Commit Graph

166 Commits

Author SHA1 Message Date
WhiteSource Renovate
94b6087e2b chore(deps): update dependency eslint-plugin-github to v4.4.0 (#305)
Co-authored-by: asraa <asraa@google.com>
2022-10-17 11:26:05 -05:00
WhiteSource Renovate
4a8f4bd0d9 chore(deps): update gcr.io/distroless/base:nonroot docker digest to a6441d1 (#306) 2022-10-17 10:53:38 -05:00
WhiteSource Renovate
3ab86db547 chore(deps): update gcr.io/distroless/base:nonroot docker digest to 3778d4f (#293)
Co-authored-by: asraa <asraa@google.com>
2022-10-12 14:45:11 +00:00
WhiteSource Renovate
4f09605a47 fix(deps): update module github.com/sigstore/sigstore to v1.4.4 (#294)
Co-authored-by: asraa <asraa@google.com>
2022-10-12 14:26:35 +00:00
WhiteSource Renovate
b7b67c6740 chore(deps): update github-actions (#295) 2022-10-12 09:15:59 -05:00
asraa
e6428d7da5 fix: env vars are case sensitive in configuration (#298)
Signed-off-by: Asra Ali <asraa@google.com>
v1.4.1
2022-10-08 15:11:48 -04:00
asraa
936dc46aca ci: fix path to config (#297)
Signed-off-by: Asra Ali <asraa@google.com>

use k8s versioning to show commit and tree state

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
v1.4.0
2022-10-08 18:31:10 +00:00
asraa
93f88b9937 update version information for release (#296)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-08 17:23:03 +00:00
asraa
a6e069c0ab gcb: add gcb compatibility (#292)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-07 14:21:50 -07:00
WhiteSource Renovate
300cb9003d chore(deps): update dependency jasmine to v4.4.0 (#283) 2022-10-05 15:44:34 -05:00
WhiteSource Renovate
fc50b662fc chore(deps): pin dependencies (#269)
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-10-04 01:00:02 +00:00
asraa
168f9c3568 release: add release hash for v1.1.2 and v1.0.4 (#291)
* release: add hash for v1.1.2

Signed-off-by: Asra Ali <asraa@google.com>

* add releaes v1.0

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-04 09:41:40 +09:00
asraa
e269a00945 release: add release v1.3.1 and v1.2.1 (#288)
* release: add release v1.3.1 and v1.2.1

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-03 10:27:24 -05:00
Ian Lewis
951ae240b2 Update pre-submits (#289)
Signed-off-by: Ian Lewis <ianlewis@google.com>

Signed-off-by: Ian Lewis <ianlewis@google.com>
2022-10-03 09:58:15 -05:00
WhiteSource Renovate
35fd91f381 chore(deps): update github-actions (#284) 2022-10-03 09:46:34 +09:00
asraa
0ad6136f60 fix: make client shard aware when verifying (#282)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-09-30 16:08:33 -05:00
laurentsimon
a2f6c3b8f9 Update README.md (#276)
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-09-27 14:52:58 -05:00
WhiteSource Renovate
7bb343116e fix(deps): update module github.com/sigstore/sigstore to v1.4.2 (#272)
Co-authored-by: asraa <asraa@google.com>
2022-09-26 11:35:50 +00:00
WhiteSource Renovate
3ee3cca59d chore(deps): update github-actions (#274)
Co-authored-by: asraa <asraa@google.com>
2022-09-26 11:22:46 +00:00
laurentsimon
ad0648c097 doc: add links to GH builders (#268)
* Update README.md

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update README.md

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-09-26 06:12:31 -05:00
laurentsimon
b5da86b168 doc: document build id and GCB vs GHA (#266)
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* comments

