f88b9937 update version information for release (#296) 
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
 2022-10-08 17:23:03 +00:00
Ian Lewis
951ae240b2 Update pre-submits (#289) 
Signed-off-by: Ian Lewis <ianlewis@google.com>

Signed-off-by: Ian Lewis <ianlewis@google.com>
 2022-10-03 09:58:15 -05:00
WhiteSource Renovate
35fd91f381 chore(deps): update github-actions (#284) 2022-10-03 09:46:34 +09:00
WhiteSource Renovate
3ee3cca59d chore(deps): update github-actions (#274) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-26 11:22:46 +00:00
kpk47
b9c3c9d87e Add a GitHub Action for installing slsa-verifier. (#246) 2022-09-22 18:58:40 +00:00
WhiteSource Renovate
aa75f1b7bb chore(deps): update github/codeql-action action to v2.1.24 (#262) 2022-09-21 16:48:34 +00:00
WhiteSource Renovate
aa6f6a56ea chore(deps): update ossf/scorecard-action action to v2 (#255) 
Co-authored-by: asraa <asraa@google.com>
 2022-09-13 14:52:53 +00:00
asraa
ff0ced42ef refactor: add subcommands and separate functionality from artifacts a… (#231) 
* refactor: add subcommands and separate functionality from artifacts and images

Signed-off-by: Asra Ali <asraa@google.com>
 2022-09-06 17:10:58 -05:00