160 Commits

Author SHA1 Message Date
asraa
936dc46aca ci: fix path to config (#297)
Signed-off-by: Asra Ali <asraa@google.com>

use k8s versioning to show commit and tree state

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
v1.4.0
2022-10-08 18:31:10 +00:00
asraa
93f88b9937 update version information for release (#296)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-08 17:23:03 +00:00
asraa
a6e069c0ab gcb: add gcb compatibility (#292)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-07 14:21:50 -07:00
WhiteSource Renovate
300cb9003d chore(deps): update dependency jasmine to v4.4.0 (#283) 2022-10-05 15:44:34 -05:00
WhiteSource Renovate
fc50b662fc chore(deps): pin dependencies (#269)
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-10-04 01:00:02 +00:00
asraa
168f9c3568 release: add release hash for v1.1.2 and v1.0.4 (#291)
* release: add hash for v1.1.2

Signed-off-by: Asra Ali <asraa@google.com>

* add releaes v1.0

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-04 09:41:40 +09:00
asraa
e269a00945 release: add release v1.3.1 and v1.2.1 (#288)
* release: add release v1.3.1 and v1.2.1

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-03 10:27:24 -05:00
Ian Lewis
951ae240b2 Update pre-submits (#289)
Signed-off-by: Ian Lewis <ianlewis@google.com>

Signed-off-by: Ian Lewis <ianlewis@google.com>
2022-10-03 09:58:15 -05:00
WhiteSource Renovate
35fd91f381 chore(deps): update github-actions (#284) 2022-10-03 09:46:34 +09:00
asraa
0ad6136f60 fix: make client shard aware when verifying (#282)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-09-30 16:08:33 -05:00
laurentsimon
a2f6c3b8f9 Update README.md (#276)
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-09-27 14:52:58 -05:00
WhiteSource Renovate
7bb343116e fix(deps): update module github.com/sigstore/sigstore to v1.4.2 (#272)
Co-authored-by: asraa <asraa@google.com>
2022-09-26 11:35:50 +00:00
WhiteSource Renovate
3ee3cca59d chore(deps): update github-actions (#274)
Co-authored-by: asraa <asraa@google.com>
2022-09-26 11:22:46 +00:00
laurentsimon
ad0648c097 doc: add links to GH builders (#268)
* Update README.md

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update README.md

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-09-26 06:12:31 -05:00
laurentsimon
b5da86b168 doc: document build id and GCB vs GHA (#266)
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* comments

* update
2022-09-23 19:04:51 +00:00
WhiteSource Renovate
5f98831104 fix(deps): update module github.com/sigstore/sigstore to v1.4.1 (#263) 2022-09-23 14:04:06 +00:00
kpk47
b9c3c9d87e Add a GitHub Action for installing slsa-verifier. (#246) 2022-09-22 18:58:40 +00:00
WhiteSource Renovate
aa75f1b7bb chore(deps): update github/codeql-action action to v2.1.24 (#262) 2022-09-21 16:48:34 +00:00
WhiteSource Renovate
eec5dd4c26 chore(deps): update gcr.io/distroless/base:nonroot docker digest to 33fac4d (#260)
Co-authored-by: asraa <asraa@google.com>
2022-09-19 20:43:51 +00:00
WhiteSource Renovate
78a225d3bd fix(deps): update module github.com/sigstore/cosign to v1.12.0 (#264) 2022-09-19 16:33:55 -04:00
laurentsimon
533d347a4b feat: support builderID matching with or without semver for GHA (#257)
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
2022-09-15 14:32:03 -07:00
WhiteSource Renovate
cddba700c8 fix(deps): update module github.com/google/go-cmp to v0.5.9 (#253)
Co-authored-by: asraa <asraa@google.com>
2022-09-14 17:47:23 +00:00
WhiteSource Renovate
aa6f6a56ea chore(deps): update ossf/scorecard-action action to v2 (#255)
Co-authored-by: asraa <asraa@google.com>
2022-09-13 14:52:53 +00:00
WhiteSource Renovate
11203e8546 chore(deps): update golang docker tag to v1.19 (#196) 2022-09-13 09:44:44 -05:00
laurentsimon
b58e752378 feat: support builderID matching with or without semver for GCB (#256)
* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update
2022-09-12 17:17:46 -07:00
laurentsimon
d12dce9526 feat: CLI tests for GCB verification (#251)
* update

* update

* update
2022-09-08 13:36:56 -07:00
asraa
26155fe9a3 fix: fix CLI flag mishap (#250)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-09-07 08:27:28 -07:00
laurentsimon
e0edc0c46f feat: support for GCB v0.3 verification (#248)
* update

