Code

chore: update to upstream 2.4.0#236

Code

Merged

lance merged 171 commits intomainsecuresign/cosign:mainfrom lance/update-to-2.4.0securesign/cosign:lance/update-to-2.4.0Copy head branch name to clipboardSep 5, 2024

+4,355-1,378

Commits

Commits on Feb 22, 2024

• fix 'go vet -tags e2e ./...' (sigstore#3550)

  Show description for d96e379
  dmitris

  authored
  d96e379

  Copy full SHA for d96e379

Commits on Feb 26, 2024

• chore(deps): bump github.com/xanzy/go-gitlab from 0.97.0 to 0.98.0 (sigstore#3556)

  Show description for fb70b8e
  dependabot[bot]

  authored
  fb70b8e

  Copy full SHA for fb70b8e

• chore(deps): bump google.golang.org/api from 0.165.0 to 0.167.0 (sigstore#3557)

  Show description for c061e87
  dependabot[bot]

  authored
  c061e87

  Copy full SHA for c061e87

Commits on Feb 27, 2024

• remove unused rootPool var (sigstore#3559)

  Show description for 5923d9b
  dmitris

  authored
  5923d9b

  Copy full SHA for 5923d9b

Commits on Feb 28, 2024

• Bump sigstore/sigstore to v1.8.2 (sigstore#3561)

  haydentherapper

  authored
  86921c7

  Copy full SHA for 86921c7

• Correct help text of triangulate cmd (sigstore#3551)

  Show description for 40dd4c3
  michaelvl

  authored
  40dd4c3

  Copy full SHA for 40dd4c3

• chore(deps): bump imranismail/setup-kustomize from a76db1c6419124d51470b1e388c4b29476f495f1 to f6959cf94216d4be0182d7c78b39f14d0c8bb198 (sigstore#3554)

  Show description for 8dcaf2c
  

  dependabot[bot]

  and

  cpanato

  authored
  8dcaf2c

  Copy full SHA for 8dcaf2c

Commits on Feb 29, 2024

• chore(deps): bump the actions group with 3 updates (sigstore#3564)

  Show description for a4da0c2
  dependabot[bot]

  authored
  a4da0c2

  Copy full SHA for a4da0c2

Commits on Mar 3, 2024

• Update builder image, cosign image, golangci-lint (sigstore#3565)

  Show description for 7a2d50b
  cpanato

  authored
  7a2d50b

  Copy full SHA for 7a2d50b

Commits on Mar 4, 2024

• chore(deps): bump the actions group with 1 update (sigstore#3576)

  Show description for 9a9c6cb
  dependabot[bot]

  authored
  9a9c6cb

  Copy full SHA for 9a9c6cb

• chore(deps): bump github.com/open-policy-agent/opa from 0.61.0 to 0.62.0 (sigstore#3575)

  Show description for 5019cc4
  dependabot[bot]

  authored
  5019cc4

  Copy full SHA for 5019cc4

• chore(deps): bump the gomod group with 5 updates (sigstore#3574)

  Show description for d38d339
  dependabot[bot]

  authored
  d38d339

  Copy full SHA for d38d339

Commits on Mar 7, 2024

• free up disk space during e2e test runs (sigstore#3579)

  Show description for fb488d7
  bobcallaway

  authored
  fb488d7

  Copy full SHA for fb488d7

• Honor creation timestamp for signatures again (sigstore#3549)

  Show description for cb01516
  Lerentis

  authored
  cb01516

  Copy full SHA for cb01516

• chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.2 to 3.0.3 (sigstore#3582)

  Show description for 4574cd2
  dependabot[bot]

  authored
  4574cd2

  Copy full SHA for 4574cd2

• chore(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 (sigstore#3581)

  Show description for 6ee5a9c
  dependabot[bot]

  authored
  6ee5a9c

  Copy full SHA for 6ee5a9c

Commits on Mar 8, 2024

• bump release to use go 1.21.8 (sigstore#3583)

  bobcallaway

  authored
  16a3dda

  Copy full SHA for 16a3dda

Commits on Mar 11, 2024

• Clean up READMEs (sigstore#3587)

  Show description for 8ba9a5e
  haydentherapper

  authored
  8ba9a5e

  Copy full SHA for 8ba9a5e

• chore(deps): bump the actions group with 1 update (sigstore#3588)

  dependabot[bot]

  authored
  0506a69

  Copy full SHA for 0506a69

• chore(deps): bump github.com/xanzy/go-gitlab from 0.98.0 to 0.100.0 (sigstore#3590)

  dependabot[bot]

  authored
  cdbb891

  Copy full SHA for cdbb891

• chore(deps): bump the gomod group with 4 updates (sigstore#3589)

  dependabot[bot]

  authored
  693db70

  Copy full SHA for 693db70

• Update README for contributions (sigstore#3596)

