Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add support for new bundle specification for attesting/verifying OCI image attestations #3889

Open
wants to merge 23 commits into
base: main
Choose a base branch
from
Open

Add support for new bundle specification for attesting/verifying OCI image attestations #3889

wants to merge 23 commits into from
+889 −100

Commits on Oct 29, 2024

  1. Add support for new bundle specification in cosign attest 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    3dc6a85 View commit details
    Browse the repository at this point in the history

  2. Add support for TSA for new bundle format in attest cli 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Oct 29, 2024
    Configuration menu
    Copy the full SHA
    f6b6f81 View commit details
    Browse the repository at this point in the history

Commits on Oct 30, 2024

  1. Add support for new bundle specification in cosign verify-attestation 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Oct 30, 2024
    Configuration menu
    Copy the full SHA
    e46acdb View commit details
    Browse the repository at this point in the history

Commits on Nov 1, 2024

  1. Refactor and use CheckOpts to build sigstore-go verification options 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 1, 2024
    Configuration menu
    Copy the full SHA
    e509ec5 View commit details
    Browse the repository at this point in the history

Commits on Nov 4, 2024

  1. Merge branch 'cosign-attest-bundle-spec' into verify-attestation-bund… 

    …le-spec
    @codysoyland
    codysoyland committed Nov 4, 2024
    Configuration menu
    Copy the full SHA
    558e873 View commit details
    Browse the repository at this point in the history

  2. Remove accidentally-committed commented code 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 4, 2024
    Configuration menu
    Copy the full SHA
    8b3edc9 View commit details
    Browse the repository at this point in the history

Commits on Nov 5, 2024

  1. Add comment about missing output data 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 5, 2024
    Configuration menu
    Copy the full SHA
    b17dfd8 View commit details
    Browse the repository at this point in the history

  2. Add tests and fix a few verifier options 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 5, 2024
    Configuration menu
    Copy the full SHA
    5ae6109 View commit details
    Browse the repository at this point in the history

  3. Remove incomplete code 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 5, 2024
    Configuration menu
    Copy the full SHA
    96410a7 View commit details
    Browse the repository at this point in the history

Commits on Nov 6, 2024

  1. Clean up linter warnings 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    c540689 View commit details
    Browse the repository at this point in the history

  2. Update docs 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    8796901 View commit details
    Browse the repository at this point in the history

  3. Use ParsePredicateType helper here 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    67d421a View commit details
    Browse the repository at this point in the history

  4. Add missing annotations 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    ba5c7cb View commit details
    Browse the repository at this point in the history

  5. Filter by bundle artifact type 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 6, 2024
    Configuration menu
    Copy the full SHA
    7a4c4df View commit details
    Browse the repository at this point in the history

Commits on Nov 7, 2024

  1. Fix up MediaType logic 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 7, 2024
    Configuration menu
    Copy the full SHA
    693b391 View commit details
    Browse the repository at this point in the history

Commits on Nov 22, 2024

  1. Revert "Use ParsePredicateType helper here" 

    This reverts commit 67d421a.

Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 22, 2024
    Configuration menu
    Copy the full SHA
    a380b89 View commit details
    Browse the repository at this point in the history

  2. Rename flag to NewBundleFormat for consistency 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 22, 2024
    Configuration menu
    Copy the full SHA
    189e0d5 View commit details
    Browse the repository at this point in the history

  3. Add unit tests for cosign.VerifyNewBundle 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 22, 2024
    Configuration menu
    Copy the full SHA
    ac29355 View commit details
    Browse the repository at this point in the history

  4. Remove redundant new-bundle-format flags 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 22, 2024
    Configuration menu
    Copy the full SHA
    2f3b321 View commit details
    Browse the repository at this point in the history

  5. Update docs 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 22, 2024
    Configuration menu
    Copy the full SHA
    524f558 View commit details
    Browse the repository at this point in the history

  6. This TODO is not needed: go-containerregistry supports tag fallback s… 

    …cheme natively

Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 22, 2024
    Configuration menu
    Copy the full SHA
    5c1fd5a View commit details
    Browse the repository at this point in the history

  7. Update flag name 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 22, 2024
    Configuration menu
    Copy the full SHA
    4d41f5f View commit details
    Browse the repository at this point in the history

  8. Add missing brace 

    Signed-off-by: Cody Soyland <[email protected]>
    @codysoyland
    codysoyland committed Nov 22, 2024
    Configuration menu
    Copy the full SHA
    77be5a8 View commit details
    Browse the repository at this point in the history