* update
2022-09-23 19:04:51 +00:00
WhiteSource Renovate
5f98831104 fix(deps): update module github.com/sigstore/sigstore to v1.4.1 (#263) 2022-09-23 14:04:06 +00:00
kpk47
b9c3c9d87e Add a GitHub Action for installing slsa-verifier. (#246) 2022-09-22 18:58:40 +00:00
WhiteSource Renovate
aa75f1b7bb chore(deps): update github/codeql-action action to v2.1.24 (#262) 2022-09-21 16:48:34 +00:00
WhiteSource Renovate
eec5dd4c26 chore(deps): update gcr.io/distroless/base:nonroot docker digest to 33fac4d (#260)
Co-authored-by: asraa <asraa@google.com>
2022-09-19 20:43:51 +00:00
WhiteSource Renovate
78a225d3bd fix(deps): update module github.com/sigstore/cosign to v1.12.0 (#264) 2022-09-19 16:33:55 -04:00
laurentsimon
533d347a4b feat: support builderID matching with or without semver for GHA (#257)
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
2022-09-15 14:32:03 -07:00
WhiteSource Renovate
cddba700c8 fix(deps): update module github.com/google/go-cmp to v0.5.9 (#253)
Co-authored-by: asraa <asraa@google.com>
2022-09-14 17:47:23 +00:00
WhiteSource Renovate
aa6f6a56ea chore(deps): update ossf/scorecard-action action to v2 (#255)
Co-authored-by: asraa <asraa@google.com>
2022-09-13 14:52:53 +00:00
WhiteSource Renovate
11203e8546 chore(deps): update golang docker tag to v1.19 (#196) 2022-09-13 09:44:44 -05:00
laurentsimon
b58e752378 feat: support builderID matching with or without semver for GCB (#256)
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
2022-09-12 17:17:46 -07:00
laurentsimon
d12dce9526 feat: CLI tests for GCB verification (#251)
* update

* update

* update
2022-09-08 13:36:56 -07:00
asraa
26155fe9a3 fix: fix CLI flag mishap (#250)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-09-07 08:27:28 -07:00
laurentsimon
e0edc0c46f feat: support for GCB v0.3 verification (#248)
* update

* update

* update

* update
2022-09-06 23:54:59 +00:00
asraa
ff0ced42ef refactor: add subcommands and separate functionality from artifacts a… (#231)
* refactor: add subcommands and separate functionality from artifacts and images

Signed-off-by: Asra Ali <asraa@google.com>
2022-09-06 17:10:58 -05:00
WhiteSource Renovate
0211941480 chore(deps): update golang:1.18 docker digest to 5540a6a (#238)
Co-authored-by: asraa <asraa@google.com>
2022-09-06 14:09:42 +00:00
WhiteSource Renovate
a040702c4e chore(deps): update github/codeql-action action to v2.1.22 (#249) 2022-09-06 08:40:16 -05:00
laurentsimon
d5b56c334e feat: add CLI tests for GCB verification (#245)
* update

* update

* update

* update
2022-09-02 20:42:40 +00:00
WhiteSource Renovate
2adefa0e01 chore(deps): update github-actions (#240)
Co-authored-by: asraa <asraa@google.com>
2022-09-02 16:01:16 +00:00
WhiteSource Renovate
0ff60a240a fix(deps): update module github.com/sigstore/cosign to v1.11.1 (#239)
Co-authored-by: asraa <asraa@google.com>
2022-09-01 15:31:07 +00:00
laurentsimon
0c543fcce0 update (#244) 2022-09-01 01:00:56 +00:00
laurentsimon
26c928f5b7 Verify text provenance for GCB (#242)
* update

* update

* update

* update

* update

* comments

* comments
2022-08-30 23:08:46 +00:00
asraa
71cf0397cd release: add v1.0.3 (#235)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-08-29 09:48:21 -07:00
laurentsimon
362e8c1077 Update README.md (#241)
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-08-29 13:54:48 +09:00
laurentsimon
3b5c68f561 feat: Support for GCB verification (#202)
* add testing folder

Signed-off-by: Asra Ali <asraa@google.com>

* add tests

Signed-off-by: Asra Ali <asraa@google.com>

* update

* updated comments

Signed-off-by: Asra Ali <asraa@google.com>

* update

* update

* update

* update

* update

* update

* update

* draft

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

Signed-off-by: Asra Ali <asraa@google.com>
Co-authored-by: Asra Ali <asraa@google.com>
2022-08-24 10:17:14 -07:00
WhiteSource Renovate
77f8bc623b chore(deps): update gcr.io/distroless/base:nonroot docker digest to 533c15e (#228)
Co-authored-by: asraa <asraa@google.com>
2022-08-23 20:18:17 +00:00
WhiteSource Renovate
3fc1dbde46 fix(deps): update module github.com/sigstore/rekor to v0.11.0 (#225) 2022-08-23 09:38:20 -05:00
WhiteSource Renovate
ab0daccd34 fix(deps): update module github.com/sigstore/cosign to v1.11.0 (#224)
Co-authored-by: asraa <asraa@google.com>
2022-08-23 14:13:21 +00:00
WhiteSource Renovate
106f50c7ee chore(deps): update actions/checkout action to v3 (#227) 2022-08-23 09:03:56 -05:00
WhiteSource Renovate
ab70a51d20 chore(deps): update github-actions (#222) 2022-08-22 14:47:52 -07:00