New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

slsa-verifier 2.4.0 #140495

Merged

BrewTestBot merged 2 commits into Homebrew:master from p-linnane:bump-slsa-verifier-2.4.0

Aug 26, 2023

Member

p-linnane commented Aug 25, 2023

Created by brew bump

Created with brew bump-formula-pr.

prerelease notes

## Summary

Support for BYOB-based builders released in https://github.com/slsa-framework/slsa-github-generator/releases/tag/v1.9.0

What's Changed

chore: Update SHA256SUM.md for v2.3.0 by @ianlewis in chore: Update SHA256SUM.md for v2.3.0 slsa-framework/slsa-verifier#592
docs: Make npm package version and name non-optional by @laurentsimon in docs: Make npm package version and name non-optional slsa-framework/slsa-verifier#591
docs: npm provenance verification from GitHub runner by @laurentsimon in docs: npm provenance verification from GitHub runner slsa-framework/slsa-verifier#595
chore(deps): update dependency @types/node to v18.16.9 by @renovate-bot in chore(deps): update dependency @types/node to v18.16.9 slsa-framework/slsa-verifier#596
chore(deps): update github-actions by @renovate-bot in chore(deps): update github-actions slsa-framework/slsa-verifier#597
chore(deps): update dependency jasmine to v5 by @renovate-bot in chore(deps): update dependency jasmine to v5 slsa-framework/slsa-verifier#598
feat: BYOB verification support by @laurentsimon in feat: BYOB verification support slsa-framework/slsa-verifier#604
feat: Support for v1.0 verification in BYOB by @laurentsimon in feat: Support for v1.0 verification in BYOB slsa-framework/slsa-verifier#609
feat: Use env variable to retrieve trigger workflow by @laurentsimon in feat: Use env variable to retrieve trigger workflow slsa-framework/slsa-verifier#615
test: Add test data for v1.6.0 by @ianlewis in test: Add test data for v1.6.0 slsa-framework/slsa-verifier#612
fix: Verify the TRW tag is a semver tag by @laurentsimon in fix: Verify the TRW tag is a semver tag slsa-framework/slsa-verifier#619
chore: Don't be verbose with tests locally by @ianlewis in chore: Don't be verbose with tests locally slsa-framework/slsa-verifier#620
fix: use ExternalParameters["source"] for the Source URI for SLSA v1.0 provenance by @asraa in fix: use ExternalParameters["source"] for the Source URI for SLSA v1.0 provenance slsa-framework/slsa-verifier#621
test: re-generate container-based tests by @asraa in test: re-generate container-based tests slsa-framework/slsa-verifier#627
fix: revert to using resolvedDepdendencies for source verification by @asraa in fix: revert to using resolvedDepdendencies for source verification slsa-framework/slsa-verifier#629
refactor: Provenance tests by @ianlewis in refactor: Provenance tests slsa-framework/slsa-verifier#628
fix(deps): update module github.com/sigstore/rekor to v1.2.0 [security] by @renovate-bot in fix(deps): update module github.com/sigstore/rekor to v1.2.0 [security] slsa-framework/slsa-verifier#622
fix: only allow hashes of 256 bits or more by @laurentsimon in fix: only allow hashes of 256 bits or more slsa-framework/slsa-verifier#633
fix: builder ID verification for testing by @ianlewis in fix: builder ID verification for testing slsa-framework/slsa-verifier#635
feat: remove experimental on Sigstore bundle and v1.0 SLSA provenance format by @asraa in feat: remove experimental on Sigstore bundle and v1.0 SLSA provenance format slsa-framework/slsa-verifier#634
chore: update toc in README.md by @asraa in chore: update toc in README.md slsa-framework/slsa-verifier#636
fix: allow workflow_dispatch to trigger release.yml by @ianlewis in fix: allow workflow_dispatch to trigger release.yml slsa-framework/slsa-verifier#637
test: add tests for v1.7.0 builders by @asraa in test: add tests for v1.7.0 builders slsa-framework/slsa-verifier#638
chore(deps): update github-actions by @renovate-bot in chore(deps): update github-actions slsa-framework/slsa-verifier#607
chore(deps): update gcr.io/distroless/base:nonroot docker digest to c623859 by @renovate-bot in chore(deps): update gcr.io/distroless/base:nonroot docker digest to c623859 slsa-framework/slsa-verifier#567
fix(deps): update github.com/sigstore/protobuf-specs digest to 5ef5406 by @renovate-bot in fix(deps): update github.com/sigstore/protobuf-specs digest to 5ef5406 slsa-framework/slsa-verifier#606
chore(deps): update npm dev by @renovate-bot in chore(deps): update npm dev slsa-framework/slsa-verifier#608
chore(deps): update golang:1.19 docker digest to 83f9f84 by @renovate-bot in chore(deps): update golang:1.19 docker digest to 83f9f84 slsa-framework/slsa-verifier#583
feat: Verify provenance by build type by @ianlewis in feat: Verify provenance by build type slsa-framework/slsa-verifier#632
refactor: Use Go 1.20 by @ianlewis in refactor: Use Go 1.20 slsa-framework/slsa-verifier#643
test: Add more ProvenanceFromEnvelope tests by @ianlewis in test: Add more ProvenanceFromEnvelope tests slsa-framework/slsa-verifier#640
fix: pre-submit: e2e-cli.sh artifact download by @ianlewis in fix: pre-submit: e2e-cli.sh artifact download slsa-framework/slsa-verifier#646
refactor: Add more git utils by @ianlewis in refactor: Add more git utils slsa-framework/slsa-verifier#645
refactor: Use full builder id by @ianlewis in refactor: Use full builder id slsa-framework/slsa-verifier#648
feat: Use tags vX.Y.Z-<language> for JReleaser builders by @laurentsimon in feat: Use tags vX.Y.Z-<language> for JReleaser builders slsa-framework/slsa-verifier#644
chore(deps): update github-actions by @renovate-bot in chore(deps): update github-actions slsa-framework/slsa-verifier#651
feat: move maven-plugin from slsa-github-generator by @AdamKorcz in feat: move maven-plugin from slsa-github-generator slsa-framework/slsa-verifier#664
docs: Fix maven-plugin README by @laurentsimon in docs: Fix maven-plugin README slsa-framework/slsa-verifier#671
feat: Verification for when sha1 is specified in BYOB TRW by @ianlewis in feat: Verification for when sha1 is specified in BYOB TRW slsa-framework/slsa-verifier#641
docs: Add example for maven verification plugin by @laurentsimon in docs: Add example for maven verification plugin slsa-framework/slsa-verifier#676
chore: Add Kris to codeowners by @laurentsimon in chore: Add Kris to codeowners slsa-framework/slsa-verifier#678
feat: Print byob builder by @laurentsimon in feat: Print byob builder slsa-framework/slsa-verifier#677
test: Add test data for v1.8.0 by @ianlewis in test: Add test data for v1.8.0 slsa-framework/slsa-verifier#681
chore(deps): update github-actions by @renovate-bot in chore(deps): update github-actions slsa-framework/slsa-verifier#666
feat: Non-compulsory BuilderID for BYOB Builders by @enteraga6 in feat: Non-compulsory BuilderID for BYOB Builders slsa-framework/slsa-verifier#674
chore(deps): update golang docker tag to v1.21 by @renovate-bot in chore(deps): update golang docker tag to v1.21 slsa-framework/slsa-verifier#687
chore(deps): update github-actions by @renovate-bot in chore(deps): update github-actions slsa-framework/slsa-verifier#686
feat: GCB refactor for v1.0 support by @laurentsimon in feat: GCB refactor for v1.0 support slsa-framework/slsa-verifier#682
feat: Allow byob builders ref at main for e2e tests by @laurentsimon in feat: Allow byob builders ref at main for e2e tests slsa-framework/slsa-verifier#689
feat: Update doc and code for Maven plugin by @laurentsimon in feat: Update doc and code for Maven plugin slsa-framework/slsa-verifier#680
feat: gcb v1.0 support by @laurentsimon in feat: gcb v1.0 support slsa-framework/slsa-verifier#691
feat: v1.9.0 regression tests by @laurentsimon in feat: v1.9.0 regression tests slsa-framework/slsa-verifier#696
fix: release failure by @laurentsimon in fix: release failure slsa-framework/slsa-verifier#697