  Show description for d8a6af9
  haydentherapper

  authored
  d8a6af9

  Copy full SHA for d8a6af9

• chore(deps): bump github.com/go-openapi/runtime from 0.27.2 to 0.28.0 (sigstore#3595)

  Show description for 2a96f4c
  dependabot[bot]

  authored
  2a96f4c

  Copy full SHA for 2a96f4c

• chore(deps): bump golang.org/x/oauth2 from 0.17.0 to 0.18.0 (sigstore#3591)

  Show description for b20ff08
  dependabot[bot]

  authored
  b20ff08

  Copy full SHA for b20ff08

• chore(deps): bump google.golang.org/api from 0.167.0 to 0.169.0 (sigstore#3594)

  Show description for b551637
  dependabot[bot]

  authored
  b551637

  Copy full SHA for b551637

Commits on Mar 12, 2024

• Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (sigstore#3578)

  Show description for 5d60a9a
  nkreiger

  authored
  5d60a9a

  Copy full SHA for 5d60a9a

Commits on Mar 19, 2024

• Update the script for working with blobs (sigstore#3610)

  Show description for 3065e53
  arewm

  authored
  3065e53

  Copy full SHA for 3065e53

• chore(deps): bump the actions group with 1 update (sigstore#3607)

  Show description for 0037808
  dependabot[bot]

  authored
  0037808

  Copy full SHA for 0037808

• chore(deps): bump cuelang.org/go from 0.7.1 to 0.8.0 (sigstore#3606)

  Show description for aab1b8f
  dependabot[bot]

  authored
  aab1b8f

  Copy full SHA for aab1b8f

• chore(deps): bump google.golang.org/api from 0.169.0 to 0.170.0 (sigstore#3605)

  Show description for 9081f20
  dependabot[bot]

  authored
  9081f20

  Copy full SHA for 9081f20

• chore(deps): bump the gomod group with 1 update (sigstore#3603)

  Show description for fb18bba
  dependabot[bot]

  authored
  fb18bba

  Copy full SHA for fb18bba

Commits on Mar 21, 2024

• chore(deps): bump github.com/docker/docker (sigstore#3612)

  Show description for 887f36b
  dependabot[bot]

  authored
  887f36b

  Copy full SHA for 887f36b

• Put secrets on github organizations (sigstore#3567)

  Show description for 1ea2154
  

  fnxpt

  and

  Marlon Pina Tojal

  authored
  1ea2154

  Copy full SHA for 1ea2154

Commits on Mar 22, 2024

• Update CHANGELOG for v1.13.6 (sigstore#3618)

  Show description for 7d56594
  haydentherapper

  authored
  7d56594

  Copy full SHA for 7d56594

Commits on Mar 25, 2024

• chore(deps): bump the actions group with 2 updates (sigstore#3623)

  Show description for 45ebf49
  dependabot[bot]

  authored
  45ebf49

  Copy full SHA for 45ebf49

• chore(deps): bump github.com/xanzy/go-gitlab from 0.100.0 to 0.101.0 (sigstore#3624)

  Show description for c18b043
  dependabot[bot]

  authored
  c18b043

  Copy full SHA for c18b043

• chore(deps): bump google.golang.org/api from 0.170.0 to 0.171.0 (sigstore#3626)

  Show description for 45f626a
  dependabot[bot]

  authored
  45f626a

  Copy full SHA for 45f626a

Commits on Mar 26, 2024

• chore(deps): bump go.step.sm/crypto from 0.43.1 to 0.44.1 (sigstore#3625)

  Show description for ba9898c
  dependabot[bot]

  authored
  ba9898c

  Copy full SHA for ba9898c

Commits on Mar 29, 2024

• Clean up and clarify e2e scripts (sigstore#3628)

  Show description for abfd1cd
  cmurphy

  authored
  abfd1cd

  Copy full SHA for abfd1cd

Commits on Mar 31, 2024

• Remove cross.yaml workflow (sigstore#3629)

  Show description for 4824d6c
  cmurphy

  authored
  4824d6c

  Copy full SHA for 4824d6c

Commits on Apr 1, 2024

• chore(deps): bump the gomod group with 6 updates (sigstore#3633)

  Show description for fe51982
  dependabot[bot]

  authored
  fe51982

  Copy full SHA for fe51982

• chore(deps): bump google.golang.org/api from 0.171.0 to 0.172.0 (sigstore#3635)

  Show description for 52233da
  dependabot[bot]

  authored
  52233da

  Copy full SHA for 52233da

• chore(deps): bump github.com/open-policy-agent/opa from 0.62.1 to 0.63.0 (sigstore#3636)

  Show description for d55b6f2
  dependabot[bot]

  authored
  d55b6f2

  Copy full SHA for d55b6f2

Commits on Apr 2, 2024

• chore(deps): bump the actions group with 1 update (sigstore#3637)

  Show description for 700da0a
  dependabot[bot]

  authored
  700da0a

  Copy full SHA for 700da0a

Commits on Apr 3, 2024

• feat: add OVHcloud MPR registry tested with cosign (sigstore#3639)

  Show description for 6206f5a
  scraly

  authored
  6206f5a

  Copy full SHA for 6206f5a

Commits on Apr 4, 2024

• Fixing issue 3642 (sigstore#3643)

  Show description for 7001e82
  Mukuls77

  authored
  7001e82

  Copy full SHA for 7001e82

• Fixing issue 3642 (sigstore#3644)

  Mukuls77

  authored
  fa504b4

  Copy full SHA for fa504b4

Commits on Apr 5, 2024

• add oci bundle spec (sigstore#3622)

  Show description for 3c8170a
  bdehamer

  authored
  3c8170a

  Copy full SHA for 3c8170a

Commits on Apr 8, 2024

• chore(deps): bump the actions group with 2 updates (sigstore#3647)

  Show description for f7d867b
  dependabot[bot]

  authored
  f7d867b

  Copy full SHA for f7d867b

• chore(deps): bump the gomod group with 3 updates (sigstore#3648)

  Show description for d56c9e8
  dependabot[bot]

  authored
  d56c9e8

  Copy full SHA for d56c9e8

• chore(deps): bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 (sigstore#3650)

  Show description for 2d13b65
  dependabot[bot]

  authored
  2d13b65

  Copy full SHA for 2d13b65

• chore(deps): bump golang.org/x/term from 0.18.0 to 0.19.0 (sigstore#3651)

  Show description for eba7c59
  dependabot[bot]

  authored
  eba7c59

  Copy full SHA for eba7c59

• chore(deps): bump github.com/xanzy/go-gitlab from 0.101.0 to 0.102.0 (sigstore#3652)

  Show description for 48858a2
  dependabot[bot]

  authored
  48858a2

  Copy full SHA for 48858a2

Commits on Apr 9, 2024

• chore(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 (sigstore#3655)

  Show description for 430c985
  dependabot[bot]

  authored
  430c985

  Copy full SHA for 430c985

• chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.1.7 to 2.2.0 (sigstore#3653)

  Show description for c95439b
  dependabot[bot]

  authored
  c95439b

  Copy full SHA for c95439b

• chore(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 (sigstore#3649)

  Show description for d0b9861
  dependabot[bot]

  authored
  d0b9861

  Copy full SHA for d0b9861

• Refactor e2e-tests.yml workflow (sigstore#3627)

  Show description for 302aee6
  cmurphy

  authored
  302aee6

  Copy full SHA for 302aee6

Commits on Apr 10, 2024

• Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (sigstore#3661)

  Show description for 629f5f8
  haydentherapper

  authored
  629f5f8

  Copy full SHA for 629f5f8

• Add v2.2.4 changelog (sigstore#3662)

  Show description for fb651b4
  haydentherapper

  authored
  fb651b4

  Copy full SHA for fb651b4

Commits on Apr 11, 2024

• bump scaffolding to latest release for testing (sigstore#3663)

  Show description for b15eefa
  bobcallaway

  authored
  b15eefa

  Copy full SHA for b15eefa

• fix latest tag not being created and add latest to the dev image as well and go updates (sigstore#3664)

  Show description for e23dcd1
  cpanato

  authored
  e23dcd1

  Copy full SHA for e23dcd1

Commits on Apr 12, 2024

• chore(deps): bump sigs.k8s.io/release-utils from 0.7.7 to 0.8.1 (sigstore#3656)

  Show description for db6d13f
  dependabot[bot]

  authored
  db6d13f

  Copy full SHA for db6d13f

• switch to community repo of reusable-release (sigstore#3666)

  Show description for ba3d36d
  bobcallaway

  authored
  ba3d36d

  Copy full SHA for ba3d36d

Commits on Apr 15, 2024

• chore(deps): bump the actions group with 3 updates (sigstore#3668)

  dependabot[bot]

  authored
  ee4198d

  Copy full SHA for ee4198d

• chore(deps): bump go.step.sm/crypto in the gomod group (sigstore#3667)

  Show description for e036af8
  dependabot[bot]

  authored
  e036af8

  Copy full SHA for e036af8

Commits on Apr 17, 2024

• add registry options to cosign save (sigstore#3645)

  Show description for 02b1b26
  JasonPowr

  authored
  02b1b26

  Copy full SHA for 02b1b26

Commits on Apr 22, 2024

• chore(deps): bump the actions group with 2 updates (sigstore#3676)

  Show description for 59f0099
  dependabot[bot]

  authored
  59f0099

  Copy full SHA for 59f0099

Commits on Apr 23, 2024

• chore(deps): bump go.step.sm/crypto in the gomod group (sigstore#3672)

  Show description for 3102b3c
  dependabot[bot]

  authored
  3102b3c

  Copy full SHA for 3102b3c

• chore(deps): bump google.golang.org/api from 0.172.0 to 0.176.0 (sigstore#3673)

  Show description for 5f13e63
  dependabot[bot]

  authored
  5f13e63

  Copy full SHA for 5f13e63

• chore(deps): bump github.com/xanzy/go-gitlab from 0.102.0 to 0.103.0 (sigstore#3674)

  Show description for e4197bd
  dependabot[bot]

  authored
  e4197bd

  Copy full SHA for e4197bd

Commits on Apr 29, 2024

• fix: close attestationFile (sigstore#3679)

  Show description for d33bbc3
  testwill

  authored
  d33bbc3

  Copy full SHA for d33bbc3

• chore(deps): bump actions/checkout in the actions group (sigstore#3680)

  Show description for 69f3478
  dependabot[bot]

  authored
  69f3478

  Copy full SHA for 69f3478

• chore(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.1.0 (sigstore#3681)

  Show description for cd018e9
  dependabot[bot]

  authored
  cd018e9

  Copy full SHA for cd018e9

• chore(deps): bump the gomod group with 3 updates (sigstore#3682)

  Show description for d247bad
  dependabot[bot]

  authored
  d247bad

  Copy full SHA for d247bad

• chore(deps): bump github.com/open-policy-agent/opa from 0.63.0 to 0.64.1 (sigstore#3683)

  Show description for e9a3739
  dependabot[bot]

  authored
  e9a3739

  Copy full SHA for e9a3739

Commits on Apr 30, 2024

• Refactor KMS E2E tests (sigstore#3684)

  Show description for fa17fab
  cmurphy

  authored
  fa17fab

  Copy full SHA for fa17fab

Commits on May 6, 2024

• chore(deps): bump the actions group with 3 updates (sigstore#3686)

  Show description for 0976894
  dependabot[bot]

  authored
  0976894

  Copy full SHA for 0976894

• chore(deps): bump google.golang.org/api from 0.176.1 to 0.177.0 (sigstore#3687)

  Show description for 2d398bc
  dependabot[bot]

  authored
  2d398bc

  Copy full SHA for 2d398bc

• chore(deps): bump github.com/xanzy/go-gitlab from 0.103.0 to 0.104.0 (sigstore#3688)

  Show description for f0fd640
  dependabot[bot]

  authored
  f0fd640

  Copy full SHA for f0fd640

• chore(deps): bump golang.org/x/oauth2 from 0.19.0 to 0.20.0 (sigstore#3691)

  Show description for b3448d4
  dependabot[bot]

  authored
  b3448d4

  Copy full SHA for b3448d4

Commits on May 13, 2024

• chore(deps): bump google.golang.org/api from 0.177.0 to 0.180.0 (sigstore#3698)

  Show description for 50c67f0
  dependabot[bot]

  authored
  50c67f0

  Copy full SHA for 50c67f0

• chore(deps): bump the actions group with 3 updates (sigstore#3694)

  Show description for 17c9af7
  dependabot[bot]

  authored
  17c9af7

  Copy full SHA for 17c9af7

• Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (sigstore#3693)

  Show description for d2766d8
  codysoyland

  authored
  d2766d8

  Copy full SHA for d2766d8

• chore(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (sigstore#3695)

  Show description for 40e6740
  dependabot[bot]

  authored
  40e6740

  Copy full SHA for 40e6740

• chore(deps): bump sigs.k8s.io/release-utils in the gomod group (sigstore#3696)

