Commit Graph

Select branches

Hide Pull Requests

Hayden-IO-patch-1

bazel-not-experimental

dependabot/go_modules/go_modules-dd7da38a6b

dependabot/maven/experimental/maven-plugin/org.apache.maven-maven-core-3.8.1

dependabot/npm_and_yarn/npm_and_yarn-eb3907a9ff

haydentherapper-patch-1

ianlewis-patch-1

laurentsimon-patch-1

laurentsimon-patch-2

less-parallel-tests

main

no-parallel

post-commit-no-contents-write

ramonpetgrave64-fix-builder-tag

ramonpetgrave64-patch-1

ramonpetgrave64-patch-2

ramonpetgrave64-patch-3

ramonpetgrave64-patch-4

ramonpetgrave64-patch-5

ramonpetgrave64-tlog-dssev001

ramonpetgrave64-vsa

rekor-retries

release/v1.0

release/v1.1

release/v1.2

release/v1.3

release/v1.4

release/v2.2

release/v2.3

revert-715-fix/update-semvers

sghg-go-bundle

sigstore-go-bundle-0.3

test/e2e

test000

testing-from-slsa-github-generator-repo-branches

update-for-v2.7.0

update-go-golanci-lint

v2.7.1-docs

verify-sigstore-go-Bundle

verify-sigstore-go-Bundlev2

verify-sigstore-go-Bundlev3

#1

#100

#101

#102

#103

#104

#106

#107

#108

#109

#11

#110

#112

#113

#114

#116

#118

#119

#120

#121

#122

#123

#124

#125

#127

#128

#129

#13

#130

#132

#134

#135

#136

#137

#14

#140

#141

#142

#143

#146

#147

#149

#15

#150

#151

#152

#153

#154

#159

#160

#162

#164

#165

#166

#167

#168

#170

#171

#172

#175

#176

#177

#177

#178

#18

#182

#184

#185

#187

#19

#192

#194

#195

#196

#197

#198

#199

#202

#204

#207

#209

#210

#212

#214

#215

#216

#217

#218

#22

#222

#223

#224

#225

#226

#227

#228

#23

#231

#233

#233

#234

#235

#238

#239

#24

#240

#241

#242

#244

#245

#246

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#259

#260

#261

#262

#263

#264

#265

#266

#268

#269

#27

#270

#271

#272

#273

#274

#276

#277

#278

#279

#28

#280

#282

#283

#284

#286

#287

#288

#289

#291

#292

#293

#294

#295

#296

#297

#298

#300

#301

#302

#303

#304

#305

#306

#308

#310

#313

#314

#316

#317

#318

#319

#320

#321

#322

#323

#324

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#354

#355

#356

#357

#358

#359

#36

#360

#361

#365

#368

#369

#37

#372

#373

#374

#375

#376

#378

#379

#38

#380

#383

#384

#385

#386

#389

#39

#39

#392

#393

#394

#396

#398

#400

#401

#403

#404

#407

#408

#41

#410

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#424

#426

#428

#429

#43

#430

#432

#433

#434

#435

#436

#437

#438

#439

#44

#442

#444

#445

#447

#45

#452

#453

#455

#456

#457

#459

#460

#463

#465

#466

#467

#468

#469

#47

#470

#476

#478

#479

#48

#480

#481

#482

#484

#486

#490

#491

#495

#497

#498

#499

#50

#501

#502

#503

#504

#506

#507

#508

#509

#516

#517

#519

#52

#521

#523

#525

#527

#528

#529

#53

#530

#532

#533

#534

#534

#535

#536

#537

#54

#540

#541

#543

#544

#545

#55

#552

#553

#556

#557

#558

#559

#560

#562

#564

#567

#568

#569

#572

#576

#577

#578

#579

#58

#581

#582

#583

#584

#585

#586

#587

#59

#591

#592

#595

#596

#597

#598

#60

#604

#606

#607

#608

#609

#612

#615

#618

#619

#62

#620

#621

#622

#627

#628

#629

#63

#632

#633

#634

#635

#636

#637

#638

#640

#641

#643

#644

#645

#646

#648

#649

#650

#651

#653

#654

#657

#660

#664

#666

#667

#668

#669

#670

#671

#673

#674

#676

#677

#678

#68

#680

#681

#682

#685

#686

#687

#688

#689

#69

#691

#693

#694

#695

#696

#697

#698

#699

#70

#701

#702

#704

#705

#706

#708

#71

#710

#712

#713

#714

#715

#716

#717

#718

#719

#720

#722

#723

#725

#727

#728

#729

#731

#732

#736

#737

#738

#741

#742

#743

#745

#746

#747

#748

#749

#75

#750

#751

#752

#753

#754

#758

#76

#760

#761

#762

#763

#764

#767

#768

#769

#77

#770

#771

#772

#774

#775

#776

#777

#779

#78

#780

#781

#782

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#807

#808

#809

#81

#810

#811

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#829

#83

#830

#831

#831

#832

#833

#834

#834

#835

#836

#838

#839

#840

#842

#843

#844

#845

#847

#848

#85

#850

#851

#852

#853

#854

#855

#856

#857

#857

#858

#859

#859

#860

#861

#862

#862

#863

#863

#864

#864

#865

#865

#866

#866

#867

#867

#868

#868

#869

#87

#870

#870

#871

#871

#873

#873

#874

#874

#875

#877

#877

#878

#879

#880

#881

#882

#882

#883

#884

#886

#886

#887

#887

#888

#888

#889

#889

#89

#890

#890

#892

#892

#893

#893

#894

#894

#895

#895

#896

#896

#898

#9

#94

#96

#97

#98

#99

v0.0.1

v1.0.0

v1.0.1

v1.0.2

v1.0.3

v1.0.4

v1.0.5

v1.1.0

v1.1.1

v1.1.2

v1.1.3

v1.2.0

v1.2.1

v1.2.2

v1.3.0

v1.3.1

v1.3.2

v1.4.0

v1.4.1

v2.0.0

v2.0.1

v2.1.0

v2.2.0

v2.2.0-rc.0

v2.3.0

v2.3.0-rc.0

v2.3.0-rc.1

v2.3.0-rc.2

v2.3.0-rc.3

v2.4.0

v2.4.0-rc.0

v2.4.0-rc.1

v2.4.1

v2.4.1-rc.0

v2.4.1-rc.1

v2.5.1

v2.5.1-rc.0

v2.6.0

v2.6.0-dev.1

v2.6.0-rc.1

v2.7.0

v2.7.0-rc.1

v2.7.1

v2.7.1-rc.1

v2.7.1-rc.2

Mono Color

• 312e51b12f hello ramonpetgrave64-patch-2 Ramon PetgraveandGitHub 2024-04-24 14:44:40 -04:00
• a072d5e3a6 empty laurentsimon-patch-2 Ramon PetgraveandGitHub 2024-04-24 14:36:59 -04:00
• 129f707e41 more security notes Ramon Petgrave 2024-04-24 17:12:24 +00:00
• 023594f07c pin actions Ramon Petgrave 2024-04-24 16:26:56 +00:00
• ae3b59b546 cleanup Ramon Petgrave 2024-04-24 16:25:08 +00:00
• a67cc7092f set default permissions: {} Ramon Petgrave 2024-04-24 16:24:16 +00:00
• f5a747d1af no conditional Ramon Petgrave 2024-04-23 20:44:40 +00:00
• bfdb9a213a typo Ramon Petgrave 2024-04-23 20:37:14 +00:00
• 843b2e5d33 more docs Ramon Petgrave 2024-04-23 20:36:03 +00:00
• 15dec13ba3 add post-commit Ramon Petgrave 2024-04-23 20:32:32 +00:00
• 637b07fdab chore: slsa-framework/slsa-github-generator@v2.0.0: add testdata (#758) test000 Ramon PetgraveandGitHub 2024-04-23 12:26:13 -04:00
• ee32cbff7e chore(deps): update golang:1.21 docker digest to 81811f8 (#693) 3 people 2024-04-18 18:46:15 +02:00
• 79d225bb44 fix(deps): update module github.com/sigstore/cosign/v2 to v2.2.4 [security] (#723) Mend RenovateandGitHub 2024-04-18 18:33:11 +02:00
• 8c9ed07f8f feat: fixes #547: add npm sigstore-tuf suport (#731) Ramon PetgraveandGitHub 2024-04-16 13:21:49 -04:00
