 Brian DeHamerandGitHub
|
d13839fcf4
|
Merge pull request #1870 from actions/bdehamer/attest-1.5-release-notes
`@actions/attest`: Release notes for v1.5.0 release
|
2024-11-01 09:55:13 -07:00 |
|
|
Brian DeHamer
|
7e54468896
|
update release notes for @actions/attest v1.5.0
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-11-01 09:45:11 -07:00 |
|
|
Brian DeHamerandGitHub
|
339447c5d3
|
Merge pull request #1863 from meriadec/attest-provenance-tags
Handle tags containing "@" character in `buildSLSAProvenancePredicate`
|
2024-11-01 09:35:13 -07:00 |
|
|
Brian DeHamerandGitHub
|
43ce96d373
|
Merge pull request #1865 from actions/bdehamer/multi-subject
`@actions/attest`: Support multi-subject attestations
|
2024-11-01 09:33:11 -07:00 |
|
|
Brian DeHamer
|
265a5be8bc
|
support multi-subject attestations
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-11-01 09:08:19 -07:00 |
|
|
Brian DeHamerandGitHub
|
65ee4d33af
|
use macos-latest-large in test/release workflows (#1869)
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-11-01 11:59:55 -04:00 |
|
|
Brian DeHamerandGitHub
|
29d342f176
|
Merge pull request #1848 from actions/bdehamer/attest-prep-1-5
`@actions/attest`: prep release of @actions/attest v1.5.0
|
2024-10-14 12:49:33 -07:00 |
|
|
Brian DeHamerandGitHub
|
72113fe791
|
Merge pull request #1847 from actions/bdehamer/attest-update-core
`@actions/attest`: bump @actions/core from 1.10.1 to 1.11.1
|
2024-10-14 12:49:15 -07:00 |
|
|
Brian DeHamerandGitHub
|
7b4d9763cc
|
Merge pull request #1846 from actions/bdehamer/sigstore-3-0-0
`@actions/attest`: bump @sigstore/sign from 2.3.2 to 3.0.0
|
2024-10-14 12:48:55 -07:00 |
|
|
Brian DeHamer
|
26c752f562
|
prep release of @actions/attest v1.5.0
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-10-14 12:33:10 -07:00 |
|
|
Brian DeHamer
|
ac1332a8e2
|
bump @actions/core from 1.10.1 to 1.11.1
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-10-14 12:16:09 -07:00 |
|
|
Brian DeHamer
|
c6c5ef6b8e
|
bump @sigstore/sign from 2.3.2 to 3.0.0
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-10-14 12:06:26 -07:00 |
|
|
Brian DeHamerandGitHub
|
6dd369c0e6
|
Merge pull request #1823 from actions/bdehamer/enterprise-issuer
[@actions/attest] Fix bug with customized OIDC issuer
|
2024-09-05 09:17:37 -07:00 |
|
|
Brian DeHamer
|
2a07de1333
|
fix bug with customized oidc issuer
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-09-04 10:24:28 -07:00 |
|
|
Brian DeHamerandGitHub
|
6c4e082c18
|
Merge pull request #1805 from actions/bdehamer/update-http-client
bump @actions/http-client from 2.2.1 to 2.2.3
|
2024-08-22 08:39:26 -07:00 |
|
|
Brian DeHamer
|
1e69bffbba
|
bump @actions/http-client from 2.2.1 to 2.2.3
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-08-22 07:52:03 -07:00 |
|
|
Brian DeHamerandGitHub
|
7298ff3219
|
Merge pull request #1799 from actions/bdehamer/http-client-proxy-auth
fix encoding for proxy auth token
|
2024-08-21 06:41:49 -07:00 |
|
|
Brian DeHamerandGitHub
|
571d782946
|
Merge pull request #1797 from actions/bdehamer/attester-release-notes
improve release notes for @actions/attest
|
2024-08-19 07:38:36 -07:00 |
|
|
Brian DeHamer
|
ada9e00cda
|
fix encoding for proxy auth token
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-08-16 15:03:40 -07:00 |
|
|
Brian DeHamer
|
ac3a063583
|
improve release notes for @actions/attest
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-08-16 12:43:39 -07:00 |
|
|
Brian DeHamerandGitHub
|
7cc96bb976
|
Merge pull request #1796 from actions/bdehamer/attest-issuer
derive default OIDC issuer from current tenant
|
2024-08-16 12:21:00 -07:00 |
|
|
Brian DeHamer
|
fa6cc53297
|
derive default OIDC issuer from current tenant
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-08-16 12:07:23 -07:00 |
|
|
Brian DeHamerandGitHub
|
279e891118
|
Merge pull request #1790 from actions/bdehamer/attest-headers
support for headers param in attest functions
|
2024-08-16 07:21:46 -07:00 |
|
|
Brian DeHamer
|
340a1033a5
|
support for headers param in attest functions
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-08-15 15:35:32 -07:00 |
|
|
Brian DeHamerandGitHub
|
90d9783552
|
Merge pull request #1776 from actions/bdehamer/jwks-proxy-fix
fix proxy support for jwks retrieval
|
2024-07-29 16:31:41 -07:00 |
|
|
Brian DeHamer
|
b28406bd1f
|
fix proxy support for jwks retrieval
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-07-26 15:03:40 -07:00 |
|
|
Brian DeHamerandGitHub
|
361a115e53
|
Merge pull request #1759 from actions/bdehamer/rekor-409
config rekor to fetch on conflict
|
2024-06-12 12:25:06 -07:00 |
|
|
Brian DeHamer
|
dddc440d56
|
config rekor to fetch on conflict
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-06-12 11:57:18 -07:00 |
|
|
Brian DeHamerandGitHub
|
08d6f14ea8
|
Merge pull request #1745 from actions/bdehamer/attest-provenance
(@actions/attest) New GHA provenance build type
|
2024-06-12 11:45:37 -07:00 |
|
|
Brian DeHamer
|
73100a7f85
|
new GHA build provenance
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-06-05 14:54:34 -07:00 |
|
|
Brian DeHamerandGitHub
|
c6b487124a
|
Merge pull request #1738 from actions/bdehamer/attest-1.3.0
(@actions/attest) prepare 1.3.0 release
|
2024-06-05 14:53:11 -07:00 |
|
|
Brian DeHamer
|
8735a7e2da
|
prep 1.3.0 release of @actions/attest
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-05-21 13:11:37 -07:00 |
|
|
Brian DeHamerandGitHub
|
ae38557bb0
|
Merge pull request #1730 from actions/bdehamer/attest-readme
Update @actions/attest README
|
2024-05-01 11:48:55 -07:00 |
|
|
Brian DeHamer
|
abb586d71e
|
add doc link in @actions/attest readme
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-05-01 11:30:45 -07:00 |
|
|
Brian DeHamerandGitHub
|
81a73aba8b
|
Merge pull request #1725 from actions/bdehamer/attest-retry-persist
(@actions/attest) retry request on failure to save attestation
|
2024-04-24 19:59:43 -07:00 |
|
|
Brian DeHamer
|
0e8fe8af62
|
retry request on failure to save attestation
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-04-24 15:07:39 -07:00 |
|
|
Brian DeHamerandGitHub
|
d82fd09f99
|
Merge pull request #1714 from actions/bdehamer/attest-no-make-fetch-happen
(@actions/attest) remove dep on make-fetch-happen
|
2024-04-23 10:39:57 -07:00 |
|
|
Brian DeHamer
|
2961d73391
|
remove dep on make-fetch-happen
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-04-23 09:39:17 -07:00 |
|
|
Brian DeHamerandGitHub
|
9ddf153e00
|
Merge pull request #1701 from actions/bdehamer/attest-v03-bundle
(@actions/attest) generate attestations using v0.3 bundle format
|
2024-04-03 13:51:26 -07:00 |
|
|
Brian DeHamer
|
f8d95a85df
|
generate v0.3 bundles in attest package
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-04-03 12:12:26 -07:00 |
|
|
Brian DeHamerandGitHub
|
59e9d284e9
|
Merge pull request #1693 from actions/bdehamer/oidc-provenance
(@actions/attest) build provenance statement from OIDC claims
|
2024-03-28 13:44:22 -07:00 |
|
|
Brian DeHamer
|
4ce4c767e2
|
npm audit fix
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-03-22 12:44:24 -07:00 |
|
|
Brian DeHamer
|
a0e6af1e53
|
build provenance stmt from OIDC claims
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-03-22 12:34:42 -07:00 |
|
|
Brian DeHamerandGitHub
|
29bf378d97
|
Merge pull request #1675 from actions/provenance-permissions
fix permissions for release workflow
|
2024-02-26 11:40:12 -08:00 |
|
|
Brian DeHamer
|
68b042febd
|
fix permissions for release workflow
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-02-26 11:32:45 -08:00 |
|
|
Brian DeHamerandGitHub
|
c366a07d62
|
Merge pull request #1672 from actions/attest-v1.0.0
bump @actions/attest to 1.0.0
|
2024-02-26 11:13:48 -08:00 |
|
|
Brian DeHamerandGitHub
|
9e5eb95517
|
Merge pull request #1674 from actions/npm-provenance
publish npm packages with build provenance
|
2024-02-26 11:13:32 -08:00 |
|
|
Brian DeHamer
|
7f96bd610d
|
publish npm packages with build provenance
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-02-26 10:42:33 -08:00 |
|
|
Brian DeHamer
|
37a562b194
|
bump @actions/attest to 1.0.0
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-02-26 10:21:47 -08:00 |
|
|
Brian DeHamerandGitHub
|
ad1f156c7c
|
Merge pull request #1667 from actions/bdehamer/attest
add new @actions/attest package
|
2024-02-26 10:15:14 -08:00 |
|
|
Brian DeHamer
|
6079dea4c4
|
add new @actions/attest package
Signed-off-by: Brian DeHamer <[email protected]>
|
2024-02-26 08:52:20 -08:00 |
|