864457a58d
Bump to node24 runtime ( #692 )
...
Signed-off-by: Brian DeHamer <[email protected] [email protected]
2025-08-26 20:53:13 -07:00
Brian DeHamer and GitHub
57aa2b0928
bump actions/attest from v2.4.0 to v3.0.0 ( #691 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-08-26 16:57:36 -07:00
Brian DeHamer and GitHub
8ee716368b
refactor eslint config ( #690 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-08-26 16:57:28 -07:00
Brian DeHamer and GitHub
ff19f402b6
custom node max-http-header-size ( #687 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-08-25 13:52:01 -07:00
Brian DeHamer and GitHub
8bd83f1e05
pin workflow deps ( #683 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-08-14 15:13:49 -07:00
Brian DeHamer and GitHub
f650dec89e
update vulnerable deps ( #663 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-06-17 12:13:42 -07:00
Brian DeHamer and GitHub
e8998f9491
bump actions/attest from 2.3.0 to 2.4.0 ( #654 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-06-11 10:32:50 -07:00
Brian DeHamer and GitHub
d82e7cd0c7
offboard from eslint in superlinter ( #618 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-04-28 11:30:19 -07:00
Brian DeHamer and GitHub
db473fddc0
bump actions/attest from 2.2.1 to 2.3.0 ( #615 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-04-28 06:17:52 -07:00
Brian DeHamer and GitHub
c074443f1a
pin actions/attest reference by commit sha ( #493 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-03-05 11:07:49 -08:00
Brian DeHamer and GitHub
bd77c07785
bump predicate from 1.1.4 to 1.1.5 ( #485 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-02-27 06:53:28 -08:00
Brian DeHamer and GitHub
1176ef5569
bump @actions/attest from 1.5.0 to 1.6.0 ( #484 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-02-27 06:44:35 -08:00
Brian DeHamer and GitHub
f9eaf234fc
Bump actions/attest from 2.2.0 to 2.2.1 ( #481 )
...
* bump actions/attest from v2.2.0 to v2.2.1
Signed-off-by: Brian DeHamer <[email protected] [email protected] [email protected]
2025-02-26 12:57:26 -08:00
Brian DeHamer and GitHub
520d128f16
bump actions/attest from v2.1.0 to v2.2.0 ( #449 )
...
Includes support for the new subject-checksums input parameter
Signed-off-by: Brian DeHamer <[email protected]
2025-01-22 06:12:05 -08:00
Brian DeHamer and GitHub
5d2ced98e3
Add example of upload-artifaction integration ( #450 )
...
Signed-off-by: Brian DeHamer <[email protected]
2025-01-22 06:11:49 -08:00
Brian DeHamer and GitHub
3c016c14be
bump actions/attest from v2.1.0 to v2.2.0 ( #449 )
...
Includes support for the new subject-checksums input parameter
Signed-off-by: Brian DeHamer <[email protected]
2025-01-22 06:10:32 -08:00
Brian DeHamer and GitHub
f4b7552a12
bump eslint from 8.57.1 to 9.16.0 ( #418 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-12-16 07:08:45 -08:00
Brian DeHamer and GitHub
7668571508
add attestation-id and attestation-url outputs ( #415 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-12-09 13:43:06 -08:00
Brian DeHamer and GitHub
9ad33ffadd
add note about gh plans supporting attestations ( #414 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-12-09 10:46:36 -08:00
Brian DeHamer and GitHub
c4fbc64884
bump actions/attest from 2.0.0 to 2.0.1 ( #406 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-12-06 07:32:45 -08:00
Brian DeHamer and GitHub
619dbb2e03
bump actions/attest to v2.0.0 ( #321 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-12-04 07:53:34 -08:00
Brian DeHamer and GitHub
ef244123eb
bump predicate from 1.1.3 to 1.1.4 ( #310 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-11-05 11:21:00 -08:00
Brian DeHamer and GitHub
36fa7d009e
bump @actions/attest from 1.4.2 to 1.5.0 ( #309 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-11-05 08:49:24 -08:00
Brian DeHamer and GitHub
dff1ae69a7
prevent e2e workflows on forks ( #272 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-10-03 07:56:27 -07:00
Brian DeHamer and GitHub
0202c8c4b7
add prober badges to readme ( #242 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-09-23 08:36:16 -07:00
Brian DeHamer and GitHub
2de3600266
bump jose from 5.8.0 to 5.9.2 ( #239 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-09-16 11:58:51 -07:00
Brian DeHamer and GitHub
43c221e61f