• 2a07cd6e3a fix(deps): update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.11.0 (#752) 3 people 2024-04-03 02:55:07 +02:00
• bcc39bf21a chore(deps): update npm dev (major) (#753) 3 people 2024-04-02 20:44:08 -04:00
• 0547bc3002 fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.6 (#751) Mend RenovateandGitHub 2024-04-02 20:46:09 +02:00
• a8e21d5a83 chore(deps): update github-actions (major) (#719) Mend RenovateandGitHub 2024-04-01 17:26:46 +02:00
• 363e8da4fa chore(deps): update gcr.io/distroless/base:nonroot docker digest to 1a8ece8 (#701) Mend RenovateandGitHub 2024-04-01 17:13:46 +02:00
• 095d6f8200 feat: add ramonpetgrave64 as CODEOWNER (#750) Ramon PetgraveandGitHub 2024-03-27 12:00:14 -04:00
• 2b4150dbbe add ramonpetgrave64 as CODEOWNER ramonpetgrave64-patch-1 Ramon PetgraveandGitHub 2024-03-27 11:12:57 -04:00
• fe539a2bde fix: use sigstore/pkg/fulcioroots to lessen deps (#746) Ramon PetgraveandGitHub 2024-03-27 10:27:09 -04:00
• b1f986788d chore: Update @actions/github v6 (#749) laurentsimonandGitHub 2024-03-26 15:03:42 -07:00
• 66a9f93df2 fix(deps): update dependency org.apache.maven:maven-core to v3.9.6 (#718) 3 people 2024-03-26 21:42:43 +01:00
• 449e404e2a fix(deps): update module google.golang.org/protobuf to v1.33.0 [security] (#743) 3 people 2024-03-26 16:33:59 +01:00
• f315652a8c chore: Update doc and digests for v2.5.1 (#748) laurentsimonandGitHub 2024-03-26 08:11:24 -07:00
• eb7007070b feat: Update verifier version in GHA installer (#747) v2.5.1 laurentsimonandGitHub 2024-03-25 07:54:53 -07:00
• 594b179564 chore(deps): update github-actions (#741) v2.5.1-rc.0 Mend RenovateandGitHub 2024-03-22 08:59:31 +01:00
• dc7173b856 feat: Regression tests for builder v1.10.0 (#745) laurentsimonandGitHub 2024-03-21 08:48:59 -07:00
• 52c099b4d3 feat: Add support for DSSE Rekor type (#742) Hayden BandGitHub 2024-03-04 07:23:16 -08:00
• bb41cb6ab2 fix(deps): update go (#498) Mend RenovateandGitHub 2024-01-24 23:31:57 +01:00
• 74119b2a7f fix(deps): update go to 1.21 (#738) 3 people 2024-01-24 12:29:20 -05:00
• 9b2467f836 feat: fixes #724: add input for --provenance-repository while image verification (#736) 3 people 2024-01-22 12:10:11 -06:00
• ceaebee236 fix: #642: don't use go-cmp for outputting diff (#737) Ramon PetgraveandGitHub 2024-01-17 13:05:28 -05:00
• b804933f00 chore: Remove ianlewis from CODEOWNERS (#732) Ian LewisandGitHub 2024-01-17 01:32:34 +09:00
• a9f36d5d69 Remove ianlewis from CODEOWNERS ianlewis-patch-1 Ian LewisandGitHub 2024-01-11 12:15:58 +09:00
• f09d99f91c feat: Add cosign registry opts for provenance registry (#729) 3 people 2024-01-03 19:39:42 -06:00
• e77e0855b1 chore: Remove asraa from CODEOWNERS (#728) laurentsimonandGitHub 2024-01-03 10:25:45 -08:00
• ded6c909ff Merge branch 'main' into laurentsimon-patch-2 laurentsimonandGitHub 2024-01-03 10:15:28 -08:00
• eecb791ed8 chore: Fix renovate.json (#727) laurentsimonandGitHub 2024-01-03 10:03:46 -08:00
• 4d8196be66 Remove asraa from CODEOWNERS laurentsimonandGitHub 2023-12-28 15:23:29 -08:00
• 826daea5a0 Fix renovate.json laurentsimon-patch-1 laurentsimonandGitHub 2023-12-28 15:22:39 -08:00
• fcc8bf32f5 ci: Make renovate schedule monthly (#725) Ian LewisandGitHub 2023-12-06 08:55:59 +09:00
• b72da83344 chore(deps): update github-actions (#695) 3 people 2023-12-01 23:18:37 +01:00
• e986dfc0ff feat: Digest for new release (#722) laurentsimonandGitHub 2023-11-07 17:23:25 -08:00
• 69a9ba76b3 Revert "chore: bump versions (#715)" revert-715-fix/update-semvers laurentsimonandGitHub 2023-10-16 15:01:39 -07:00
• 7e1e47d7d7 docs: update release doc and rm binary (#716) v2.4.1-rc.1 v2.4.1 laurentsimonandGitHub 2023-10-16 13:44:13 -07:00
• a7d5c7b0f1 fix(deps): update dependency org.apache.maven:maven-plugin-api to v3.9.5 (#669) v2.4.1-rc.0 3 people 2023-10-10 04:06:04 +02:00
• 088a626879 fix(deps): update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.9.0 (#667) 3 people 2023-10-10 03:00:37 +02:00
• 2184d9d604 chore: bump versions (#715) laurentsimonandGitHub 2023-10-09 17:27:33 -07:00
• 3b171c4140 feat: Address unresolved comments from #705 (#708) laurentsimonandGitHub 2023-10-09 16:17:48 -07:00
• 8602109f3f chore(deps): bump org.apache.maven:maven-core from 3.2.5 to 3.8.1 in /experimental/maven-plugin (#713) 3 people 2023-10-09 23:04:57 +00:00
• 4b7b2599ac chore(deps): bump org.apache.maven:maven-core dependabot/maven/experimental/maven-plugin/org.apache.maven-maven-core-3.8.1 dependabot[bot]andGitHub 2023-10-09 22:50:04 +00:00
• 417b7aacc6 feat: Rename verifySubjectDigest function (#712) laurentsimonandGitHub 2023-10-09 15:37:38 -07:00
• 0e5b3a3d11 fix(deps): update golang.org/x/exp digest to 7918f67 (#694) Mend RenovateandGitHub 2023-10-09 18:59:53 +02:00
• 92e23214ec docs: Propose a security policy (#710) Trishank Karthik KuppusamyandGitHub 2023-10-03 12:49:43 -04:00
• f6ae402f45 fix: npm publish verification (#705) 4 people 2023-10-02 10:12:51 -07:00
• 54010d9735 fix: Support npm v2 format (#704) laurentsimonandGitHub 2023-09-21 17:10:01 -07:00
• e2c7ca1325 feat: Add homebrew formula to README (#702) Trishank Karthik KuppusamyandGitHub 2023-09-21 17:36:52 -04:00
• d23c97947e chore: Update doc for v2.4.0 (#699) laurentsimonandGitHub 2023-08-25 12:09:40 -07:00
• 886eb4b109 fix: link to installer Action (#698) laurentsimonandGitHub 2023-08-25 09:56:09 -07:00
• 73d1bcba98 fix: release failure (#697) v2.4.0-rc.1 v2.4.0 laurentsimonandGitHub 2023-08-24 15:58:45 -07:00
• 80c7d86183 feat: v1.9.0 regression tests (#696) v2.4.0-rc.0 laurentsimonandGitHub 2023-08-24 09:20:57 -07:00
• 58eede7e66 feat: gcb v1.0 support (#691) 3 people 2023-08-18 10:32:58 -07:00
• 4b59ce4050 feat: Update doc and code for Maven plugin (#680) laurentsimonandGitHub 2023-08-15 18:46:57 -07:00
• 2a24d8e0f1 feat: Allow byob builders ref at main for e2e tests (#689) laurentsimonandGitHub 2023-08-15 17:57:17 -07:00
• 9aef8ff8aa feat: GCB refactor for v1.0 support (#682) 3 people 2023-08-15 11:15:49 -07:00
• b9a0e6babf chore(deps): update github-actions (#686) Mend RenovateandGitHub 2023-08-15 00:44:36 +02:00
• 9d7646a7af chore(deps): update golang docker tag to v1.21 (#687) Mend RenovateandGitHub 2023-08-15 00:34:48 +02:00
• 8bcf1f0525 feat: Non-compulsory BuilderID for BYOB Builders (#674) 4 people 2023-08-11 07:20:58 -07:00
• 57e3f65b43 chore(deps): update github-actions (#666) Mend RenovateandGitHub 2023-08-09 01:24:24 +02:00
• 612f4e525f test: Add test data for v1.8.0 (#681) Ian LewisandGitHub 2023-08-08 13:58:30 +09:00
• 9aa2319ef0 feat: Print byob builder (#677) laurentsimonandGitHub 2023-08-02 11:34:13 -07:00
• 6affdbb81c chore: Add Kris to codeowners (#678) laurentsimonandGitHub 2023-08-02 09:04:53 -07:00
• 4d0ebdcbee docs: Add example for maven verification plugin (#676) laurentsimonandGitHub 2023-08-01 19:55:09 -07:00
• e7fc7a4621 feat: Verification for when sha1 is specified in BYOB TRW (#641) 3 people 2023-07-25 11:29:15 +09:00
• 66ae6bcdf6 docs: Fix maven-plugin README (#671) laurentsimonandGitHub 2023-07-24 17:56:29 -07:00
• 1d65178d65 move maven-plugin from slsa-github-generator (#664) AdamKorczandGitHub 2023-07-21 23:40:01 +01:00
• 59f6ba3e00 chore(deps): update github-actions (#651) Mend RenovateandGitHub 2023-07-18 03:51:23 +02:00
• c6d12b745c feat: Use tags vX.Y.Z-<language> for JReleaser builders (#644) laurentsimonandGitHub 2023-07-10 09:42:48 -07:00
• 1778495466 refactor: Use full builder id (#648) Ian LewisandGitHub 2023-07-10 15:23:48 +09:00
• 965f5784c1 refactor: Add more git utils (#645) Ian LewisandGitHub 2023-07-01 09:03:52 +09:00
• e2b1828894 fix: pre-submit: e2e-cli.sh artifact download (#646) Ian LewisandGitHub 2023-06-30 02:05:12 +09:00
• 90f4f23e1e test: Add more ProvenanceFromEnvelope tests (#640) Ian LewisandGitHub 2023-06-26 11:03:34 +09:00
• f025c630ac refactor: Use Go 1.20 (#643) Ian LewisandGitHub 2023-06-26 10:49:52 +09:00
• d2dc8193ae feat: Verify provenance by build type (#632) Ian LewisandGitHub 2023-06-16 09:54:20 +09:00
• 7aa6533540 chore(deps): update golang:1.19 docker digest to 83f9f84 (#583) Mend RenovateandGitHub 2023-06-12 07:06:28 +02:00
• 658d91aa82 chore(deps): update npm dev (#608) Mend RenovateandGitHub 2023-06-12 06:47:38 +02:00
• dab7d387fa fix(deps): update github.com/sigstore/protobuf-specs digest to 5ef5406 (#606) Mend RenovateandGitHub 2023-06-12 03:33:18 +02:00
• b69ed475aa chore(deps): update gcr.io/distroless/base:nonroot docker digest to c623859 (#567) Mend RenovateandGitHub 2023-06-12 03:00:06 +02:00
• 3ee6cee147 chore(deps): update github-actions (#607) Mend RenovateandGitHub 2023-06-12 02:44:31 +02:00
• 3a772f79ec test: add tests for v1.7.0 builders (#638) asraaandGitHub 2023-06-08 16:14:28 -05:00
• c39b10c4c9 fix: allow workflow_dispatch to trigger release.yml (#637) Ian LewisandGitHub 2023-06-08 22:49:25 +09:00
• 733cecb300 chore: update toc in README.md (#636) asraaandGitHub 2023-06-07 09:15:51 -05:00
• aac022747e feat: remove experimental on Sigstore bundle and v1.0 SLSA provenance format (#634) asraaandGitHub 2023-06-06 17:07:20 -05:00
• 8faf24c6dc fix: builder ID verification for testing (#635) Ian LewisandGitHub 2023-06-06 22:32:20 +09:00
• 7b942b8666 fix: only allow hashes of 256 bits or more (#633) laurentsimonandGitHub 2023-06-04 16:32:53 -07:00
• 5ca5eb0120 fix(deps): update module github.com/sigstore/rekor to v1.2.0 [security] (#622) Mend RenovateandGitHub 2023-06-02 16:10:53 +02:00
• 9bfbc91c5b refactor: Provenance tests (#628) Ian LewisandGitHub 2023-06-02 13:34:56 +09:00
• 8fe8ee9f3f fix: revert to using resolvedDepdendencies for source verification (#629) asraaandGitHub 2023-06-01 15:15:22 -05:00