Update dependencies #81
ThomasVitalecommit-stage.yml
on: push
Annotations
2 warnings and 3 notices
|
Verify signature
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/thomasvitale/band-service@sha256:82b04a3e94440f9df7dbb905c4baf0a30105163b4ce1d8f161c7dcc591ebc370 | jq '.[0]'
|
|
Inspect signature bundle
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/thomasvitale/band-service@sha256:82b04a3e94440f9df7dbb905c4baf0a30105163b4ce1d8f161c7dcc591ebc370 | jq '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson'
|
|
Inspect certificate
COSIGN_EXPERIMENTAL=1 cosign verify ghcr.io/thomasvitale/band-service@sha256:82b04a3e94440f9df7dbb905c4baf0a30105163b4ce1d8f161c7dcc591ebc370 | jq -r '.[0].optional.Bundle.Payload.body |= @base64d | .[0].optional.Bundle.Payload.body | fromjson | .spec.signature.publicKey.content |= @base64d | .spec.signature.publicKey.content' | openssl x509 -text
|
|
Build
Unexpected input(s) 'category', valid inputs are ['entryPoint', 'args', 'scan-type', 'image-ref', 'input', 'scan-ref', 'exit-code', 'ignore-unfixed', 'vuln-type', 'severity', 'format', 'template', 'output', 'skip-dirs', 'skip-files', 'cache-dir', 'timeout', 'ignore-policy', 'hide-progress', 'list-all-pkgs', 'scanners', 'trivyignores', 'artifact-type', 'github-pat', 'trivy-config', 'limit-severities-for-sarif']
|
|
provenance / generator
Restore cache failed: Dependencies file is not found in /home/runner/work/band-service/band-service. Supported file pattern: go.sum
|