add stamp tag to prober ( #227 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-09-05 16:25:38 -07:00
Brian DeHamer and GitHub
1c608d11d6
bump predicate from 1.1.2 to 1.1.3 ( #226 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-09-05 10:18:01 -07:00
Brian DeHamer and GitHub
f1185f1959
bump @actions/attest from 1.4.1 to 1.4.2 ( #225 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-09-05 10:04:26 -07:00
Brian DeHamer and GitHub
d438876305
add sigstore prober ( #224 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-09-05 06:54:45 -07:00
Brian DeHamer and GitHub
6149ea5740
bump actions/attest from 1.4.0 to 1.4.1 ( #209 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-08-22 12:06:47 -07:00
Brian DeHamer and GitHub
310b0a4a3b
update predicate action to 1.1.2 ( #197 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-08-09 09:10:48 -07:00
Brian DeHamer and GitHub
d58ddf9f24
dynamic construction of oidc issuer ( #195 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-08-09 07:42:36 -07:00
Brian DeHamer and GitHub
48f71d5e11
disable typescript-standard super linter ( #191 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-08-06 09:08:02 -07:00
Brian DeHamer and GitHub
210c191353
bump actions/attest from 1.3.3 to 1.4.0 ( #183 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-07-30 12:55:08 -07:00
Brian DeHamer and GitHub
1cb5f7640f
bump predicate action from 1.1.0 to 1.1.1 ( #182 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-07-30 12:41:18 -07:00
Brian DeHamer and GitHub
9ff3713ef1
Bump @actions/attest from 1.3.0 to 1.3.1 ( #181 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-07-30 11:16:49 -07:00
Brian DeHamer and GitHub
5e9cb68e95
bump actions/attest from 1.3.2 to 1.3.3 ( #152 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-07-09 10:06:28 -07:00
Brian DeHamer and GitHub
bdd51370e0
bump actions/attest from 1.3.1 to 1.3.2 ( #123 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-06-17 10:34:13 -07:00
Brian DeHamer and GitHub
995dfa6a20
add multi-subject examples to docs ( #118 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-06-17 06:50:59 -07:00
Brian DeHamer and GitHub
534b352d65
bump actions/attest from 1.3.0 to 1.3.1 ( #117 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-06-13 14:58:35 -07:00
Brian DeHamer and GitHub
3119152b59
bump predicate and actions/attest ( #116 )
...
* actions/attest-build-provenance/predicate from 1.0.0 to 1.1.0
* actions/attest from 1.2.0 to 1.3.0
Signed-off-by: Brian DeHamer <[email protected]
2024-06-12 16:28:09 -07:00
Brian DeHamer and GitHub
46e4ff8b82
bump @actions/attest from 1.2.1 to 1.3.0 ( #114 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-06-12 13:55:10 -07:00
Brian DeHamer and GitHub
8f1fc17a59
Revert "disable github action linting ( #54 )" ( #102 )
...
This reverts commit eab7f69317
2024-06-04 08:37:47 -07:00
Brian DeHamer and GitHub
49df96e17e
bump actions attest from 1.1.2 to 1.2.0 ( #101 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-06-03 10:49:35 -07:00
Brian DeHamer and GitHub
173725a120
bump actions/attest from 1.1.1 to 1.1.2 ( #79 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-05-16 12:41:02 -07:00
Brian DeHamer and GitHub
951c0c5f8e
update release documentation ( #66 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-05-10 10:47:07 -07:00
Brian DeHamer and GitHub
33e2a1e792
bump actions/attest from v1.1.0 to v1.1.1 ( #67 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-05-10 10:46:46 -07:00
Brian DeHamer and GitHub
f8d5ea8082
Bump actions/attest to v1.1.0 ( #65 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-05-06 12:15:22 -07:00
Brian DeHamer and GitHub
799a179922
add link to cosign bundle spec to readme ( #63 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-05-06 12:14:34 -07:00
Brian DeHamer and GitHub
eab7f69317
disable github action linting ( #54 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-05-01 13:59:05 -07:00
Brian DeHamer and GitHub
2e836a7eae
add readme link to gh docs ( #53 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-05-01 11:49:39 -07:00
Brian DeHamer and GitHub
66366d853b
add branding metadata ( #52 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-04-30 11:53:35 -07:00
Brian DeHamer and GitHub
897ed5eab6
fix reference to actions/attest ( #49 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-04-26 13:36:08 -07:00
