198 Commits

Author SHA1 Message Date
asraa
128324f488 ci: add pr workflow to check pr title format (#372)
* ci: add pr workflow to check pr title format

Signed-off-by: Asra Ali <asraa@google.com>
v2.0.0
2022-11-30 21:35:33 +00:00
Mend Renovate
7bebbb9e1f chore(deps): update actions/dependency-review-action action to v3 (#358)
Co-authored-by: asraa <asraa@google.com>
2022-11-29 15:15:51 +00:00
Mend Renovate
0ef57a2b08 chore(deps): update github-actions (#359)
* chore(deps): update github-actions

* Update release.yml

Co-authored-by: asraa <asraa@google.com>
2022-11-28 18:02:24 +00:00
asraa
1c41687aac Update to reference v1.3.2 as latest version. (#369)
Signed-off-by: Ian Lewis <ianlewis@google.com>

Signed-off-by: Ian Lewis <ianlewis@google.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-11-28 16:40:11 +00:00
Ian Lewis
3162d85faf Update README (#361)
Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>
Co-authored-by: asraa <asraa@google.com>
2022-11-28 16:20:13 +00:00
Ian Lewis
2cd857d928 Update renovate config to group PRs (#368)
Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>
2022-11-28 13:46:35 +09:00
Ian Lewis
28b554f525 Add golangci-lint and yamllint (#365)
* Add Makefile and yamllint config

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* Add golangci-lint config

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* Add golangci-lint config

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* add linters to pre-submit

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* add issue link to todos

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* Fix whitespace issue

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>
2022-11-28 10:19:59 +09:00
Mend Renovate
6cd5d4ac68 chore(deps): update github-actions (#351)
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-11-14 22:55:08 +00:00
Ian Lewis
bbe98e8f2e Add e2e tests for slsa-github-generator v1.2.2 (#355)
* Add e2e tests for slsa-github-generator v1.2.2

* Fix testdata

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>
2022-11-14 15:31:04 +00:00
Shunsuke Suzuki
f7bd16431b fix: fix error logs (#356) 2022-11-11 10:44:03 -06:00
Tahir Raza
a9f100cf3d fixing typo (#352)
Signed-off-by: Tahir Raza <tahirraza@gmail.com>

Signed-off-by: Tahir Raza <tahirraza@gmail.com>
2022-11-05 23:14:06 +00:00
asraa
ef0f1a7a24 refactor: consolidate verification funcs for GHA (#348)
* consolidate verification funcs

Signed-off-by: Asra Ali <asraa@google.com>
2022-11-02 15:32:39 -05:00
asraa
26f422b6b2 add new releases (#347)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-11-01 09:38:26 +09:00
WhiteSource Renovate
a5568ee8ba fix(deps): update module github.com/spf13/cobra to v1.6.1 (#340)
Co-authored-by: asraa <asraa@google.com>
2022-10-31 18:24:56 +00:00
WhiteSource Renovate
1dfd8ba693 chore(deps): update github-actions (#342) 2022-10-31 18:13:42 +00:00
WhiteSource Renovate
12d81454a0 chore(deps): update dependency @types/node to v18.11.8 (#341)
Co-authored-by: asraa <asraa@google.com>
2022-10-31 16:38:18 +00:00
WhiteSource Renovate
9a0c0ce3c4 chore(deps): update github-actions to v3 (#344)
Co-authored-by: asraa <asraa@google.com>
2022-10-31 09:39:45 -05:00
WhiteSource Renovate
f0d1b30dca chore(deps): update dependency jasmine to v4.5.0 (#345) 2022-10-31 09:24:08 -05:00
WhiteSource Renovate
585539ab5f chore(deps): update dependency typescript to v4.8.4 (#270)
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-10-28 04:58:23 +00:00
Ian Lewis
c845407336 Update sigstore libraries (#326)
* Update sigstore libraries

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* Update slsa-github-generator

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

* go mod tidy

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>

Signed-off-by: Ian Lewis <ianmlewis@gmail.com>
Co-authored-by: asraa <asraa@google.com>
2022-10-27 14:36:36 +00:00
laurentsimon
78187e501f feat: run CLI tests daily (#327)
* update

* update

* update

* update

* update
2022-10-27 05:46:10 -07:00
WhiteSource Renovate
429634c0e6 chore(deps): update dependency eslint to v8.26.0 (#323)
Co-authored-by: asraa <asraa@google.com>
2022-10-25 14:55:53 +00:00
laurentsimon
e9e3ab2e33 Make GitHub token optional (#324)
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-10-25 11:04:34 +00:00
kpk47
37cf8fd48d Fix installer: Add arguments to actions/checkout so that it checks ou… (#319)
* Fix installer: Add arguments to actions/checkout so that it checks out slsa-framework/slsa-verifier instead of the repo using the Action.

Signed-off-by: kpk47 <kkris@google.com>

* Switch to JS action

* rebuild TS

Signed-off-by: kpk47 <kkris@google.com>
2022-10-25 10:42:00 +00:00
Wietse Venema
27597feff8 Add optional (#316)
* Update README.md

Add missing [optional] indicators to the "verify-artifact" --help example.

Signed-off-by: Wietse Venema <72045954+wietse-gmail@users.noreply.github.com>

* Add missing [optional] indicators to the verify-artifact help message

Signed-off-by: Wietse Venema <72045954+wietse-gmail@users.noreply.github.com>

Signed-off-by: Wietse Venema <72045954+wietse-gmail@users.noreply.github.com>
2022-10-23 23:33:39 +00:00
asraa
e9cd6b763c fix: address gcb verifier comments and add gcb documentation (#300)
* address gcb verifier comments

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-21 21:06:22 +00:00
asraa
efc53fc78e docs: update release.md docs to describe a pre-release (#314)
* update docs

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-21 15:37:12 -05:00
asraa
c151f47368 add v1.2.1 builder tests (#310)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-20 01:45:22 -07:00
asraa
6766be33a8 tests: fix builder id matching (#308)
* fix builder id matching

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-18 16:02:08 -05:00
WhiteSource Renovate
4ec69efd87 chore(deps): update dependency eslint to v8.25.0 (#273) 2022-10-17 13:25:37 -05:00
asraa
05d247fb14 rekor: use rekor client with retries (#301)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-17 16:55:40 +00:00
WhiteSource Renovate
beada4bd09 fix(deps): update module github.com/go-openapi/runtime to v0.24.2 (#304)
Co-authored-by: asraa <asraa@google.com>
2022-10-17 16:33:55 +00:00
WhiteSource Renovate
94b6087e2b chore(deps): update dependency eslint-plugin-github to v4.4.0 (#305)
Co-authored-by: asraa <asraa@google.com>
2022-10-17 11:26:05 -05:00
WhiteSource Renovate
4a8f4bd0d9 chore(deps): update gcr.io/distroless/base:nonroot docker digest to a6441d1 (#306) 2022-10-17 10:53:38 -05:00
WhiteSource Renovate
3ab86db547 chore(deps): update gcr.io/distroless/base:nonroot docker digest to 3778d4f (#293)
Co-authored-by: asraa <asraa@google.com>
2022-10-12 14:45:11 +00:00
WhiteSource Renovate
4f09605a47 fix(deps): update module github.com/sigstore/sigstore to v1.4.4 (#294)
Co-authored-by: asraa <asraa@google.com>
2022-10-12 14:26:35 +00:00
WhiteSource Renovate
b7b67c6740 chore(deps): update github-actions (#295) 2022-10-12 09:15:59 -05:00
asraa
e6428d7da5 fix: env vars are case sensitive in configuration (#298)
Signed-off-by: Asra Ali <asraa@google.com>
v1.4.1
2022-10-08 15:11:48 -04:00
asraa
936dc46aca ci: fix path to config (#297)
Signed-off-by: Asra Ali <asraa@google.com>

use k8s versioning to show commit and tree state

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
v1.4.0
2022-10-08 18:31:10 +00:00
asraa
93f88b9937 update version information for release (#296)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-08 17:23:03 +00:00
asraa
a6e069c0ab gcb: add gcb compatibility (#292)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-07 14:21:50 -07:00
WhiteSource Renovate
300cb9003d chore(deps): update dependency jasmine to v4.4.0 (#283) 2022-10-05 15:44:34 -05:00
WhiteSource Renovate
fc50b662fc chore(deps): pin dependencies (#269)
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-10-04 01:00:02 +00:00
asraa
168f9c3568 release: add release hash for v1.1.2 and v1.0.4 (#291)
* release: add hash for v1.1.2

Signed-off-by: Asra Ali <asraa@google.com>

* add releaes v1.0

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-04 09:41:40 +09:00
asraa
e269a00945 release: add release v1.3.1 and v1.2.1 (#288)
* release: add release v1.3.1 and v1.2.1

Signed-off-by: Asra Ali <asraa@google.com>
2022-10-03 10:27:24 -05:00
Ian Lewis
951ae240b2 Update pre-submits (#289)
Signed-off-by: Ian Lewis <ianlewis@google.com>

Signed-off-by: Ian Lewis <ianlewis@google.com>
2022-10-03 09:58:15 -05:00
WhiteSource Renovate
35fd91f381 chore(deps): update github-actions (#284) 2022-10-03 09:46:34 +09:00
asraa
0ad6136f60 fix: make client shard aware when verifying (#282)
Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
2022-09-30 16:08:33 -05:00
laurentsimon
a2f6c3b8f9 Update README.md (#276)
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-09-27 14:52:58 -05:00
WhiteSource Renovate
7bb343116e fix(deps): update module github.com/sigstore/sigstore to v1.4.2 (#272)
Co-authored-by: asraa <asraa@google.com>
2022-09-26 11:35:50 +00:00