  Show description for 8b498bd
  dependabot[bot]

  authored
  8b498bd

  Copy full SHA for 8b498bd

• chore(deps): bump github.com/xanzy/go-gitlab from 0.104.0 to 0.105.0 (sigstore#3697)

  Show description for 1211157
  dependabot[bot]

  authored
  1211157

  Copy full SHA for 1211157

Commits on May 17, 2024

• Refactor insecure registry E2E tests (sigstore#3701)

  Show description for 62742a1
  cmurphy

  authored
  62742a1

  Copy full SHA for 62742a1

• Remove KMS E2E test script (sigstore#3702)

  Show description for 2e65241
  cmurphy

  authored
  2e65241

  Copy full SHA for 2e65241

Commits on May 20, 2024

• Remove sign_blob_test.sh test (sigstore#3707)

  Show description for 645636e
  cmurphy

  authored
  645636e

  Copy full SHA for 645636e

• Add README.md for tests (sigstore#3708)

  Show description for 2bb2e88
  cmurphy

  authored
  2bb2e88

  Copy full SHA for 2bb2e88

Commits on May 21, 2024

• chore(deps): bump the actions group with 3 updates (sigstore#3706)

  Show description for 6e2fcd6
  dependabot[bot]

  authored
  6e2fcd6

  Copy full SHA for 6e2fcd6

• chore(deps): bump google.golang.org/api from 0.180.0 to 0.181.0 (sigstore#3703)

  Show description for 2359dbd
  dependabot[bot]

  authored
  2359dbd

  Copy full SHA for 2359dbd

• chore(deps): bump go.step.sm/crypto from 0.44.8 to 0.45.0 (sigstore#3704)

  Show description for 5ae2e31
  dependabot[bot]

  authored
  5ae2e31

  Copy full SHA for 5ae2e31

Commits on May 27, 2024

• chore(deps): bump go.step.sm/crypto in the gomod group (sigstore#3710)

  Show description for 550dbf9
  dependabot[bot]

  authored
  550dbf9

  Copy full SHA for 550dbf9

Commits on Jun 3, 2024

• chore(deps): bump github.com/open-policy-agent/opa from 0.64.1 to 0.65.0 (sigstore#3714)

  Show description for e623217
  dependabot[bot]

  authored
  e623217

  Copy full SHA for e623217

• chore(deps): bump the gomod group with 5 updates (sigstore#3713)

  Show description for 6b6acc2
  dependabot[bot]

  authored
  6b6acc2

  Copy full SHA for 6b6acc2

• chore(deps): bump google.golang.org/api from 0.181.0 to 0.182.0 (sigstore#3716)

  Show description for f3225b3
  dependabot[bot]

  authored
  f3225b3

  Copy full SHA for f3225b3

• chore(deps): bump go.step.sm/crypto from 0.45.1 to 0.46.0 (sigstore#3717)

  Show description for d275a27
  dependabot[bot]

  authored
  d275a27

  Copy full SHA for d275a27

Commits on Jun 10, 2024

• chore(deps): bump cuelang.org/go from 0.8.2 to 0.9.0 (sigstore#3725)

  dependabot[bot]

  authored
  098e892

  Copy full SHA for 098e892

• chore(deps): bump google.golang.org/api from 0.182.0 to 0.183.0 (sigstore#3726)

  dependabot[bot]

  authored
  eae74ff

  Copy full SHA for eae74ff

Commits on Jun 11, 2024

• chore(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0 (sigstore#3721)

  Show description for 5bbccd5
  dependabot[bot]

  authored
  5bbccd5

  Copy full SHA for 5bbccd5

• Add debug providers command. (sigstore#3728)

  Show description for ca1733a
  wlynch

  authored
  ca1733a

  Copy full SHA for ca1733a

• chore(deps): bump go.step.sm/crypto from 0.46.0 to 0.47.0 (sigstore#3723)

  Show description for e72f472
  dependabot[bot]

  authored
  e72f472

  Copy full SHA for e72f472

Commits on Jun 18, 2024

• Bump scaffolding version (sigstore#3736)

  Show description for 98fd801
  haydentherapper

  authored
  98fd801

  Copy full SHA for 98fd801

• bump builder image to ise go1.21.11 and update goreleaser to version 2 (sigstore#3737)

  Show description for ee521e4
  cpanato

  authored
  ee521e4

  Copy full SHA for ee521e4

• chore(deps): bump google.golang.org/api from 0.183.0 to 0.184.0 (sigstore#3734)

  Show description for 598c734
  dependabot[bot]

  authored
  598c734

  Copy full SHA for 598c734

• chore(deps): bump the actions group across 1 directory with 5 updates (sigstore#3738)

  Show description for e5937c5
  dependabot[bot]

  authored
  e5937c5

  Copy full SHA for e5937c5

• chore(deps): bump the gomod group with 4 updates (sigstore#3731)

  Show description for 2525c93
  dependabot[bot]

  authored
  2525c93

  Copy full SHA for 2525c93

• chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.2.0 to 2.3.0 (sigstore#3732)

  Show description for 9a9447d
  dependabot[bot]

  authored
  9a9447d

  Copy full SHA for 9a9447d

• chore(deps): bump github.com/spf13/viper from 1.18.2 to 1.19.0 (sigstore#3715)

  Show description for 9f18570
  dependabot[bot]

  authored
  9f18570

  Copy full SHA for 9f18570

• Make config layers in ociremote mountable (sigstore#3741)

  Show description for 5209b38
  jonjohnsonjr

  authored
  5209b38

  Copy full SHA for 5209b38

Commits on Jun 19, 2024

• upgrade to go1.22 (sigstore#3739)

  Show description for 9e3811b
  cpanato

  authored
  9e3811b

  Copy full SHA for 9e3811b

• adds tsa cert chain check for env var or tuf targets. (sigstore#3600)

  Show description for 2b538f8
  ianhundere

  authored
  2b538f8

  Copy full SHA for 2b538f8

Commits on Jun 25, 2024

• chore(deps): bump github.com/hashicorp/go-retryablehttp (sigstore#3749)

  dependabot[bot]

  authored
  68d38a8

  Copy full SHA for 68d38a8

• chore(deps): bump github.com/xanzy/go-gitlab from 0.105.0 to 0.106.0 (sigstore#3748)

  Show description for 8859e29
  dependabot[bot]

  authored
  8859e29

  Copy full SHA for 8859e29

• chore(deps): bump google.golang.org/api from 0.184.0 to 0.185.0 (sigstore#3747)

  Show description for e924bc8
  dependabot[bot]

  authored
  e924bc8

  Copy full SHA for e924bc8

• Fixing issue 3743 (sigstore#3744)

  Show description for 7c20052
  Meeki1l

  authored
  7c20052

  Copy full SHA for 7c20052

Commits on Jul 1, 2024

• add --ca-roots and --ca-intermediates flags to 'cosign verify' (sigstore#3464)

  Show description for 40fc15f
  dmitris

  authored
  40fc15f

  Copy full SHA for 40fc15f

• Set bundleVerified to true after Rekor verification (Resolves sigstore#3740) (sigstore#3745)

  Show description for 8b55af2
  maxlambrecht

  authored
  8b55af2

  Copy full SHA for 8b55af2

Commits on Jul 2, 2024

• chore(deps): bump google.golang.org/api from 0.185.0 to 0.186.0 (sigstore#3755)

  Show description for 7d74685
  dependabot[bot]

  authored
  7d74685

  Copy full SHA for 7d74685

• chore(deps): bump github.com/open-policy-agent/opa from 0.65.0 to 0.66.0 (sigstore#3756)

  Show description for 79db196
  dependabot[bot]

  authored
  79db196

  Copy full SHA for 79db196

Commits on Jul 3, 2024

• Update README.md to account for necessary new go version (sigstore#3764)

  Show description for 3d622d1
  bminahan73

  authored
  3d622d1

  Copy full SHA for 3d622d1

Commits on Jul 5, 2024

• General housekeeping and go updates (sigstore#3765)

  Show description for d05a120
  cpanato

  authored
  d05a120

  Copy full SHA for d05a120

• chore(deps): bump the gomod group across 1 directory with 7 updates (sigstore#3766)

  Show description for bf2067a
  

  dependabot[bot]

  and

  cpanato

  authored
  bf2067a

  Copy full SHA for bf2067a

Commits on Jul 8, 2024

• fix: extra whitespace in README.md (sigstore#3773)

  Show description for b310bc6
  hectorj2f

  authored
  b310bc6

  Copy full SHA for b310bc6

• chore(deps): bump go.step.sm/crypto from 0.47.1 to 0.48.1 (sigstore#3768)

  Show description for 58af4bb
  dependabot[bot]

  authored
  58af4bb

  Copy full SHA for 58af4bb

• chore(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 (sigstore#3771)

  Show description for e5afa56
  dependabot[bot]

  authored
  e5afa56

  Copy full SHA for e5afa56

• chore(deps): bump golang.org/x/term from 0.21.0 to 0.22.0 (sigstore#3770)

  Show description for 2dd32f6
  dependabot[bot]

  authored
  2dd32f6

  Copy full SHA for 2dd32f6

Commits on Jul 9, 2024

• chore(deps): bump sigs.k8s.io/release-utils in the gomod group (sigstore#3767)

  Show description for bc5f6c6
  dependabot[bot]

  authored
  bc5f6c6

  Copy full SHA for bc5f6c6

• factor out keyless verification certificate loading function (sigstore#3762)

  Show description for 811dba8
  dmitris

  authored
  811dba8

  Copy full SHA for 811dba8

Commits on Jul 10, 2024

• chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 (sigstore#3774)

  Show description for ca682f2
  dependabot[bot]

  authored
  ca682f2

  Copy full SHA for ca682f2

Commits on Jul 11, 2024

• add handling of keyless verification for all verify commands (sigstore#3761)

  Show description for bdcbf44
  dmitris

  authored
  bdcbf44

  Copy full SHA for bdcbf44

• Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (sigstore#3776)

  Show description for f7a5725
  dmitris

  authored
  f7a5725

  Copy full SHA for f7a5725

Commits on Jul 15, 2024

• chore(deps): bump the actions group across 1 directory with 2 updates (sigstore#3785)

  Show description for 13d3a56
  dependabot[bot]

  authored
  13d3a56

  Copy full SHA for 13d3a56

• chore(deps): bump go.step.sm/crypto from 0.48.1 to 0.50.0 (sigstore#3781)

  Show description for 4fd699c
  dependabot[bot]

  authored
  4fd699c

  Copy full SHA for 4fd699c

• chore(deps): bump google.golang.org/api from 0.187.0 to 0.188.0 (sigstore#3782)

  Show description for f9270c0
  dependabot[bot]

  authored
  f9270c0

  Copy full SHA for f9270c0

• chore(deps): bump github.com/google/go-containerregistry (sigstore#3783)

  Show description for 05026ee
  dependabot[bot]

  authored
  05026ee

  Copy full SHA for 05026ee

Commits on Jul 16, 2024

• chore(deps): bump github.com/sigstore/fulcio from 1.4.5 to 1.5.1 (sigstore#3784)

  Show description for 3c6c5c9
  dependabot[bot]

  authored
  3c6c5c9

  Copy full SHA for 3c6c5c9

• chore(deps): bump the gomod group with 5 updates (sigstore#3780)

  Show description for 4684fd6
  dependabot[bot]

  authored
  4684fd6

  Copy full SHA for 4684fd6

Commits on Jul 22, 2024

• chore(deps): bump github.com/google/go-containerregistry (sigstore#3790)

  dependabot[bot]

  authored
  20d4724

  Copy full SHA for 20d4724

• Add CHANGELOG for v2.3.0 (sigstore#3789)

  Show description for aeba473
  haydentherapper

  authored
  aeba473

  Copy full SHA for aeba473

• chore(deps): bump github.com/buildkite/agent/v3 from 3.74.1 to 3.75.1 (sigstore#3793)

  Show description for c6f89f8
  dependabot[bot]

  authored
  c6f89f8

  Copy full SHA for c6f89f8

• chore(deps): bump github.com/xanzy/go-gitlab from 0.106.0 to 0.107.0 (sigstore#3792)

  Show description for deed363
  dependabot[bot]

  authored
  deed363

  Copy full SHA for deed363

• chore(deps): bump google.golang.org/api from 0.188.0 to 0.189.0 (sigstore#3791)

  Show description for ffde21e
  dependabot[bot]

  authored
  ffde21e

  Copy full SHA for ffde21e

Commits on Jul 23, 2024

• Adding protobuf bundle support to sign-blob and attest-blob (sigstore#3752)

  Show description for c6cdf1b
  steiza

  authored
  c6cdf1b

  Copy full SHA for c6cdf1b

Commits on Jul 26, 2024

• Include SCT verification failure details in error message (sigstore#3799)

  Show description for 62a2cff
  bkabrda

  authored
  62a2cff

  Copy full SHA for 62a2cff

Commits on Jul 28, 2024

• bump scaffolding version in tests to 0.7.5 (sigstore#3800)

  bobcallaway

  authored
  98c2cab

  Copy full SHA for 98c2cab

Commits on Jul 29, 2024

• Add support for recording creation timestamp for cosign attest (sigstore#3797)

  Show description for 0406602
  

  zshorvath

  and

  Zsolt Horvath

  authored
  0406602

  Copy full SHA for 0406602

• Add new bundle support to verify-blob and verify-blob-attestation (sigstore#3796)

  Show description for b4cf37b
  steiza

  authored
  b4cf37b

  Copy full SHA for b4cf37b

• chore(deps): bump ossf/scorecard-action in the actions group (sigstore#3801)

  Show description for 973bcd1
  dependabot[bot]

  authored
  973bcd1

  Copy full SHA for 973bcd1

• chore(deps): bump github.com/open-policy-agent/opa from 0.66.0 to 0.67.0 (sigstore#3803)

  Show description for ec2480e
  dependabot[bot]

  authored
  ec2480e

  Copy full SHA for ec2480e

• chore(deps): bump sigs.k8s.io/release-utils in the gomod group (sigstore#3802)

  Show description for f40ad0f
  dependabot[bot]

  authored
  f40ad0f

  Copy full SHA for f40ad0f

Commits on Jul 30, 2024

• chore(deps): bump github.com/docker/docker (sigstore#3804)

  Show description for 06d1290
  dependabot[bot]

  authored
  06d1290

  Copy full SHA for 06d1290

Commits on Aug 6, 2024

• handle docker-compose v2, free up more space (sigstore#3809)

  Show description for 7e3c2f5
  bobcallaway

  authored
  7e3c2f5

  Copy full SHA for 7e3c2f5

• chore(deps): bump the actions group across 1 directory with 4 updates (sigstore#3818)

  Show description for b61b689
  dependabot[bot]

  authored
  b61b689

  Copy full SHA for b61b689

• chore(deps): bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (sigstore#3811)

  Show description for 71a4952
  dependabot[bot]

  authored
  71a4952

  Copy full SHA for 71a4952

• chore(deps): bump go.step.sm/crypto from 0.50.0 to 0.51.1 (sigstore#3812)

  Show description for 983a368
  dependabot[bot]

  authored
  983a368

  Copy full SHA for 983a368

• tidy up validate release script (sigstore#3817)

  Show description for 7bac5e9
  bobcallaway

  authored
  7bac5e9

  Copy full SHA for 7bac5e9

• chore(deps): bump golang.org/x/sync from 0.7.0 to 0.8.0 (sigstore#3814)

  Show description for e3a3914
  dependabot[bot]

  authored
  e3a3914

  Copy full SHA for e3a3914

• chore(deps): bump github.com/buildkite/agent/v3 from 3.75.1 to 3.76.2 (sigstore#3813)

  Show description for d0492cf
  dependabot[bot]

  authored
  d0492cf

  Copy full SHA for d0492cf

• move incremental builds per commit to GHCR instead of GCR (sigstore#3808)

  Show description for be43902
  bobcallaway

  authored
  be43902

  Copy full SHA for be43902

• chore(deps): bump google.golang.org/api from 0.189.0 to 0.190.0 (sigstore#3815)

  Show description for 2387b50
  dependabot[bot]

  authored
  2387b50

  Copy full SHA for 2387b50

• Conformance testing for cosign (sigstore#3806)

  Show description for fd0368a
  steiza

  authored
  fd0368a

  Copy full SHA for fd0368a

• Bump sigstore/sigstore (sigstore#3819)

  Show description for c346825
  haydentherapper

  authored
  c346825

  Copy full SHA for c346825

• Add login for GHCR (sigstore#3820)

  Show description for b5e7dc1
  haydentherapper

  authored
  b5e7dc1

  Copy full SHA for b5e7dc1

Commits on Aug 20, 2024

• Merge tag 'v2.4.0'

  Show description for 6b54010
  lance

  committed
  6b54010

  Copy full SHA for 6b54010

Commits on Sep 4, 2024

• chore(deps): bump github.com/docker/docker (sigstore#3823) (#242)

  Show description for 5cdc70c
  

  lance

  and

  dependabot[bot]

  committed
  5cdc70c

  Copy full SHA for 5cdc70c

• chore(pipelines): remove cosign hermetic builds

  Show description for 876c2f7
  lance

  committed
  876c2f7

  Copy full SHA for 876c2f7

• chore: remove git stash/pop from cosign build

  Show description for b69bf3b
  lance

  committed
  b69bf3b

  Copy full SHA for b69bf3b

• Merge branch 'main' into lance/update-to-2.4.0

  Show description for 899e9be
  lance

  authored
  899e9be

  Copy full SHA for 899e9be

• fixup: remove prefetch-input task

  Show description for a97db15
  lance

  committed
  a97db15

  Copy full SHA for a97db15