Brian DeHamer and GitHub
c785889453
Bump predicate action from 0.2.0 to 1.0.0 ( #48 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-04-25 11:56:52 -07:00
Brian DeHamer and GitHub
db1dde0f27
Bump @actions/attest from 1.1.0 to 1.2.1 ( #47 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-04-25 11:50:52 -07:00
Brian DeHamer and GitHub
f59022ce92
bump actions/attest to v1.0.0 ( #46 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-04-25 11:46:44 -07:00
Brian DeHamer and GitHub
d44e43c3e9
disable dependabot updates for predicate action ( #37 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-04-02 10:57:47 -07:00
Brian DeHamer and GitHub
107023af50
bump predicate from 0.1.0 to 0.2.0 ( #34 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-03-29 08:56:27 -07:00
Brian DeHamer and GitHub
810042e79b
bump @actions/attest from 1.0.0 to 1.1.0 ( #33 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-03-29 08:47:10 -07:00
Brian DeHamer and GitHub
81345d9f11
Bump the npm-development group with 2 updates ( #28 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-03-14 09:42:48 -07:00
Brian DeHamer and GitHub
252cd7f619
pin actions/attest to v0.1.0 ( #25 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-03-05 13:11:46 -08:00
Brian DeHamer and GitHub
4520623c01
add release instructions ( #24 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-03-05 13:46:20 -05:00
Brian DeHamer and GitHub
10432055aa
pin predicate action to 0.1.0 ( #23 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-03-05 10:08:59 -08:00
Brian DeHamer and GitHub
56a361a160
rename internal actions (phase 2) ( #21 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-03-04 15:28:18 -08:00
Brian DeHamer and GitHub
430089937b
dev deps updates ( #19 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-03-04 15:25:44 -08:00
Brian DeHamer and GitHub
b67c00f7c0
rename internal actions (phase 1) ( #20 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-03-04 15:16:47 -08:00
Brian DeHamer and GitHub
b6400165aa
Force signing w/ private sigstore instance ( #16 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-02-29 16:29:00 -08:00
Brian DeHamer and GitHub
f47db5c9bc
update ref to sub-action ( #15 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-02-29 14:00:31 -08:00
Brian DeHamer and GitHub
fec1f1e733
refactor action inputs ( #14 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-02-29 11:57:49 -08:00
Brian DeHamer and GitHub
ee7eb81981
readme updates ( #12 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-02-28 18:11:21 -08:00
Brian DeHamer and GitHub
e821771fc5
remove coverage badge ( #7 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-02-26 14:52:26 -08:00
Brian DeHamer and GitHub
d6e451253f
reference @actions/attest package ( #10 )
...
Signed-off-by: Brian DeHamer <[email protected]
2024-02-26 14:49:08 -08:00
Brian DeHamer and GitHub
65ab87d920
Merge pull request #6 from actions/workflow-fixup
...
workflow fixup
2024-02-23 17:32:49 -08:00
Brian DeHamer
1c11bf4f81
workflow fixup
...
Signed-off-by: Brian DeHamer <[email protected]
2024-02-23 17:25:53 -08:00
Brian DeHamer and GitHub
f11c072673
Merge pull request #5 from actions/codeowners
...
add package-security team to CODEOWNERS
2024-02-23 17:24:34 -08:00
Brian DeHamer
9a8abc700e
add package-security team to CODEOWNERS
...
Signed-off-by: Brian DeHamer <[email protected]
2024-02-23 17:15:18 -08:00
Brian DeHamer and GitHub
5900a7371b
Merge pull request #4 from actions/dependabot/npm_and_yarn/npm-development-be7203e702
...
Bump the npm-development group with 3 updates
2024-02-23 17:10:11 -08:00
Brian DeHamer and GitHub
fa29c4012f
Merge pull request #1 from actions/dependabot/github_actions/super-linter/super-linter-6
...
Bump super-linter/super-linter from 5 to 6
2024-02-23 17:03:54 -08:00
Brian DeHamer
4b5ff813f7
fix permissions for codeql workflow
...
Signed-off-by: Brian DeHamer <[email protected]
2024-02-23 16:56:37 -08:00
Brian DeHamer
0dcaa8ed2b
fix formatting for release script
...
Signed-off-by: Brian DeHamer <[email protected]
2024-02-23 16:56:27 -08:00
Brian DeHamer
4c5a33ee04
fix fetch-depth for linter checkout
...
Signed-off-by: Brian DeHamer <[email protected]
2024-02-23 16:56:12 -08:00
Brian DeHamer and GitHub
1a4323c55b
Initial commit
2024-02-20 11:26:39 -08:00
