Commit Graph
70 Commits
Author SHA1 Message Date
Brian DeHamer 520d128f16 bump actions/attest from v2.1.0 to v2.2.0 (#449)
Includes support for the new subject-checksums input parameter

Signed-off-by: Brian DeHamer <[email protected]>
2025-01-22 06:12:05 -08:00
Brian DeHamer 5d2ced98e3 Add example of upload-artifaction integration (#450)
Signed-off-by: Brian DeHamer <[email protected]>
2025-01-22 06:11:49 -08:00
Brian DeHamer 3c016c14be bump actions/attest from v2.1.0 to v2.2.0 (#449)
Includes support for the new subject-checksums input parameter

Signed-off-by: Brian DeHamer <[email protected]>
2025-01-22 06:10:32 -08:00
Brian DeHamer f4b7552a12 bump eslint from 8.57.1 to 9.16.0 (#418)
Signed-off-by: Brian DeHamer <[email protected]>
2024-12-16 07:08:45 -08:00
Brian DeHamer 7668571508 add attestation-id and attestation-url outputs (#415)
Signed-off-by: Brian DeHamer <[email protected]>
2024-12-09 13:43:06 -08:00
Brian DeHamer 9ad33ffadd add note about gh plans supporting attestations (#414)
Signed-off-by: Brian DeHamer <[email protected]>
2024-12-09 10:46:36 -08:00
Brian DeHamer c4fbc64884 bump actions/attest from 2.0.0 to 2.0.1 (#406)
Signed-off-by: Brian DeHamer <[email protected]>
2024-12-06 07:32:45 -08:00
Brian DeHamer 619dbb2e03 bump actions/attest to v2.0.0 (#321)
Signed-off-by: Brian DeHamer <[email protected]>
2024-12-04 07:53:34 -08:00
Brian DeHamer ef244123eb bump predicate from 1.1.3 to 1.1.4 (#310)
Signed-off-by: Brian DeHamer <[email protected]>
2024-11-05 11:21:00 -08:00
Brian DeHamer 36fa7d009e bump @actions/attest from 1.4.2 to 1.5.0 (#309)
Signed-off-by: Brian DeHamer <[email protected]>
2024-11-05 08:49:24 -08:00
Brian DeHamer dff1ae69a7 prevent e2e workflows on forks (#272)
Signed-off-by: Brian DeHamer <[email protected]>
2024-10-03 07:56:27 -07:00
Brian DeHamer 0202c8c4b7 add prober badges to readme (#242)
Signed-off-by: Brian DeHamer <[email protected]>
2024-09-23 08:36:16 -07:00
Brian DeHamer 2de3600266 bump jose from 5.8.0 to 5.9.2 (#239)
Signed-off-by: Brian DeHamer <[email protected]>
2024-09-16 11:58:51 -07:00
Brian DeHamer 43c221e61f add stamp tag to prober (#227)
Signed-off-by: Brian DeHamer <[email protected]>
2024-09-05 16:25:38 -07:00
Brian DeHamer 1c608d11d6 bump predicate from 1.1.2 to 1.1.3 (#226)
Signed-off-by: Brian DeHamer <[email protected]>
2024-09-05 10:18:01 -07:00
Brian DeHamer f1185f1959 bump @actions/attest from 1.4.1 to 1.4.2 (#225)
Signed-off-by: Brian DeHamer <[email protected]>
2024-09-05 10:04:26 -07:00
Brian DeHamer d438876305 add sigstore prober (#224)
Signed-off-by: Brian DeHamer <[email protected]>
2024-09-05 06:54:45 -07:00
Brian DeHamer 6149ea5740 bump actions/attest from 1.4.0 to 1.4.1 (#209)
Signed-off-by: Brian DeHamer <[email protected]>
2024-08-22 12:06:47 -07:00
Brian DeHamer 310b0a4a3b update predicate action to 1.1.2 (#197)
Signed-off-by: Brian DeHamer <[email protected]>
2024-08-09 09:10:48 -07:00
Brian DeHamer d58ddf9f24 dynamic construction of oidc issuer (#195)
Signed-off-by: Brian DeHamer <[email protected]>
2024-08-09 07:42:36 -07:00
Brian DeHamer 48f71d5e11 disable typescript-standard super linter (#191)
Signed-off-by: Brian DeHamer <[email protected]>
2024-08-06 09:08:02 -07:00
Brian DeHamer 210c191353 bump actions/attest from 1.3.3 to 1.4.0 (#183)
Signed-off-by: Brian DeHamer <[email protected]>
2024-07-30 12:55:08 -07:00
