actions/attest
1
0
Fork 0
Code Issues Pull Requests Actions 647 Packages Projects Releases Wiki Activity
175 Commits 24 Branches 30 Tags
5dc9c4c39209afe40ea7686e40fed13efce8e60d
Commit Graph
79 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Brian DeHamerandGitHub ce27ba3b4a bump package version to 2.4.0 (#253) 
Signed-off-by: Brian DeHamer <[email protected]>
 2025-06-11 10:16:56 -07:00
Brian DeHamerandGitHub 5ea2571690 offboard from eslint in superlinter (#236) 
Signed-off-by: Brian DeHamer <[email protected]>
 2025-04-28 11:27:33 -07:00
Brian DeHamerandGitHub afd6382543 Bump @sigstore/oci from 0.4.0 to 0.5.0 (#235) 
* bump @sigstore/oci from 0.4.0 to 0.5.0

Signed-off-by: Brian DeHamer <[email protected]>

* bump package version to 2.3.0

Signed-off-by: Brian DeHamer <[email protected]>

* update @babel/helpers from 7.22.13 to 7.27.0

Signed-off-by: Brian DeHamer <[email protected]>

---------

Signed-off-by: Brian DeHamer <[email protected]>
 2025-04-25 15:46:24 -07:00
Brian DeHamerandGitHub a63cfcc7d1 bump @actions/attest from 1.5.0 to 1.6.0 (#217) 
* bump @actions/attest from 1.5.0 to 1.6.0

Signed-off-by: Brian DeHamer <[email protected]>

* pin superlinter to v7.2.1

Signed-off-by: Brian DeHamer <[email protected]>

---------

Signed-off-by: Brian DeHamer <[email protected]>
 2025-02-26 10:41:20 -08:00
Brian DeHamerandGitHub 3ccffae6dc bump undici from 5.28.4 to 5.28.5 (#208) 
Signed-off-by: Brian DeHamer <[email protected]>
 2025-01-28 08:16:51 -08:00
Brian DeHamerandGitHub caa5c7e0da clarify plans supporting artifact attestations (#202) 
Signed-off-by: Brian DeHamer <[email protected]>
 2025-01-22 06:13:06 -08:00
Brian DeHamerandGitHub 0fae568887 bump version from 2.1.0 to 2.2.0 (#201) 
Signed-off-by: Brian DeHamer <[email protected]>
 2025-01-21 10:39:42 -08:00
Brian DeHamerandGitHub 38bcf9b1c5 New subject-checksums input param (#198) 
* new subject-checksums input param

Signed-off-by: Brian DeHamer <[email protected]>

* check for valid hex string for digest

Signed-off-by: Brian DeHamer <[email protected]>

---------

Signed-off-by: Brian DeHamer <[email protected]>
 2025-01-21 10:32:02 -08:00
Brian DeHamerandGitHub bfa7e6911b Update eslint from 8.x to 9.x (#185) 
* remove eslint prettier plugins

Signed-off-by: Brian DeHamer <[email protected]>

* eslint upgrade

Signed-off-by: Brian DeHamer <[email protected]>

* source fixup

Signed-off-by: Brian DeHamer <[email protected]>

---------

Signed-off-by: Brian DeHamer <[email protected]>
 2024-12-13 15:25:52 -08:00
Brian DeHamerandGitHub d94b522220 Fix docs for attestation-url output (#183) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-12-09 13:42:58 -08:00
Brian DeHamerandGitHub 63d2e98e26 add note about gh plans supporting attestations (#182) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-12-09 10:46:52 -08:00
Brian DeHamerandGitHub 94d0d43131 add attestation-id and attestation-url outputs (#181) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-12-09 09:56:33 -08:00
Brian DeHamerandGitHub 65e34a8aa7 deduplicate subjects before adding to statement (#180) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-12-06 07:14:14 -08:00
Brian DeHamerandGitHub a2d6fee37e readme updates for v2 release (#173) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-11-21 12:53:27 -08:00
Brian DeHamerandGitHub 85e94cb741 support multi-subject attestations (#164) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-11-05 09:16:07 -08:00
Brian DeHamerandGitHub b485edd412 bump @sigstore/oci from 0.3.7 to 0.4.0 (#163) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-11-04 09:41:46 -08:00
Brian DeHamerandGitHub dd499c2535 bump @actions/attest from 1.4.1 to 1.5.0 (#162) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-11-01 12:08:32 -07:00
Brian DeHamerandGitHub 67422f5511 Bump @actions/attest from 1.3.1 to 1.4.1 (#127) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-08-22 10:29:29 -07:00
Brian DeHamerandGitHub fa63d16379 disable typescript-standard super linter (#117) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-08-06 09:08:10 -07:00
Brian DeHamerandGitHub 2da0b13672 bump @actions/attest from 1.3.0 to 1.3.1 (#111) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-07-30 12:34:04 -07:00
Brian DeHamerandGitHub 97f7cf8914 add show-summary input (#108) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-07-30 11:27:18 -07:00
Brian DeHamerandGitHub f1338058bc format summary output as list (#105) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-07-24 14:31:01 -07:00
Brian DeHamerandGitHub 7305951e90 bump package version to 1.3.3 (#102) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-07-09 08:21:58 -07:00
Brian DeHamerandGitHub 68a047fd01 bugfix for glob exclude patterns (#100) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-07-09 07:55:19 -07:00
Brian DeHamerGitHubMeredith Lancaster
 		be7daec55a add multi-subject example to docs (#96) 
* add multi-subject example to docs

Signed-off-by: Brian DeHamer <[email protected]>

* Update README.md

Co-authored-by: Meredith Lancaster <[email protected]>

* Update README.md

Co-authored-by: Meredith Lancaster <[email protected]>

---------

Signed-off-by: Brian DeHamer <[email protected]>
Co-authored-by: Meredith Lancaster <[email protected]>
 2024-06-19 15:06:47 -07:00
Brian DeHamerandGitHub 8afbcf6e5e increase timeout for OCI operations (#92) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-06-17 06:51:46 -07:00
Brian DeHamerandGitHub 0fdba851bc bump @sigstore/oci from 0.3.6 to 0.3.7 (#90) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-06-13 14:22:50 -07:00
Brian DeHamerandGitHub b24527d9cb Bump @actions/attest from 1.2.1 to 1.3.0 (#89) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-06-12 13:17:25 -07:00
Brian DeHamerandGitHub 65e3b8bbb5 bump @sigstore/oci to 0.3.6 (#88) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-06-12 11:27:41 -07:00
Brian DeHamerandGitHub 805ae990d5 Revert "disable github action linting (#49)" (#85) 
This reverts commit 74e71f701d.
 2024-06-04 08:37:19 -07:00
Brian DeHamerandGitHub 32795ed917 bump package version to 1.2.0 (#81) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-06-03 10:10:05 -07:00
Brian DeHamerandGitHub 4fa34e85c5 enforce 16MB limit on predicate size (#80) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-06-03 09:41:25 -07:00
Brian DeHamerandGitHub 9e752e3d76 batch processing w/ exponential backoff (#79) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-06-03 07:56:25 -07:00
Brian DeHamerandGitHub 5b17eb7cb0 fix bug w/ private-signing input (#77) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-28 13:26:14 -07:00
Brian DeHamerandGitHub faa6467995 refactor core attestation logic (#73) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-28 11:00:03 -07:00
Brian DeHamerandGitHub 3ff4eb4c69 centralize collection of action inputs (#72) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-24 11:01:44 -07:00
Brian DeHamerandGitHub 074a7714de bump @sigstore/oci from 0.3.3 to 0.3.4 (#71) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-23 08:32:51 -07:00
Brian DeHamerandGitHub 80d9f23382 process subjects in batches (#67) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-22 07:55:00 -07:00
Brian DeHamerandGitHub 12c083815e Bump @sigstore/oci from 0.3.2 to 0.3.3 (#66) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-16 11:25:01 -07:00
Brian DeHamerandGitHub 38ff958ab6 downcase subject name for OCI images (#63) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-14 08:11:10 -07:00
Brian DeHamerandGitHub 3f67a24e31 bump @sigstore/oci from 0.3.0 to 0.3.2 (#61) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-10 08:10:56 -07:00
Brian DeHamerandGitHub e259ee2285 prep 1.1.1 release (#60) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-09 12:34:33 -07:00
Brian DeHamerandGitHub 58fa41a101 send api errors to gha debug log (#59) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-09 12:34:14 -07:00
Brian DeHamerandGitHub b0d8b47eb7 include more detail in error logging (#58) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-09 12:34:01 -07:00
Brian DeHamerandGitHub 9b22bf5c9f bump @sigstore/sign from 2.3.0 to 2.3.1 (#57) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-09 12:33:44 -07:00
Brian DeHamerandGitHub 9cbbc78ff9 update release documentation (#56) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-09 12:33:29 -07:00
Brian DeHamerandGitHub d442d85e12 ensure subject globs match only files (#54) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-06 11:52:03 -07:00
Brian DeHamerandGitHub c58d52c41d limit attestation subject count (#53) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-06 11:51:42 -07:00
Brian DeHamerandGitHub 9a8c43656a fix typos in README and action.yml (#52) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-06 11:19:51 -07:00
Brian DeHamerandGitHub 94082a9d2e add list support for subjectPath input (#51) 
* add list support for subjectPath input

Signed-off-by: Brian DeHamer <[email protected]>

* bump package version to 1.1.0

Signed-off-by: Brian DeHamer <[email protected]>

---------

Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-06 08:32:02 -07:00
Brian DeHamerandGitHub 74e71f701d disable github action linting (#49) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-01 13:58:56 -07:00
Brian DeHamerandGitHub 52f0592f54 add readme link to gh docs (#48) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-05-01 11:49:15 -07:00
Brian DeHamerandGitHub 9ad7955e50 add branding metadata (#47) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-04-30 11:53:55 -07:00
Brian DeHamerandGitHub 495f094150 tweak summary output (#43) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-04-26 13:23:19 -07:00
Brian DeHamerandGitHub f7a204b420 bump package version to 1.0.0 (#42) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-04-25 11:26:52 -07:00
Brian DeHamerandGitHub a6dded75c9 bump @actions/attest from 1.1.0 to 1.2.1 (#41) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-04-25 11:03:54 -07:00
Brian DeHamerandGitHub fe2f1fbc42 update annotation scheme for OCI bundles (#29) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-04-22 09:41:18 -07:00
Brian DeHamerandGitHub 37cf7b128e bump @actions/attest from 1.0.0 to 1.1.0 (#30) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-03-29 08:18:03 -07:00
Brian DeHamerandGitHub 47fc25c335 update release instructions (#28) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-03-28 12:59:50 -07:00
Brian DeHamerandGitHub 0f48753020 bump @sigstore/oci from 0.1.0 to 0.2.0 (#25) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-03-12 15:14:50 -07:00
Brian DeHamerandGitHub 96830cdd3b add release instructions (#21) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-03-06 19:31:28 -05:00
Brian DeHamerandGitHub 3b95763d7e more test coverage (#18) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-29 17:02:56 -08:00
Brian DeHamerandGitHub e6f9108958 force signing with github private sigstore (#17) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-29 08:12:24 -08:00
Brian DeHamerandGitHub 2246042d69 readme updates (#16) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-28 13:56:23 -08:00
Brian DeHamerandGitHub 32049315c5 enable unit tests in CI (#15) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-28 10:45:31 -08:00
Brian DeHamerandGitHub 525454b125 choose proper sigstore instance when attesting (#11) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-27 16:47:20 -08:00
Brian DeHamerandGitHub 6e9708eee5 create release attestation in CI test (#9) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-27 16:41:49 -08:00
Brian DeHamerGitHubEugene
 		fa36764830 remove coverage badge (#8) 
Signed-off-by: Brian DeHamer <[email protected]>
Co-authored-by: Eugene <[email protected]>
 2024-02-26 14:52:14 -08:00
Brian DeHamerandGitHub d3e0400371 reference @actions/attest package (#10) 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-26 14:46:15 -08:00
Brian DeHamerandGitHub 07dd760c66 Merge pull request #7 from actions/workflow-fixup 
workflow fixup
 2024-02-23 17:32:06 -08:00
Brian DeHamerandGitHub a81737a5b8 Merge pull request #6 from actions/codeowners 
update codeowners
 2024-02-23 17:23:16 -08:00
Brian DeHamer 7515199999 workflow fixup 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-23 17:22:43 -08:00
Brian DeHamer a504afee3d update codeowners 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-23 17:12:19 -08:00
Brian DeHamerandGitHub 806601caea Merge pull request #1 from actions/dependabot/github_actions/super-linter/super-linter-6 
Bump super-linter/super-linter from 5 to 6
 2024-02-23 16:50:46 -08:00
Brian DeHamer 3fed89b88b fix formatting for release script 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-23 16:48:00 -08:00
Brian DeHamer 5a922dcb2b fix permissions for codeql workflow 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-23 16:48:00 -08:00
Brian DeHamer e11ba98f5d update fetch-depth for linter checkout 
Signed-off-by: Brian DeHamer <[email protected]>
 2024-02-23 16:48:00 -08:00
Brian DeHamerandGitHub bf6d7bba65 Merge pull request #5 from actions/fix/lint 
fix linter
 2024-02-23 16:46:20 -08:00
Brian DeHamerandGitHub aaaeb08d4e Initial commit 2024-02-20 11:22:22 -08:00