* update

* update

* update
2022-09-06 23:54:59 +00:00
asraa
ff0ced42ef refactor: add subcommands and separate functionality from artifacts a… (#231)
* refactor: add subcommands and separate functionality from artifacts and images

Signed-off-by: Asra Ali <asraa@google.com>
2022-09-06 17:10:58 -05:00
WhiteSource Renovate
0211941480 chore(deps): update golang:1.18 docker digest to 5540a6a (#238)
Co-authored-by: asraa <asraa@google.com>
2022-09-06 14:09:42 +00:00
WhiteSource Renovate
a040702c4e chore(deps): update github/codeql-action action to v2.1.22 (#249) 2022-09-06 08:40:16 -05:00
laurentsimon
d5b56c334e feat: add CLI tests for GCB verification (#245)
* update

* update

* update

* update
2022-09-02 20:42:40 +00:00
WhiteSource Renovate
2adefa0e01 chore(deps): update github-actions (#240)
Co-authored-by: asraa <asraa@google.com>
2022-09-02 16:01:16 +00:00
WhiteSource Renovate
0ff60a240a fix(deps): update module github.com/sigstore/cosign to v1.11.1 (#239)
Co-authored-by: asraa <asraa@google.com>
2022-09-01 15:31:07 +00:00
laurentsimon
0c543fcce0 update (#244) 2022-09-01 01:00:56 +00:00
laurentsimon
26c928f5b7 Verify text provenance for GCB (#242)
* update

* update

* update

* update

* update

* comments

* comments
2022-08-30 23:08:46 +00:00
asraa
71cf0397cd release: add v1.0.3 (#235)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-08-29 09:48:21 -07:00
laurentsimon
362e8c1077 Update README.md (#241)
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-08-29 13:54:48 +09:00
laurentsimon
3b5c68f561 feat: Support for GCB verification (#202)
* add testing folder

Signed-off-by: Asra Ali <asraa@google.com>

* add tests

Signed-off-by: Asra Ali <asraa@google.com>

* update

* updated comments

Signed-off-by: Asra Ali <asraa@google.com>

* update

* update

* update

* update

* update

* update

* update

* draft

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

Signed-off-by: Asra Ali <asraa@google.com>
Co-authored-by: Asra Ali <asraa@google.com>
2022-08-24 10:17:14 -07:00
WhiteSource Renovate
77f8bc623b chore(deps): update gcr.io/distroless/base:nonroot docker digest to 533c15e (#228)
Co-authored-by: asraa <asraa@google.com>
2022-08-23 20:18:17 +00:00
WhiteSource Renovate
3fc1dbde46 fix(deps): update module github.com/sigstore/rekor to v0.11.0 (#225) 2022-08-23 09:38:20 -05:00
WhiteSource Renovate
ab0daccd34 fix(deps): update module github.com/sigstore/cosign to v1.11.0 (#224)
Co-authored-by: asraa <asraa@google.com>
2022-08-23 14:13:21 +00:00
WhiteSource Renovate
106f50c7ee chore(deps): update actions/checkout action to v3 (#227) 2022-08-23 09:03:56 -05:00
WhiteSource Renovate
ab70a51d20 chore(deps): update github-actions (#222) 2022-08-22 14:47:52 -07:00
WhiteSource Renovate
90406fa7ca chore(deps): update golang:1.18 docker digest to 616aa98 (#214)
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-08-19 19:04:44 +00:00
WhiteSource Renovate
459608e7d8 fix(deps): update module github.com/go-openapi/swag to v0.22.3 (#215) 2022-08-19 11:55:11 -07:00
asraa
7b4b9cde06 feat: support oci image verification (#147)
* feat: support oci image verification

Signed-off-by: Asra Ali <asraa@google.com>

* add testing folder

Signed-off-by: Asra Ali <asraa@google.com>

* update name and make fix

Signed-off-by: Asra Ali <asraa@google.com>

* add tests

Signed-off-by: Asra Ali <asraa@google.com>

* Add initial testing

Signed-off-by: Asra Ali <asraa@google.com>

* updated comments

Signed-off-by: Asra Ali <asraa@google.com>

* update

Signed-off-by: Asra Ali <asraa@google.com>

* fix digest calculation

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-08-17 15:59:01 -05:00
asraa
ccb0786c88 release: release v1.3.0 of verifier (#218)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-08-15 13:50:24 -07:00
laurentsimon
5bb13ef508 feat: add a -workflow-input option (#216)
* update
v1.3.0
2022-08-15 19:38:15 +00:00
asraa
fc6a8e0499 fix invalid dir (#217)
Signed-off-by: Asra Ali <asraa@google.com>
2022-08-15 19:17:46 +00:00