Brian DeHamer 1cb5f7640f bump predicate action from 1.1.0 to 1.1.1 (#182)
Signed-off-by: Brian DeHamer <[email protected]>
2024-07-30 12:41:18 -07:00
Brian DeHamer 9ff3713ef1 Bump @actions/attest from 1.3.0 to 1.3.1 (#181)
Signed-off-by: Brian DeHamer <[email protected]>
2024-07-30 11:16:49 -07:00
Brian DeHamer 5e9cb68e95 bump actions/attest from 1.3.2 to 1.3.3 (#152)
Signed-off-by: Brian DeHamer <[email protected]>
2024-07-09 10:06:28 -07:00
Brian DeHamer bdd51370e0 bump actions/attest from 1.3.1 to 1.3.2 (#123)
Signed-off-by: Brian DeHamer <[email protected]>
2024-06-17 10:34:13 -07:00
Brian DeHamer 995dfa6a20 add multi-subject examples to docs (#118)
Signed-off-by: Brian DeHamer <[email protected]>
2024-06-17 06:50:59 -07:00
Brian DeHamer 534b352d65 bump actions/attest from 1.3.0 to 1.3.1 (#117)
Signed-off-by: Brian DeHamer <[email protected]>
2024-06-13 14:58:35 -07:00
Brian DeHamer 3119152b59 bump predicate and actions/attest (#116)
* actions/attest-build-provenance/predicate from 1.0.0 to 1.1.0
* actions/attest from 1.2.0 to 1.3.0

Signed-off-by: Brian DeHamer <[email protected]>
2024-06-12 16:28:09 -07:00
Brian DeHamer 46e4ff8b82 bump @actions/attest from 1.2.1 to 1.3.0 (#114)
Signed-off-by: Brian DeHamer <[email protected]>
2024-06-12 13:55:10 -07:00
Brian DeHamer 8f1fc17a59 Revert "disable github action linting (#54)" (#102)
This reverts commit eab7f69317.
2024-06-04 08:37:47 -07:00
Brian DeHamer 49df96e17e bump actions attest from 1.1.2 to 1.2.0 (#101)
Signed-off-by: Brian DeHamer <[email protected]>
2024-06-03 10:49:35 -07:00
Brian DeHamer 173725a120 bump actions/attest from 1.1.1 to 1.1.2 (#79)
Signed-off-by: Brian DeHamer <[email protected]>
2024-05-16 12:41:02 -07:00
Brian DeHamer 951c0c5f8e update release documentation (#66)
Signed-off-by: Brian DeHamer <[email protected]>
2024-05-10 10:47:07 -07:00
Brian DeHamer 33e2a1e792 bump actions/attest from v1.1.0 to v1.1.1 (#67)
Signed-off-by: Brian DeHamer <[email protected]>
2024-05-10 10:46:46 -07:00
Brian DeHamer f8d5ea8082 Bump actions/attest to v1.1.0 (#65)
Signed-off-by: Brian DeHamer <[email protected]>
2024-05-06 12:15:22 -07:00
Brian DeHamer 799a179922 add link to cosign bundle spec to readme (#63)
Signed-off-by: Brian DeHamer <[email protected]>
2024-05-06 12:14:34 -07:00
Brian DeHamer eab7f69317 disable github action linting (#54)
Signed-off-by: Brian DeHamer <[email protected]>
2024-05-01 13:59:05 -07:00
Brian DeHamer 2e836a7eae add readme link to gh docs (#53)
Signed-off-by: Brian DeHamer <[email protected]>
2024-05-01 11:49:39 -07:00
Brian DeHamer 66366d853b add branding metadata (#52)
Signed-off-by: Brian DeHamer <[email protected]>
2024-04-30 11:53:35 -07:00
Brian DeHamer 897ed5eab6 fix reference to actions/attest (#49)
Signed-off-by: Brian DeHamer <[email protected]>
2024-04-26 13:36:08 -07:00
Brian DeHamer c785889453 Bump predicate action from 0.2.0 to 1.0.0 (#48)
Signed-off-by: Brian DeHamer <[email protected]>
2024-04-25 11:56:52 -07:00
Brian DeHamer db1dde0f27 Bump @actions/attest from 1.1.0 to 1.2.1 (#47)
Signed-off-by: Brian DeHamer <[email protected]>
2024-04-25 11:50:52 -07:00
Brian DeHamer f59022ce92 bump actions/attest to v1.0.0 (#46)
Signed-off-by: Brian DeHamer <[email protected]>
2024-04-25 11:46:44 -07:00
Brian DeHamer d44e43c3e9 disable dependabot updates for predicate action (#37)
Signed-off-by: Brian DeHamer <[email protected]>
2024-04-02 10:57:47 -07:00
Brian DeHamer 107023af50 bump predicate from 0.1.0 to 0.2.0 (#34)
Signed-off-by: Brian DeHamer <[email protected]>
2024-03-29 08:56:27 -07:00
Brian DeHamer 810042e79b bump @actions/attest from 1.0.0 to 1.1.0 (#33)
Signed-off-by: Brian DeHamer <[email protected]>
2024-03-29 08:47:10 -07:00
Brian DeHamer 81345d9f11 Bump the npm-development group with 2 updates (#28)
Signed-off-by: Brian DeHamer <[email protected]>
2024-03-14 09:42:48 -07:00
Brian DeHamer 252cd7f619 pin actions/attest to v0.1.0 (#25)
Signed-off-by: Brian DeHamer <[email protected]>
2024-03-05 13:11:46 -08:00
Brian DeHamer 4520623c01 add release instructions (#24)
Signed-off-by: Brian DeHamer <[email protected]>
2024-03-05 13:46:20 -05:00
Brian DeHamer 10432055aa pin predicate action to 0.1.0 (#23)
Signed-off-by: Brian DeHamer <[email protected]>
2024-03-05 10:08:59 -08:00
Brian DeHamer 56a361a160 rename internal actions (phase 2) (#21)
Signed-off-by: Brian DeHamer <[email protected]>
2024-03-04 15:28:18 -08:00
Brian DeHamer 430089937b dev deps updates (#19)
Signed-off-by: Brian DeHamer <[email protected]>
2024-03-04 15:25:44 -08:00
Brian DeHamer b67c00f7c0 rename internal actions (phase 1) (#20)
Signed-off-by: Brian DeHamer <[email protected]>
2024-03-04 15:16:47 -08:00
Brian DeHamer b6400165aa Force signing w/ private sigstore instance (#16)
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-29 16:29:00 -08:00
Brian DeHamer f47db5c9bc update ref to sub-action (#15)
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-29 14:00:31 -08:00
Brian DeHamer fec1f1e733 refactor action inputs (#14)
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-29 11:57:49 -08:00
Brian DeHamer ee7eb81981 readme updates (#12)
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-28 18:11:21 -08:00
Brian DeHamer e821771fc5 remove coverage badge (#7)
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-26 14:52:26 -08:00
Brian DeHamer d6e451253f reference @actions/attest package (#10)
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-26 14:49:08 -08:00
Brian DeHamer 65ab87d920 Merge pull request #6 from actions/workflow-fixup
workflow fixup
2024-02-23 17:32:49 -08:00
Brian DeHamer 1c11bf4f81 workflow fixup
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-23 17:25:53 -08:00
Brian DeHamer f11c072673 Merge pull request #5 from actions/codeowners
add package-security team to CODEOWNERS
2024-02-23 17:24:34 -08:00
Brian DeHamer 9a8abc700e add package-security team to CODEOWNERS
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-23 17:15:18 -08:00
Brian DeHamer 5900a7371b Merge pull request #4 from actions/dependabot/npm_and_yarn/npm-development-be7203e702
Bump the npm-development group with 3 updates
2024-02-23 17:10:11 -08:00
Brian DeHamer fa29c4012f Merge pull request #1 from actions/dependabot/github_actions/super-linter/super-linter-6
Bump super-linter/super-linter from 5 to 6
2024-02-23 17:03:54 -08:00
Brian DeHamer 4b5ff813f7 fix permissions for codeql workflow
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-23 16:56:37 -08:00
Brian DeHamer 0dcaa8ed2b fix formatting for release script
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-23 16:56:27 -08:00
Brian DeHamer 4c5a33ee04 fix fetch-depth for linter checkout
Signed-off-by: Brian DeHamer <[email protected]>
2024-02-23 16:56:12 -08:00
Brian DeHamer 1a4323c55b Initial commit 2024-02-20 11:26:39 -08:00