New Contributors

@AdamKorcz made their first contribution in feat: move maven-plugin from slsa-github-generator slsa-framework/slsa-verifier#664
@enteraga6 made their first contribution in feat: Non-compulsory BuilderID for BYOB Builders slsa-framework/slsa-verifier#674

Full Changelog: slsa-framework/slsa-verifier@v2.3.0...v2.4.0

github-actions bot added go bump-formula-pr labels

Member

chenrui333 commented Aug 25, 2023

https://github.com/slsa-framework/slsa-verifier/releases

chenrui333 added the pre-release label

Member

chenrui333 commented Aug 25, 2023

some livecheck opportunity


          slsa-verifier 2.4.0

2f84efe

slsa-verifier: add livecheck

p-linnane force-pushed the bump-slsa-verifier-2.4.0 branch from 10ff17d to 2f84efe Compare

August 26, 2023 00:18

Member Author

p-linnane commented Aug 26, 2023

The release is marked as latest now. Hash remains the same. I've also added a livecheck so we don't hit the pre-releases next time.

p-linnane added ready to merge livecheck and removed pre-release labels

chenrui333 approved these changes

View reviewed changes

Contributor

github-actions bot commented Aug 26, 2023

🤖 An automated task has requested bottles to be published to this PR.


          slsa-verifier: update 2.4.0 bottle.

ddbbcae

github-actions bot added the CI-published-bottle-commits label

github-actions bot approved these changes

View reviewed changes

BrewTestBot enabled auto-merge

August 26, 2023 00:46

BrewTestBot added this pull request to the merge queue

Merged via the queue into Homebrew:master with commit f2d8532

12 checks passed

p-linnane deleted the bump-slsa-verifier-2.4.0 branch

August 26, 2023 01:31

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment