dc4ad3cc6c
Consolidate attestation actions ( #346 )
...
* consolidate attestation actions
Signed-off-by: Brian DeHamer <bdehamer@github.com >
* better errors
Signed-off-by: Brian DeHamer <bdehamer@github.com >
* Update src/sbom.ts
Co-authored-by: Austin Beattie <ajbeattie@github.com >
* clarify dedupe comment
Signed-off-by: Brian DeHamer <bdehamer@github.com >
---------
Signed-off-by: Brian DeHamer <bdehamer@github.com >
Co-authored-by: Austin Beattie <ajbeattie@github.com >
2026-02-13 11:23:24 -08:00
daf44fb950
improved checksum parsing ( #280 )
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2025-08-26 16:07:15 -07:00
90924a287f
Bump the npm-development group with 6 updates ( #216 )
...
* Bump the npm-development group with 6 updates
Bumps the npm-development group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js ) | `9.20.0` | `9.21.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) | `22.13.4` | `22.13.5` |
| [eslint](https://github.com/eslint/eslint ) | `9.20.1` | `9.21.0` |
| [prettier](https://github.com/prettier/prettier ) | `3.5.1` | `3.5.2` |
| [ts-jest](https://github.com/kulshekhar/ts-jest ) | `29.2.5` | `29.2.6` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint ) | `8.24.1` | `8.25.0` |
Updates `@eslint/js` from 9.20.0 to 9.21.0
- [Release notes](https://github.com/eslint/eslint/releases )
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md )
- [Commits](https://github.com/eslint/eslint/commits/v9.21.0/packages/js )
Updates `@types/node` from 22.13.4 to 22.13.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
Updates `eslint` from 9.20.1 to 9.21.0
- [Release notes](https://github.com/eslint/eslint/releases )
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md )
- [Commits](https://github.com/eslint/eslint/compare/v9.20.1...v9.21.0 )
Updates `prettier` from 3.5.1 to 3.5.2
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.5.1...3.5.2 )
Updates `ts-jest` from 29.2.5 to 29.2.6
- [Release notes](https://github.com/kulshekhar/ts-jest/releases )
- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md )
- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.2.5...v29.2.6 )
Updates `typescript-eslint` from 8.24.1 to 8.25.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.25.0/packages/typescript-eslint )
---
updated-dependencies:
- dependency-name: "@eslint/js"
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-development
- dependency-name: "@types/node"
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-development
- dependency-name: eslint
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-development
- dependency-name: prettier
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-development
- dependency-name: ts-jest
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm-development
- dependency-name: typescript-eslint
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: npm-development
...
Signed-off-by: dependabot[bot] <support@github.com >
* rebuild dist
Signed-off-by: Brian DeHamer <bdehamer@github.com >
* fix typos
Signed-off-by: Brian DeHamer <bdehamer@github.com >
---------
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: Brian DeHamer <bdehamer@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian DeHamer <bdehamer@github.com >
2025-02-25 11:49:37 -08:00
38bcf9b1c5
New subject-checksums input param ( #198 )
...
* new subject-checksums input param
Signed-off-by: Brian DeHamer <bdehamer@github.com >
* check for valid hex string for digest
Signed-off-by: Brian DeHamer <bdehamer@github.com >
---------
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2025-01-21 10:32:02 -08:00
bfa7e6911b
Update eslint from 8.x to 9.x ( #185 )
...
* remove eslint prettier plugins
Signed-off-by: Brian DeHamer <bdehamer@github.com >
* eslint upgrade
Signed-off-by: Brian DeHamer <bdehamer@github.com >
* source fixup
Signed-off-by: Brian DeHamer <bdehamer@github.com >
---------
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-12-13 15:25:52 -08:00
65e34a8aa7
deduplicate subjects before adding to statement ( #180 )
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-12-06 07:14:14 -08:00
85e94cb741
support multi-subject attestations ( #164 )
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-11-05 09:16:07 -08:00
68a047fd01
bugfix for glob exclude patterns ( #100 )
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-07-09 07:55:19 -07:00
9e752e3d76
batch processing w/ exponential backoff ( #79 )
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-06-03 07:56:25 -07:00
3ff4eb4c69
centralize collection of action inputs ( #72 )
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-05-24 11:01:44 -07:00
38ff958ab6
downcase subject name for OCI images ( #63 )
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-05-14 08:11:10 -07:00
d442d85e12
ensure subject globs match only files ( #54 )
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-05-06 11:52:03 -07:00
94082a9d2e
add list support for subjectPath input ( #51 )
...
* add list support for subjectPath input
Signed-off-by: Brian DeHamer <bdehamer@github.com >
* bump package version to 1.1.0
Signed-off-by: Brian DeHamer <bdehamer@github.com >
---------
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-05-06 08:32:02 -07:00
3b95763d7e
more test coverage ( #18 )
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-02-29 17:02:56 -08:00
Brian DeHamer