Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(ci): keyless signing #413

Merged
merged 15 commits into from
Dec 15, 2021
Merged

chore(ci): keyless signing #413

merged 15 commits into from
Dec 15, 2021

Conversation

caarlos0
Copy link
Member

@caarlos0 caarlos0 commented Dec 4, 2021

keyless signing nfpm

depends on cosign v1.4.0

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
@caarlos0 caarlos0 added the enhancement New feature or request label Dec 4, 2021
@pull-request-size pull-request-size bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label Dec 4, 2021
@codecov
Copy link

codecov bot commented Dec 4, 2021

Codecov Report

Merging #413 (4147b11) into main (6f312dc) will not change coverage.
The diff coverage is 0.00%.

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #413   +/-   ##
=======================================
  Coverage   66.73%   66.73%           
=======================================
  Files          15       15           
  Lines        1876     1876           
=======================================
  Hits         1252     1252           
  Misses        487      487           
  Partials      137      137           
Impacted Files Coverage Δ
internal/cmd/docs.go 0.00% <0.00%> (ø)
internal/cmd/init.go 0.00% <0.00%> (ø)
internal/cmd/package.go 0.00% <0.00%> (ø)
internal/cmd/root.go 0.00% <0.00%> (ø)
internal/cmd/schema.go 0.00% <0.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6f312dc...4147b11. Read the comment docs.

Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
@vercel vercel bot temporarily deployed to Preview December 4, 2021 19:07 Inactive
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
@vercel vercel bot temporarily deployed to Preview December 4, 2021 19:11 Inactive
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
@vercel vercel bot temporarily deployed to Preview December 4, 2021 19:19 Inactive
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
@vercel vercel bot temporarily deployed to Preview December 4, 2021 19:19 Inactive
@vercel vercel bot temporarily deployed to Preview December 4, 2021 20:13 Inactive
@vercel vercel bot temporarily deployed to Preview December 6, 2021 13:39 Inactive
Copy link
Contributor

@djgilcrease djgilcrease left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

4censord and others added 5 commits December 15, 2021 15:22
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 1.3.1 to 1.4.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@v1.3.1...v1.4.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md)
- [Commits](spf13/cobra@v1.2.1...v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
@pull-request-size pull-request-size bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/M Denotes a PR that changes 30-99 lines, ignoring generated files. labels Dec 15, 2021
@vercel vercel bot temporarily deployed to Preview December 15, 2021 18:22 Inactive
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
@vercel vercel bot temporarily deployed to Preview December 15, 2021 18:26 Inactive
@caarlos0 caarlos0 merged commit 3f4fd21 into main Dec 15, 2021
@caarlos0 caarlos0 deleted the keyless branch December 15, 2021 18:30
@github-actions github-actions bot added this to the 2.11.0 milestone Dec 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants