Release v0.0.1

Changelog

• 2a5c768 --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel dependency-type: direct:production update-type: version-update:semver-minor ...
• f85a3de --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor ...
• 8550908 Accept --arch=all only if it's the only element
• a3ed4eb Add --keyring-append option
• 29d9f79 Add --sbom flag to publish matching build cli
• b6cd0d9 Add --stage-tags flag to apko publish
• be64a6b Add --use-oci-mediatypes option to use OCI mediatypes
• 4068d56 Add 4MiB bufio for pgzip
• e2ec616 Add CI test harness
• 759aa99 Add GenerateIndex method to sbom interface
• 1e2d308 Add GenerateIndex to sbom oject
• 3b007f9 Add Go Tests workflow
• 16d05e4 Add Harden Runner audit configs
• 1043d73 Add Index Info to sbom options
• efe5664 Add Index SBOM generation to build context
• 5e42629 Add Lima config and instructions for mac
• 53ac805 Add LockImageConfigurationWithPackages to return package metadata (chainguard-dev#2061)
• 3fe9d83 Add LoongArch architecture definition (chainguard-dev#1275)
• c08f137 Add OCI Annotations to image configuration
• a646548 Add PostAttachSBOM function
• a39a008 Add ReadReleaseData method
• b4cb776 Add SBOM Generator interface
• 37ae555 Add SBOM object and implementation
• e2ea8a2 Add SBOM quality CI test
• a613052 Add SPDX File support
• b64b70c Add StopSignal support.
• 98af90c Add SubFS implementation for Melange (chainguard-dev#1560)
• 3358e32 Add VCS URL to CycloneDX sbom
• da7a6b2 Add VCS URL to SPDX SBOMs
• fee7d7c Add MergeInto for combining ImageConfigurations (chainguard-dev#1206)
• 40dac3b Add a few more apk unit tests
• 7935488 Add a no-op test for PublishCmd
• 646dc44 Add a test case for /etc/ld.so.cache permissions (chainguard-dev#1761)
• bb43366 Add a test that important files come early in extracted images (chainguard-dev#1964)
• 1a52740 Add a test to catch SBOM changes
• 93e1c62 Add a test to verify no output changes
• 672e5b1 Add a unit test for the sort ordering change. (chainguard-dev#1444)
• 2e4a981 Add ability to get stemmed version tags
• c2679fe Add additional error info when trying to run as a root user.
• 914a574 Add an OperatingSystem package to our image SBOMs (chainguard-dev#1690)
• 00e43dd Add an explicit sort to squash diffs. (chainguard-dev#1443)
• 9e347c8 Add an internal tarfs implementation
• 3365d8e Add and populate ImageDigest field
• 09ddb54 Add apko SBOM composition documentation
• d3fbb9f Add apko dot command
• 88e6194 Add binary to generate json schema.
• ad524c9 Add bit on Docker dependency.
• c4376a0 Add build package logical paths test
• b9a50bf Add build.MultiArch.BuildPackageLists (chainguard-dev#1201)
• 57c684d Add codeowners
• 9880109 Add commit hash to VCS URL
• 9d4b52d Add contents.runtime_keyring for runtime APK trust (chainguard-dev#2297)
• 04b8d4c Add deveenv shell script and apko configuration
• 148c839 Add docker cli to devenv.
• a24da91 Add docs for work-dir.
• d57424e Add docs on stop-signal.
• 35dcb7e Add erofs support to apko. (chainguard-dev#2249)
• d598806 Add example for building on top of base
• 2b34d49 Add examples for single and dual archs
• 2eb3a2f Add exec unit and integration tests
• 2566ff8 Add expandapk.Split and use it
• 4c96f71 Add first iteration of SPDX generator
• 849c0c0 Add format date is expected in.
• 7123474 Add git, jq to devenv
• 494bf50 Add golden tests
• 50a81cc Add goreleaser and ko build
• df88e4d Add gosec, move publish
• 4f7775d Add highlighting.
• d5f2e36 Add include-paths to build and lock
• 9285d3b Add initial CONTRIBUTING.md doc
• 6dd6085 Add installation instructions before quickstart
• 99a9f08 Add integration and final unit tests
• db9be70 Add java truststore support to additional certificates (chainguard-dev#1996)
• cb5bb22 Add json tags to ImageConfiguration types.
• 2be3903 Add limit readers for readers that consume data from external sources. (chainguard-dev#2042)
• 757f869 Add link to apko image.
• 4c5c1e0 Add link to docs.
• 4fe25b1 Add logic to publish attached SBOMs when writing images and indices.
• 06f4bff Add logic to read layer to sbom pkg
• 51e1a20 Add mac targets for goreleaser
• c6e2c4d Add make to devtools.
• 013be86 Add more spans around potentially slow ops
• 029e66c Add note about --repository-append
• 0d9c562 Add org.opencontainers.image.source image annotation
• b8fada4 Add otel spans
• 5efb1ca Add package version tag to list of tags
• fbb7bc7 Add packageVersionTag flag and refactor arguments to take in all options
• f3963b3 Add placeholder GenerateIndex to cyclonedx and idb generators
• dc64cf9 Add purl qualifier encoder unit test
• c50e401 Add purls to VCS source package
• 53957f9 Add support for SPDX SBOMs without shortcut fields. (chainguard-dev#1988)
• 033101d Add support for apko publish --local
• 238cd7b Add support for custom certificate packages (chainguard-dev#2105)
• 46ce0d8 Add support for extras in build-cpio (chainguard-dev#1394)
• 6f58188 Add support for gzip-compressed CPIO output (chainguard-dev#2253)
• a6802ac Add support for runtime-only repositories (chainguard-dev#1786)
• d6f3361 Add support for runtime-only repositories (chainguard-dev#1790)
• 0ffacea Add support for setting cmd.
• 62510f2 Add support for tagged repositories (chainguard-dev#1868)
• 6c23b26 Add support for the =~ constraint (chainguard-dev#1681)
• c5addee Add support.
• 3bd4d6a Add synthetic relationships from DocumentDescribes
• 037c2f6 Add task to support running apko builds via Tekton.
• 37eae4b Add test and trailing new line to apko.lock.json files.
• a898188 Add test of determinism (chainguard-dev#668)
• 75c793f Add testdata for apko on top of base image
• 8050913 Add the ability to specify additional certs to be added to the image (chainguard-dev#1977)
• ed51f76 Add the extra flags to build-minirootfs (chainguard-dev#1467)
• d190aee Add vscode and tmp directories to .gitignore
• 79e0d76 Add walk-dir option to PathMutation to traverse directory and modify perms
• 4601584 Added missing bits.
• 97e7e5e Added s6 link.
• 5d3b034 Address code review comments
• e46d36a Address go vulnerabilities
• 26a7b6a Address part of the comments from review round 1
• 0fc2ca4 Again we were not doing post-actions.
• b62f4d2 Align go version when linting code with all other actions (chainguard-dev#1998)
• e391590 Allow GitHub verified signatures in source policy (chainguard-dev#2332)
• b8c0ef4 Allow an empty layering object for legacy behavior (chainguard-dev#1643)
• 212167d Allow apko dot to be cancelled
• 6c711b2 Allow entrypoint to be blank.
• 9c9eafd Allow existing packages to replace installed pkg
• e707968 Allow multiauthenticator to try all authenticators (chainguard-dev#1379)
• 2668cf5 Allow passing in an http.RoundTripper (chainguard-dev#1505)
• 6b07a05 Allow periods in certificate names (chainguard-dev#2133)
• e609fd6 Allow replacement by different origin
• a751f0e Always UTC time.Unix (chainguard-dev#758)
• 9b64398 Always generate index SBOM
• 8c1d2ec Always pass WithLogger first
• f2de345 Apko 0.26.0 regression: Build with base stopped working. (chainguard-dev#1633)
• ca9918c Apko interpeting resolved (lock) file: Prototype 1.
• 7d0c3a4 Apko keyrings to recognize key suffixes when lost during fetch: (chainguard-dev#1630)
• 59398a7 Architecture.UnmarshalYAML - return err
• 553de9a Attach SBOMs to built images.
• cd765e7 Attempt to flush renamed files in cache (chainguard-dev#1387)
• c8eac4d Audit workflow permissions (chainguard-dev#1017)
• 46d530a Avoid race when mutating annotations (chainguard-dev#1368)
• 995ee5a Base32-encode etag values (chainguard-dev#1470)
• 05b57aa Bit further...
• 300620e Bring back the FetchPackage function on APK (chainguard-dev#2049)
• b94c4ea Build and lock support for base image
• fdb7c17 Build and lock support for base image
• 4d65293 Build and lock support for base image
• e8a51b0 Build tarball using new path funcs
• bad397f Bump alpine/go to 0.3.1
• 0b57a09 Bump default maximum decompressed apkindex size from 100 MB to 300 MB (chainguard-dev#2127)
• 9526601 Bump go to 1.20
• 792380b Bump go-apk
• c2f826b Bump go-apk
• b836fae Bump go-apk
• 7f0b0be Bump go-apk
• c743462 Bump go-apk
• 799397c Bump go-apk
• ed600f2 Bump go-apk
• 429b5fd Bump go-apk
• 398c2a1 Bump go-apk dep to pick up otel spans
• e346ec0 Bump go-apk to fix solver
• e2bdca7 Bump go-apk to pick up conflict fix
• 7ff6fd9 Bump go-apk to pick up faster installs
• 0007f30 Bump go-apk to pick up new solver behavior
• 4ac801d Bump go-apk, deduplicate extras
• 747c66a Bump go-erofs import to current main. (chainguard-dev#2412)
• d837990 Bump lint
• e7a1e8d Bust global caches by default in index tests (chainguard-dev#1255)
• f5ccefc CONTRIBUTING.md: website link for golangci-lint has moved (chainguard-dev#1608)
• 1730431 Cache DiscoverKeys calls via the shared cache (chainguard-dev#1583)
• 1c04707 Cache some more expensive operations (chainguard-dev#1317)
• 8b1a1b7 CacheDir support for apko lock (chainguard-dev#1612)
• 5199c98 Call ReadReleaseData() when generate img SBOM
• 9fdecf2 Cancel context on interrupt signal
• c3d33b0 Canonicalize the architecture. (chainguard-dev#1231)
• f2013ff Change back PACKAGE-MANAGER to PACKAGE_MANAGER
• ace183f Change order for consistency.
• 81ad5fd Change testdata to be a bit smaller
• 6c6d51f Change the busybox detection logic to support "provides".
• f4bc5a8 Change the default config name in the Tekton task
• ae2a6ba Check for validity of the cached expanded APK more thoroughly (chainguard-dev#1987)
• ba8f198 Check that images have the correct layers
• 32367d4 Clarify usage of local repository
• 87f7f0f Cleanup: Make the Services type more concrete. (chainguard-dev#664)
• 1611c19 Cleanup: Use a string alias instead of struct. (chainguard-dev#663)
• 09bc289 Clone image config's env to avoid race
• 2d6869f Close response from index HEAD request (chainguard-dev#1770)
• 79cdd75 Close tarfs files
• 8ac35d0 Comment fix
• 0ffb338 Compose internal SBOM files into main SBOM
• 56d3489 Compose the apk packages into the right spot
• 1b66e23 Consider already selected packages during solve (chainguard-dev#1406)
• 6d7c376 Consider deps resolved if other resolved deps already provide them (chainguard-dev#1606)
• 06e21ce Const away PACKAGE_-MANAGER in spdx tests
• 39a836f Convert cyclonedx type into an sbom generator
• 6909f2c Copy image index to additional tags
• b3c9699 Correct originator label
• b396a50 Create a command similar to build-minirootfs for CPIO (chainguard-dev#1177)
• 3e6589d Create codeql.yml (chainguard-dev#1439)
• 40c755e Create release.md
• 77a1ec3 CycloneDX: Pickup new ArchImage qualifier fn in index sbom
• a704af0 CycloneDX: Update inverted fields in vcs externalRef
• 78662f8 Delete a bunch of dead code (chainguard-dev#1306)
• 8c6efdf Detect broken symlinks in the cache and fix them (chainguard-dev#1994)
• 4cfe177 DirFS implementations: make Create() default to safer permissions (chainguard-dev#1783)
• 9acc8ad DirFS: correct resetting of permissions (chainguard-dev#1877)
• 550f63f Disable Go module caching in goreleaser workflows (chainguard-dev#2375)
• e016cb9 Disable layer-time sbom generation in publish
• 5de148d Disallow '/' in key name (chainguard-dev#1494)
• 8f52674 Disallow / in key names
• b56f41d Do not generate /etc/os-release if already present
• 40280ff Do not retry with jitter when discoveringKeys in offline mode. (chainguard-dev#1610)
• a9c5daa Document build process
• 924f93a Document how layering works (chainguard-dev#1703)
• 7561844 Dogfood the apko-built alpine-base image
• 579a8f1 Don't buffer everything
• 72f576b Don't call build.New for index SBOM
• d8a755e Don't compute layer hash twice
• 4308a2e Don't mutate accounts if base image is set
• acc6bba Don't require testify
• f592fe8 Dont attach SBOM if index is nill
• 2607643 Drop a period from a command's help (chainguard-dev#1312)
• 3b1e24c Drop cloud keychains
• 1732c03 Drop cosign dep (chainguard-dev#1645)
• 0f4372d Drop creating group log
• de4f6b3 Drop dependency on deleted packages
• 6b00538 Drop direct logrus import
• c8b52a0 Drop errgroup.WithContext and add withCause (chainguard-dev#1380)
• 41f5c55 Drop experimental tag from layering (chainguard-dev#1635)
• 620aaaa Drop multierror for errgroup
• 6b5bcef Drop pkg/apk/tarball (chainguard-dev#1613)
• 69ea41a Drop tests that are failing (chainguard-dev#1416)
• 8d58370 Ensure higher versions of packages in index are used
• 07e0550 Ensure jsonschema is kept up to date.
• 249040d Ensure parent dirs exist for partial idb (chainguard-dev#1776)
• fddee77 Escape plus signs in purl qualifiers
• ea62bef Evict superseded index generations from the derived caches (chainguard-dev#2360)
• 62c553d Export tarfs under the expandapk package (chainguard-dev#2022)
• ee5c957 Expose DiscoverKeys (chainguard-dev#1273)
• ec35634 Expose ignoreSignatures functionality to CLI and library consumers
• ca5869e Expose tarfs
• e7e5897 Expose type of DefaultAuthenticators (chainguard-dev#1272)
• a0fca7b FIX VCS package SPDX identifier
• 2e7b55d Fail if APKINDEX has single-character lines (chainguard-dev#1321)
• 772deef Faster NewPkgResolver and GetRepositoryIndexes (chainguard-dev#1202)
• 53a7260 Feature: Compute the default timestamp from installed APKs (chainguard-dev#675)
• 84139f6 Find SBOMs in apks and append them
• a6a64a4 Finish the argument movement
• 02ecccc First draft of FAQ.
• b5fe47c First pass at apko docs.
• e29e490 First pass at new readme.
• 674fa3f First pass.
• eae91e3 Fix CI (chainguard-dev#701)
• 72979e5 Fix Image Description in CycloneDX
• 28bb8ff Fix OPERATING-SYSTEM primaryPackagePurpose (chainguard-dev#1763)
• 0b8da66 Fix SPDX layer package name
• 2adc54f Fix Tekton Task release
• 78e903e Fix TestBuildLayer for optional SBOM
• 497e2c2 Fix annotations.
• 8160d53 Fix bad path to lima config in mac README
• e01ca10 Fix buf cli passing correct extrakeys
• 5925ea5 Fix bug where value pairs in purls qualifier
• 0a70db1 Fix bug with error logic when parsing internal JSON
• 6931839 Fix build_repositories for layered images (chainguard-dev#1663)
• 70dbd08 Fix capitalisation style
• 0ec7e57 Fix command syntax.
• ba79262 Fix dependency refs in CycloneDX sboms
• b9d385f Fix dev env apko.
• cab3df0 Fix document variable name clash
• 8ec901a Fix duplicate IDB entries
• ee05291 Fix duplicates when overlaying the config with config with no contents
• a39e655 Fix golangci-lint
• 81aa2c9 Fix image SBOMs in SPDX generator
• d418457 Fix logging output of user.GID (chainguard-dev#1466)
• 518bd29 Fix merge conflict
• 354f1f1 Fix minor issues with README
• 2fb9ec4 Fix nil map assingment for annotations
• a4329b9 Fix package name handling to retain version and strip ‘@’ suffix (chainguard-dev#1472)
• 15a467e Fix packages with multiple Replaces
• 90a59f4 Fix panic when running apko build
• 5280de9 Fix parsing of apk installed for files in top level directory. (chainguard-dev#1779)
• fd49498 Fix race
• cc77a43 Fix replacing symlinks (chainguard-dev#1225)
• 83aaa61 Fix reproducibility test digest (chainguard-dev#1622)
• c53f978 Fix retry handling of the range retry transport (chainguard-dev#2025)
• 52452fb Fix scope creep in file checking
• 713ff14 Fix some lints carried over from go-apk
• 458d83d Fix stupid boolean logic bug (chainguard-dev#678)
• 755ebe2 Fix the error wrapper (chainguard-dev#677)
• 6d660bb Fix tmp directory changing permissions from 0o777 to 0o755
• 4bc21ec Fix typo in DefaultAuthenticators
• 3ffc131 Fix validate passwd/group logic.
• e7d8030 Fix: Explicitly default the SourceDateEpoch (chainguard-dev#671)
• bb140a2 Fix: add timeouts to several actions legs. (chainguard-dev#672)
• 97f5e8a Fixed the make-devenv script
• 51830a2 Fixes local tag publishing (chainguard-dev#1880)
• 5c3b7cc Fixing Lint errors.
• f2764a0 For multi-layer images, include all layers (chainguard-dev#1611)
• 7d135ab For now, get apko task to work by only requesting one arch
• 3286a0b Format README (chainguard-dev#2044)
• 7f09869 Generate SBOMs after layer tarball
• 37aa282 Generate and release Tekton Task
• 408f001 Generate build fakes
• dbc8168 Generate exec fakes
• b69cdc2 Generate index sbom in apko publish
• 1f92704 Generate sboms using new sbom object
• 8f18e5f Github action to automatically add apko issues to project board.
• cd9aa86 Go mod tidy after removing google/uuid
• db61eae Gracefully handle cached files being deleted (chainguard-dev#1959)
• a811f4c Group codeql-action bumps in dependabot config (chainguard-dev#2382)
• 8d33435 Guard against empty inputs list in unify() (chainguard-dev#1668)
• 2221938 Guard against os-release panic (chainguard-dev#1488)
• 968521f Handle race when removing a broken symlink (chainguard-dev#2016)
• d5cb2ce Have Tekton produce multi-arch by default
• fb1b96a Have the Authenticator support returning errors (chainguard-dev#1205)
• fbfd18e Hide the implementation interface, plug into build
• 6564c4c Honor option WantSBOM
• 9c41a48 Hook up logger in spdx generation (chainguard-dev#1747)
• c269982 Ignore scripts that aren't executable (chainguard-dev#1427)
• ce203af Implement CycloneDX index SBOM generation
• 82d9f55 Implement client-side APK discovery in apko (chainguard-dev#1216)
• 17f22f4 Implement generic layering (chainguard-dev#1617)
• 9f03025 Implement index SBOMs in SPDX generator
• 3e75549 Import stretchr/testify
• 8ce89e7 Improve conflict error (chainguard-dev#1529)
• bf582ad Improve error graph for failed solve (chainguard-dev#1474)
• 5225ce2 Improve getImageForArch - nested index support and lookup of arch in config
• 099504f Improve path mutation errors
• b0a9ee7 Improve the architecture handling.
• 4f2adbf Include /opt by default (chainguard-dev#1435)
• 6539d42 Include arm v6 and v7 in multiarch support
• c8fa707 Initial commit
• 2014a34 Inline apk package (mostly) to use go-apk directly
• 2a715e0 Integrate apko with InstallPackages api in go-apk. Support locked build with --resolved-file.
• d3d5e11 Intern parsed repository packages (chainguard-dev#2357)
• 287b39c Introduce a plug point to exchange the package cache (chainguard-dev#2017)
• 7fd722a Keep apk modtime (chainguard-dev#1305)
• 47bf15c Keep standalone DiscoverKeys function (chainguard-dev#1303)
• db97d1e Lazily compress layers, maintain diffID -> digest cache (chainguard-dev#1735)
• 299b027 Leverage apko publish in Tekton task.
• ce42f0b Linter
• 559534f Lock image configs before building (chainguard-dev#1441)
• e5786e9 Lower SBOM duplicate-package log from info to debug (chainguard-dev#2293)
• 6f4d66c Make GID its own type to prevent defaulting to 0 (chainguard-dev#1449)
• 581904a Make LockImageConfiguration incorporate options (chainguard-dev#1540)
• d45b6da Make LockImageConfiguration multi-arch aware (chainguard-dev#1432)
• dfd80b4 Make MergeInto threadsafe (chainguard-dev#1374)
• 6d8cc2a Make SPDX IDs deterministic
• a6c3a8a Make apko dot show errors
• e85ed81 Make apko hermetic again. (chainguard-dev#1654)
• bb76d2e Make dependency clear
• 78cc0a5 Make etag checks optional (chainguard-dev#1327)
• c59ae00 Make mechanical changes to allow multiple layers (chainguard-dev#1589)
• 1356c45 Make solving multi-architecture aware
• 6f80ac6 Make sure list of 'repositories' in the 'resolved.json.file' is complete.
• c52d9c0 Make sure we clean up after ourselves
• d8bc643 Make sure we pass additional tags when building image index
• e6775f7 Make tarball name deterministic
• 51d4d54 Makefile - correct indentation in checkfmt
• 54ee820 Makefile: fix make lint, reading its version from CI (chainguard-dev#2411)
• ff18904 Mark base image as experimental (chainguard-dev#1453)
• 8a34ba8 Match apk-tools' provider comparison ordering in the solver (chainguard-dev#2271)
• 95d3bdb Merge architectures (chainguard-dev#1226)
• 126657b Merge branch 'base_image_lock' of https://github.com/sfc-gh-mhazy/apko into base_image_lock
• 4f5fce4 Merge branch 'chainguard-dev:main' into ci-test-harness
• 518d13c Merge branch 'chainguard-dev:main' into ci-test-harness
• 2bea2b1 Merge branch 'chainguard-dev:main' into show-config_fix
• 418fdb8 Merge branch 'chainguard-dev:main' into traling-slash-667
• b80fe43 Merge branch 'main' into better-errors
• f6fd70d Merge branch 'main' into fix/s6-supervision-tree-permissions
• db9fc07 Merge branch 'main' into overlay
• d8b7887 Merge commit from fork
• 6c7a47f Merge pull request chainguard-dev#10 from chainguard-dev/feature/apko-publish
• 6376cf0 Merge pull request chainguard-dev#100 from kruskall/fix/skip-close
• 8bd58a2 Merge pull request chainguard-dev#1000 from Snowflake-Labs/20240102-lock-test
• 2d813ed Merge pull request chainguard-dev#1005 from jonjohnsonjr/misleading-err
• 93abcfc Merge pull request chainguard-dev#1007 from chainguard-dev/dependabot/go_modules/github.com/cloudflare/circl-1.3.7
• a01a42a Merge pull request chainguard-dev#1009 from imjasonh/drop-options
• bccfb13 Merge pull request chainguard-dev#101 from kruskall/doc/passwd-doc
• 53043fb Merge pull request chainguard-dev#1010 from imjasonh/drop-version-tags
• c10dc55 Merge pull request chainguard-dev#1011 from imjasonh/drop-logger
• daab0e7 Merge pull request chainguard-dev#1012 from Snowflake-Labs/20240117-lock-fingerprint
• 3aca955 Merge pull request chainguard-dev#1018 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.23.2
• cb2fd63 Merge pull request chainguard-dev#1019 from chainguard-dev/dependabot/go_modules/github.com/chainguard-dev/clog-1.3.0
• 6b38d6c Merge pull request chainguard-dev#102 from kruskall/fix/multi-tar-errors
• e4d3f4a Merge pull request chainguard-dev#1021 from chainguard-dev/dependabot/go_modules/github.com/google/go-containerregistry-0.19.0
• 0a6edcb Merge pull request chainguard-dev#1022 from jonjohnsonjr/offline-everywhere
• 85f7b12 Merge pull request chainguard-dev#1023 from jonjohnsonjr/bump-goapk
• 30e7121 Merge pull request chainguard-dev#1024 from jonjohnsonjr/dot-errors
• ec79ff8 Merge pull request chainguard-dev#1025 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-3.4.0
• 25ef997 Merge pull request chainguard-dev#1026 from chainguard-dev/dependabot/go_modules/github.com/sigstore/cosign/v2-2.2.3
• 5a9e87d Merge pull request chainguard-dev#1028 from imjasonh/charmlog
• 8c209ac Merge pull request chainguard-dev#1029 from jonjohnsonjr/daemon-context
• 16e3a74 Merge pull request chainguard-dev#103 from kruskall/test/testify-consistency
• 84eea73 Merge pull request chainguard-dev#1030 from jonjohnsonjr/signal-notify
• 8061391 Merge pull request chainguard-dev#1031 from jonjohnsonjr/cancel-dot
• 456e5ab Merge pull request chainguard-dev#1033 from chainguard-dev/dependabot/go_modules/github.com/chainguard-dev/clog-1.3.1
• faf3e41 Merge pull request chainguard-dev#1034 from imjasonh/debug
• e8eddf6 Merge pull request chainguard-dev#1035 from chainguard-dev/dependabot/go_modules/golang.org/x/sys-0.17.0
• b29fbd6 Merge pull request chainguard-dev#1038 from jonjohnsonjr/hardlinks
• e24686a Merge pull request chainguard-dev#104 from kruskall/refactor/accounts-summary
• 623f9b1 Merge pull request chainguard-dev#1040 from jonjohnsonjr/cleanup-tmp
• 929c6db Merge pull request chainguard-dev#1041 from chainguard-dev/dependabot/github_actions/golangci/golangci-lint-action-4.0.0
• 81b8ecb Merge pull request chainguard-dev#1043 from chainguard-dev/dependabot/go_modules/k8s.io/apimachinery-0.29.2
• bbbb057 Merge pull request chainguard-dev#1045 from jonjohnsonjr/drop-grpup
• 6639a24 Merge pull request chainguard-dev#1048 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.24.5
• 85c628a Merge pull request chainguard-dev#1049 from chainguard-dev/dependabot/go_modules/go.opentelemetry.io/otel-1.24.0
• 7826bed Merge pull request chainguard-dev#105 from chainguard-dev/dependabot/go_modules/github.com/spf13/cobra-1.4.0
• 53cb29f Merge pull request chainguard-dev#1050 from jonjohnsonjr/bunmp
• 278d65c Merge pull request chainguard-dev#1053 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.24.6
• 46c67a5 Merge pull request chainguard-dev#1055 from chainguard-dev/dependabot/go_modules/github.com/stretchr/testify-1.9.0
• e0c7478 Merge pull request chainguard-dev#1058 from chainguard-dev/dependabot/go_modules/gopkg.in/go-jose/go-jose.v2-2.6.3
• c510767 Merge pull request chainguard-dev#1059 from jonjohnsonjr/bump-go-apk-infof
• ee55c1b Merge pull request chainguard-dev#106 from kruskall/build/ignore-bin
• ce187d1 Merge pull request chainguard-dev#1061 from chainguard-dev/dependabot/github_actions/actions/checkout-4.1.2
• f2d057e Merge pull request chainguard-dev#1062 from jedsalazar/pr/jed/harden-runner-apko
• 266f1da Merge pull request chainguard-dev#1064 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.24.7
• 9636e29 Merge pull request chainguard-dev#1065 from jonjohnsonjr/more-span
• f9d2fa4 Merge pull request chainguard-dev#1066 from chainguard-dev/dependabot/go_modules/github.com/google/go-containerregistry-0.19.1
• ac3f83f Merge pull request chainguard-dev#1067 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.24.8
• 518ef1b Merge pull request chainguard-dev#107 from kruskall/refactor/decouple-exec
• 2b44a20 Merge pull request chainguard-dev#1072 from chainguard-dev/dependabot/go_modules/github.com/docker/docker-24.0.9incompatible
• d77c026 Merge pull request chainguard-dev#1073 from imjasonh/no-files
• 75e53a6 Merge pull request chainguard-dev#1074 from chainguard-dev/dependabot/go_modules/github.com/charmbracelet/log-0.4.0
• 311d007 Merge pull request chainguard-dev#1075 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.24.9
• a8177e8 Merge pull request chainguard-dev#1076 from sfc-gh-mhazy/base_image_testdata
• e213f29 Merge pull request chainguard-dev#1077 from chainguard-dev/dependabot/go_modules/github.com/go-git/go-git/v5-5.12.0
• 9355884 Merge pull request chainguard-dev#1078 from chainguard-dev/dependabot/go_modules/sigs.k8s.io/release-utils-0.8.0
• 7312b5e Merge pull request chainguard-dev#1080 from chainguard-dev/dependabot/go_modules/golang.org/x/sys-0.19.0
• e667319 Merge pull request chainguard-dev#1081 from chainguard-dev/dependabot/go_modules/golang.org/x/sync-0.7.0
• fdeeec1 Merge pull request chainguard-dev#1083 from chainguard-dev/dependabot/go_modules/sigs.k8s.io/release-utils-0.8.1
• 00e6cca Merge pull request chainguard-dev#1084 from chainguard-dev/dependabot/go_modules/go.opentelemetry.io/otel-1.25.0
• 838cc59 Merge pull request chainguard-dev#1085 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.24.10
• 121b424 Merge pull request chainguard-dev#1086 from sfc-gh-mhazy/base_image_lock
• 98345d4 Merge pull request chainguard-dev#1087 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-3.5.0
• e905cf6 Merge pull request chainguard-dev#1088 from chainguard-dev/dependabot/go_modules/github.com/sigstore/cosign/v2-2.2.4
• e6d768e Merge pull request chainguard-dev#1089 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.25.0
• 1dd3f47 Merge pull request chainguard-dev#109 from kruskall/fix/missing-arch
• 60e8b1d Merge pull request chainguard-dev#1092 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.25.1
• 6c8a27e Merge pull request chainguard-dev#1094 from chainguard-dev/dependabot/go_modules/go_modules-b9ac453758
• 2142b11 Merge pull request chainguard-dev#1095 from imjasonh/no-files-again
• e11ff85 Merge pull request chainguard-dev#1097 from chainguard-dev/change-shell
• 4e27998 Merge pull request chainguard-dev#1098 from chainguard-dev/dependabot/github_actions/actions/checkout-4.1.3
• 2877c44 Merge pull request chainguard-dev#1099 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.25.2
• 7580bb2 Merge pull request chainguard-dev#110 from kruskall/refactor/arch-opts
• 64231f0 Merge pull request chainguard-dev#1100 from chainguard-dev/dependabot/github_actions/actions/checkout-4.1.4
• 932a499 Merge pull request chainguard-dev#1101 from chainguard-dev/dependabot/github_actions/golangci/golangci-lint-action-5.0.0
• d6fefc8 Merge pull request chainguard-dev#1102 from chainguard-dev/dependabot/go_modules/go.opentelemetry.io/otel-1.26.0
• 9ea0a6d Merge pull request chainguard-dev#1103 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.25.3
• 3de6ba8 Merge pull request chainguard-dev#1104 from chainguard-dev/dependabot/github_actions/golangci/golangci-lint-action-5.1.0
• 5ccdaae Merge pull request chainguard-dev#1105 from chainguard-dev/dependabot/github_actions/step-security/harden-runner-2.7.1
• f043c5a Merge pull request chainguard-dev#1106 from chainguard-dev/dependabot/github_actions/actions/setup-go-5.0.1
• 2f2dd8c Merge pull request chainguard-dev#1109 from chainguard-dev/dependabot/go_modules/golang.org/x/sys-0.20.0
• 91e5c5e Merge pull request chainguard-dev#1110 from imjasonh/no-alpine
• c527341 Merge pull request chainguard-dev#1112 from chainguard-dev/dependabot/github_actions/actions/checkout-4.1.5
• 9541220 Merge pull request chainguard-dev#1113 from chainguard-dev/dependabot/go_modules/sigs.k8s.io/release-utils-0.8.2
• 921bb22 Merge pull request chainguard-dev#1114 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.25.4
• 30daa12 Merge pull request chainguard-dev#1115 from chainguard-dev/dependabot/github_actions/golangci/golangci-lint-action-6.0.1
• eacdde3 Merge pull request chainguard-dev#1119 from sfc-gh-mhazy/overlay
• bb3074e Merge pull request chainguard-dev#112 from kruskall/refactor/move-assertions
• 20850c6 Merge pull request chainguard-dev#1120 from jonjohnsonjr/bump-dirfs
• 8a88767 Merge pull request chainguard-dev#1122 from chainguard-dev/dependabot/github_actions/goreleaser/goreleaser-action-5.1.0
• bd4c34b Merge pull request chainguard-dev#1124 from jonjohnsonjr/conflict-bump
• ca58d0b Merge pull request chainguard-dev#1125 from jonjohnsonjr/conflict-bump
• 5d04bae Merge pull request chainguard-dev#1127 from xnox/custom-license
• 9ebdb6e Merge pull request chainguard-dev#1129 from chainguard-dev/dependabot/go_modules/github.com/package-url/packageurl-go-0.1.3
• 6a8cb71 Merge pull request chainguard-dev#113 from kruskall/fix/more-filepath-join
• 27d8d1b Merge pull request chainguard-dev#1130 from chainguard-dev/dependabot/github_actions/actions/checkout-4.1.6
• ceb4671 Merge pull request chainguard-dev#1132 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.25.6
• 5c68fe8 Merge pull request chainguard-dev#1133 from xnox/custom-license-image-sbom
• 995b848 Merge pull request chainguard-dev#1134 from chainguard-dev/dependabot/go_modules/go.opentelemetry.io/otel-1.27.0
• dbef81d Merge pull request chainguard-dev#1135 from chainguard-dev/dependabot/github_actions/step-security/harden-runner-2.8.0
• 4800950 Merge pull request chainguard-dev#1137 from xnox/backpopulate-supplier
• 35091e0 Merge pull request chainguard-dev#114 from DamianZaremba/correct-makefile-indentation
• 1781b2d Merge pull request chainguard-dev#1140 from imjasonh/bump-go-apk-3
• b69d852 Merge pull request chainguard-dev#1141 from luhring/bump-go-apk
• fbcfff4 Merge pull request chainguard-dev#1142 from imjasonh/auth
• 5e2ea67 Merge pull request chainguard-dev#1143 from imjasonh/unsplit
• b57c3c0 Merge pull request chainguard-dev#1144 from mattmoor/fix-boolean-logic
• 3cdec39 Merge pull request chainguard-dev#1146 from joshrwolf/home-dir
• c28d867 Merge pull request chainguard-dev#1147 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.25.7
• f5aa053 Merge pull request chainguard-dev#1148 from joshrwolf/homedir-2
• bf80693 Merge pull request chainguard-dev#1149 from imjasonh/per-host-auth
• 5c242fa Merge pull request chainguard-dev#115 from kruskall/feat/s6
• a8f75f5 Merge pull request chainguard-dev#1150 from chainguard-dev/dependabot/go_modules/golang.org/x/sys-0.21.0
• 90ea934 Merge pull request chainguard-dev#1151 from imjasonh/old-packages
• 4715ee7 Merge pull request chainguard-dev#1152 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.25.8
• 2d2278d Merge pull request chainguard-dev#1153 from chainguard-dev/dependabot/github_actions/goreleaser/goreleaser-action-6.0.0
• 8acc0d8 Merge pull request chainguard-dev#1154 from jonjohnsonjr/go-apk-lints
• 95e3399 Merge pull request chainguard-dev#1156 from jonjohnsonjr/split-apk
• f81bbd3 Merge pull request chainguard-dev#1157 from mark-thm/me/1057
• 5cc150d Merge pull request chainguard-dev#1158 from chainguard-dev/dependabot/github_actions/step-security/harden-runner-2.8.1
• 3f68f08 Merge pull request chainguard-dev#1159 from imjasonh/rm-sbom
• ab68c25 Merge pull request chainguard-dev#116 from kruskall/fix/goimports
• 0b0ee7d Merge pull request chainguard-dev#1160 from sfc-gh-mhazy/paths
• 73af047 Merge pull request chainguard-dev#1161 from chainguard-dev/dependabot/go_modules/github.com/klauspost/compress-1.17.9
• 91b6f90 Merge pull request chainguard-dev#1162 from chainguard-dev/dependabot/github_actions/imjasonh/setup-crane-0.4
• 5874541 Merge pull request chainguard-dev#1165 from chainguard-dev/dependabot/go_modules/k8s.io/apimachinery-0.30.2
• b60a97f Merge pull request chainguard-dev#1166 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.25.10
• 8b54ba1 Merge pull request chainguard-dev#1167 from chainguard-dev/dependabot/github_actions/actions/checkout-4.1.7
• 591baa1 Merge pull request chainguard-dev#1168 from imjasonh/rm-log
• ac840f8 Merge pull request chainguard-dev#1169 from mattmoor/build-repos
• a96402a Merge pull request chainguard-dev#117 from jdolitsky/apko-on-mac
• 713b8c6 Merge pull request chainguard-dev#1170 from chainguard-dev/dependabot/go_modules/github.com/spf13/cobra-1.8.1
• aa21784 Merge pull request chainguard-dev#1171 from chainguard-dev/dependabot/go_modules/github.com/google/go-containerregistry-0.19.2
• a2b5a71 Merge pull request chainguard-dev#1172 from jonjohnsonjr/busybox-links
• 98fa7be Merge pull request chainguard-dev#1174 from msfidelis/golang_example
• baf9fc7 Merge pull request chainguard-dev#1176 from chainguard-dev/dependabot/go_modules/github.com/chainguard-dev/clog-1.4.0
• 2a47a3f Merge pull request chainguard-dev#1179 from Kevin-Molina/main
• 9f25037 Merge pull request chainguard-dev#118 from chainguard-dev/feature/qemu-proot-exec
• bc6fa0a Merge pull request chainguard-dev#1180 from jonjohnsonjr/multi
• 057f3e2 Merge pull request chainguard-dev#1182 from imjasonh/auth-helper
• f210455 Merge pull request chainguard-dev#1183 from chainguard-dev/dependabot/github_actions/github/codeql-action-3.25.11
• 8552422 Merge pull request chainguard-dev#1184 from sfc-gh-mhazy/apko-on-top-users
• 20f57d2 Merge pull request chainguard-dev#1185 from jdolitsky/authenticators
• b1262eb Merge pull request chainguard-dev#1187 from chainguard-dev/dependabot/github_actions/docker/setup-qemu-action-3.1.0
• e2bc1c8 Merge pull request chainguard-dev#1188 from chainguard-dev/dependabot/go_modules/go.opentelemetry.io/otel/trace-1.28.0
• a236b50 Merge pull request chainguard-dev#119 from chainguard-dev/refactor/logging
• 10e2c1a Merge pull request chainguard-dev#1190 from imjasonh/no-os-release
• 9ea58a7 Merge pull request chainguard-dev#1191 from imjasonh/no-remote-fetch
• 0f83208 Merge pull request chainguard-dev#1193 from ajayk/apko-nil
• b62be32 Merge pull request chainguard-dev#1194 from ajayk/test
• d787105 Merge pull request chainguard-dev#1196 from chainguard-dev/dependabot/go_modules/golang.org/x/sys-0.22.0
• bb28bb9 Merge pull request chainguard-dev#12 from mattmoor/keychain
• b213c00 Merge pull request chainguard-dev#120 from jdolitsky/mac-readme-fix
• 03b4d4c Merge pull request chainguard-dev#121 from imjasonh/parse-arch
• e08ccce Merge pull request chainguard-dev#122 from chainguard-dev/fix/multiarch
• 386d7bd Merge pull request chainguard-dev#123 from jdolitsky/another-typo
• cca389f Merge pull request chainguard-dev#124 from Dentrax/feature/codeql
• 2630fe1 Merge pull request chainguard-dev#125 from imjasonh/login
• 67ff378 Merge pull request chainguard-dev#127 from mattmoor/default-config
• 33ae097 Merge pull request chainguard-dev#13 from chainguard-dev/chore/coc
• 9c69657 Merge pull request chainguard-dev#131 from chainguard-dev/bugfix/apko-logging
• 90449c1 Merge pull request chainguard-dev#132 from chainguard-dev/bugfix/create-homedir
• 598edbf Merge pull request chainguard-dev#133 from cpanato/updates
• 506a2de Merge pull request chainguard-dev#134 from chainguard-dev/dependabot/go_modules/github.com/stretchr/testify-1.7.1
• 5a496a4 Merge pull request chainguard-dev#135 from chainguard-dev/dependabot/go_modules/github.com/maxbrunsfeld/counterfeiter/v6-6.5.0
• e8d8b36 Merge pull request chainguard-dev#137 from mattmoor/dogfood-apko
• 75650a1 Merge pull request chainguard-dev#138 from mattmoor/set-media-type
• 8c6ef40 Merge pull request chainguard-dev#139 from mattmoor/multi-arch-tekton
• 00869ac Merge pull request chainguard-dev#140 from chainguard-dev/feature/environment
• 13ac274 Merge pull request chainguard-dev#141 from chainguard-dev/bugfix/archive-hardlink
• 51b360e Merge pull request chainguard-dev#146 from mattmoor/switch-to-cosign-oci-types
• 866c64a Merge pull request chainguard-dev#147 from mattmoor/write-peripherals
• 4b6dcc1 Merge pull request chainguard-dev#149 from mattmoor/attach-sboms
• 89ab79e Merge pull request chainguard-dev#15 from mattmoor/release-workflow
• 319bc59 Merge pull request chainguard-dev#150 from puerco/implement-build
• ae0187d Merge pull request chainguard-dev#151 from chainguard-dev/dependabot/go_modules/gitlab.alpinelinux.org/alpine/go-0.4.0
• 3f3c72c Merge pull request chainguard-dev#152 from chainguard-dev/dependabot/go_modules/sigs.k8s.io/release-utils-0.6.0
• 0069ad4 Merge pull request chainguard-dev#153 from chainguard-dev/chore/pargzip
• 0e28083 Merge pull request chainguard-dev#154 from chainguard-dev/fix/128
• 17c25e7 Merge pull request chainguard-dev#155 from puerco/workspace
• 89138e9 Merge pull request chainguard-dev#156 from amouat/main
• 46824a3 Merge pull request chainguard-dev#157 from amouat/docker-dev
• ae6bfdd Merge pull request chainguard-dev#158 from amouat/run-devenv
• 98e1549 Merge pull request chainguard-dev#16 from cpanato/update-goreleaser
• ea6e58a Merge pull request chainguard-dev#160 from chainguard-dev/feature/path-mutations
• c3aa34a Merge pull request chainguard-dev#161 from puerco/executor-interface
• ee094e7 Merge pull request chainguard-dev#162 from DamianZaremba/fix-config-archs-support
• 4bb4d36 Merge pull request chainguard-dev#163 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.6
• da97502 Merge pull request chainguard-dev#164 from amouat/docs
• d55e1f9 Merge pull request chainguard-dev#168 from chainguard-dev/feature/os-release-mutation
• d388e8e Merge pull request chainguard-dev#169 from amouat/readme
• 1bdb6fb Merge pull request chainguard-dev#17 from cpanato/updates
• aa5cd27 Merge pull request chainguard-dev#172 from amouat/docs-fix
• 70e0425 Merge pull request chainguard-dev#173 from chainguard-dev/feature/shell-command
• 512709c Merge pull request chainguard-dev#174 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.8
• 4dc29a6 Merge pull request chainguard-dev#175 from amouat/example
• 306d76f Merge pull request chainguard-dev#176 from chainguard-dev/bugfix/devenv-bashisms
• ece449d Merge pull request chainguard-dev#178 from amouat/default-entry
• b17d80b Merge pull request chainguard-dev#182 from mattmoor/ensure-homedir-exists
• cc55847 Merge pull request chainguard-dev#183 from mattmoor/fix-permissions
• 23b5a8c Merge pull request chainguard-dev#184 from chainguard-dev/dependabot/github_actions/actions/checkout-3.0.1
• 5c73d1b Merge pull request chainguard-dev#190 from chainguard-dev/dependabot/github_actions/actions/checkout-3.0.2
• c43a0f7 Merge pull request chainguard-dev#191 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.9
• db49f43 Merge pull request chainguard-dev#192 from chainguard-dev/dependabot/go_modules/github.com/google/go-cmp-0.5.8
• 2e58176 Merge pull request chainguard-dev#194 from chainguard-dev/github-action-image-project-issues
• 9a53320 Merge pull request chainguard-dev#195 from chainguard-dev/dependabot/github_actions/docker/setup-qemu-action-2.0.0
• 1a61ae3 Merge pull request chainguard-dev#196 from amouat/date
• f476d8c Merge pull request chainguard-dev#197 from chainguard-dev/updated-add-issues
• 879bc22 Merge pull request chainguard-dev#198 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.10
• 2d59c91 Merge pull request chainguard-dev#199 from chainguard-dev/dependabot/github_actions/golangci/golangci-lint-action-3.2.0
• e7112e3 Merge pull request chainguard-dev#200 from chainguard-dev/dependabot/github_actions/actions/setup-go-3.1.0
• def0e9b Merge pull request chainguard-dev#202 from chainguard-dev/feature/show-config
• 818f081 Merge pull request chainguard-dev#204 from imjasonh/unexport
• f8503ab Merge pull request chainguard-dev#205 from tstromberg/main
• 4d00ad4 Merge pull request chainguard-dev#206 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.11
• 8646c26 Merge pull request chainguard-dev#207 from chainguard-dev/dependabot/github_actions/goreleaser/goreleaser-action-3
• 52e3023 Merge pull request chainguard-dev#210 from jdolitsky/oci-mediatypes
• bdb2346 Merge pull request chainguard-dev#212 from jdolitsky/canary-image
• 97d7e47 Merge pull request chainguard-dev#213 from jdolitsky/oci-by-default
• ce86d99 Merge pull request chainguard-dev#214 from amouat/faq
• 8e83cc2 Merge pull request chainguard-dev#215 from chainguard-dev/dependabot/github_actions/actions/setup-go-3.2.0
• c8935cf Merge pull request chainguard-dev#216 from chainguard-dev/fix/sbom-date
• 3bd76af Merge pull request chainguard-dev#217 from chainguard-dev/feature/attested-apkdb
• 08d2728 Merge pull request chainguard-dev#218 from imjasonh/release-task
• 98c64d5 Merge pull request chainguard-dev#219 from imjasonh/bump-cosign
• 114d605 Merge pull request chainguard-dev#220 from chainguard-dev/chore/news-0.4.0
• ce8258d Merge pull request chainguard-dev#221 from cpanato/go118
• d0152d5 Merge pull request chainguard-dev#222 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.12
• 9968c40 Merge pull request chainguard-dev#223 from chainguard-dev/dependabot/go_modules/github.com/stretchr/testify-1.7.2
• 0e89948 Merge pull request chainguard-dev#224 from imjasonh/fix-tekton-release
• 780d4ac Merge pull request chainguard-dev#227 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-2.4.0
• a319c46 Merge pull request chainguard-dev#228 from chainguard-dev/dependabot/go_modules/sigs.k8s.io/release-utils-0.7.1
• 8055f44 Merge pull request chainguard-dev#23 from puerco/keyrings
• e1fa90f Merge pull request chainguard-dev#232 from jspeed-meyers/readme-fixes
• 7a6f9bb Merge pull request chainguard-dev#233 from amouat/update_alpine
• 5f042c7 Merge pull request chainguard-dev#235 from chainguard-dev/dependabot/go_modules/gitlab.alpinelinux.org/alpine/go-0.5.0
• e29fcdc Merge pull request chainguard-dev#237 from chainguard-dev/dependabot/go_modules/github.com/stretchr/testify-1.7.4
• 76080f5 Merge pull request chainguard-dev#238 from chainguard-dev/fix/devenv-scripts-susv4
• cfdbf45 Merge pull request chainguard-dev#24 from puerco/go-tests
• 5ce71d7 Merge pull request chainguard-dev#241 from chainguard-dev/feature/publish-backoff
• 610abd9 Merge pull request chainguard-dev#243 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.14
• 46ef4e0 Merge pull request chainguard-dev#244 from chainguard-dev/dependabot/go_modules/github.com/stretchr/testify-1.7.5
• 424e1cf Merge pull request chainguard-dev#245 from chainguard-dev/dependabot/go_modules/github.com/google/go-containerregistry-0.10.0
• 4e3177a Merge pull request chainguard-dev#246 from chainguard-dev/dependabot/go_modules/github.com/spf13/cobra-1.5.0
• ab57dbe Merge pull request chainguard-dev#247 from chainguard-dev/fix/s6-supervision-tree-permissions
• 30e7a8d Merge pull request chainguard-dev#248 from chainguard-dev/feature/logrus
• 0dd7128 Merge pull request chainguard-dev#249 from chainguard-dev/fix/archs-all
• 20773b8 Merge pull request chainguard-dev#25 from chainguard-dev/dependabot/github_actions/goreleaser/goreleaser-action-2.9.1
• b54c185 Merge pull request chainguard-dev#251 from puerco/image-sboms
• 535951b Merge pull request chainguard-dev#252 from imjasonh/arch-all
• 1a3b3fe Merge pull request chainguard-dev#254 from jspeed-meyers/readme-install-section
• 04f9573 Merge pull request chainguard-dev#256 from puerco/cyclonedx-refs
• 9eb34d6 Merge pull request chainguard-dev#257 from puerco/index-sbom
• c545077 Merge pull request chainguard-dev#258 from chainguard-dev/amouat-patch-1
• 44990fc Merge pull request chainguard-dev#26 from chainguard-dev/dependabot/github_actions/docker/login-action-1.14.0
• c77bae8 Merge pull request chainguard-dev#260 from chainguard-dev/feature/qemu-user-static
• a13597f Merge pull request chainguard-dev#261 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-2.4.1
• def01c7 Merge pull request chainguard-dev#262 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.15
• 3386b2d Merge pull request chainguard-dev#263 from chainguard-dev/dependabot/go_modules/github.com/stretchr/testify-1.8.0
• fed231d Merge pull request chainguard-dev#264 from puerco/spdx-restructure
• 027324f Merge pull request chainguard-dev#265 from puerco/write-crash
• c8d1ede Merge pull request chainguard-dev#266 from puerco/mink-index-sbom
• e041512 Merge pull request chainguard-dev#267 from chainguard-dev/feature/apko-build-strip-multiarch
• c006cbb Merge pull request chainguard-dev#269 from chainguard-dev/feature/workaround-git-cve
• adeb59d Merge pull request chainguard-dev#270 from puerco/nits
• ef8e575 Merge pull request chainguard-dev#272 from chainguard-dev/fix/logging-empty-arch
• aca966a Merge pull request chainguard-dev#273 from chainguard-dev/feature/vcs-url
• 94040a3 Merge pull request chainguard-dev#274 from puerco/index-cyclonedx
• 0b64867 Merge pull request chainguard-dev#275 from chainguard-dev/feature/workdir
• fce2a5f Merge pull request chainguard-dev#276 from amouat/doc_workdir
• 7cafd33 Merge pull request chainguard-dev#277 from priyawadhwa/directory-permissions
• 9cd2860 Merge pull request chainguard-dev#279 from puerco/sbom-vcs
• 09727bb Merge pull request chainguard-dev#280 from puerco/vcs-for-realz
• 4de4065 Merge pull request chainguard-dev#282 from chainguard-dev/dependabot/github_actions/actions/setup-go-3.2.1
• 92f3624 Merge pull request chainguard-dev#283 from puerco/purl-fix
• 2f7017b Merge pull request chainguard-dev#284 from chainguard-dev/feature/vcs-skip
• e58c0dc Merge pull request chainguard-dev#285 from puerco/full-mediatypes
• ef78008 Merge pull request chainguard-dev#286 from puerco/fix-purl-names
• 6a28541 Merge pull request chainguard-dev#287 from puerco/fix-vcs-bug
• bea1256 Merge pull request chainguard-dev#289 from chainguard-dev/feature/uidmap
• d9c52a5 Merge pull request chainguard-dev#29 from imjasonh/stdout-digest
• 060cf91 Merge pull request chainguard-dev#293 from puerco/purl-escape
• 21f800b Merge pull request chainguard-dev#294 from chainguard-dev/feature/remote-include
• 1b65fb9 Merge pull request chainguard-dev#295 from puerco/refs-2-file
• 3e66964 Merge pull request chainguard-dev#296 from puerco/oci-annotations
• a9800fe Merge pull request chainguard-dev#297 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.16
• 920e910 Merge pull request chainguard-dev#298 from chainguard-dev/dependabot/go_modules/sigs.k8s.io/release-utils-0.7.2
• 71cdb24 Merge pull request chainguard-dev#299 from chainguard-dev/chore/release-notes-0.5.0
• 1f6ec42 Merge pull request chainguard-dev#300 from AlexsJones/patch-1
• 34a8fbc Merge pull request chainguard-dev#302 from dln/main
• 3de77ec Merge pull request chainguard-dev#304 from chainguard-dev/dependabot/go_modules/github.com/google/go-containerregistry-0.11.0
• 6461349 Merge pull request chainguard-dev#305 from priyawadhwa/refactor-pointers
• 8cbefb9 Merge pull request chainguard-dev#306 from priyawadhwa/package-versions
• 7293379 Merge pull request chainguard-dev#307 from puerco/parallel-safe-publish
• 70265b4 Merge pull request chainguard-dev#309 from puerco/read-apk-sboms
• 0bc67e5 Merge pull request chainguard-dev#311 from amouat/doc_workdir
• b46df89 Merge pull request chainguard-dev#312 from chainguard-dev/dependabot/github_actions/imjasonh/setup-ko-0.5
• 57d3927 Merge pull request chainguard-dev#313 from chainguard-dev/dependabot/github_actions/imjasonh/setup-crane-0.2
• 1e73824 Merge pull request chainguard-dev#314 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-2.5.0
• 68477d6 Merge pull request chainguard-dev#315 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.17
• 1627ff7 Merge pull request chainguard-dev#316 from chainguard-dev/dependabot/go_modules/sigs.k8s.io/release-utils-0.7.3
• 0bf692a Merge pull request chainguard-dev#317 from chainguard-dev/dependabot/go_modules/gitlab.alpinelinux.org/alpine/go-0.5.1
• 8293df3 Merge pull request chainguard-dev#318 from puerco/spdx-file
• a659a13 Merge pull request chainguard-dev#319 from priyawadhwa/fix-tagging
• 6a95705 Merge pull request chainguard-dev#32 from imjasonh/rm-cmd-apko
• 0e373ad Merge pull request chainguard-dev#320 from puerco/vcs-commit
• 61f2d84 Merge pull request chainguard-dev#321 from puerco/vcs-downloadloc
• b72cf7d Merge pull request chainguard-dev#322 from puerco/fix-vcs-annotation
• 0b9840f Merge pull request chainguard-dev#323 from priyawadhwa/passin-auth
• 16a1976 Merge pull request chainguard-dev#324 from priyawadhwa/revert
• 87ec9fb Merge pull request chainguard-dev#325 from priyawadhwa/auth
• 868f0dc Merge pull request chainguard-dev#326 from jdolitsky/nil-map
• 38393c5 Merge pull request chainguard-dev#327 from puerco/spdx-source-package
• 9084217 Merge pull request chainguard-dev#328 from chainguard-dev/feature/arch-native
• 87c4c80 Merge pull request chainguard-dev#329 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.18
• 1e2e81a Merge pull request chainguard-dev#330 from chainguard-dev/feature/vfs
• 97cfaa2 Merge pull request chainguard-dev#331 from puerco/source-pkg-purl
• 95a6244 Merge pull request chainguard-dev#332 from chainguard-dev/update-readme
• 22d381b Merge pull request chainguard-dev#333 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-2.5.1
• 579a82f Merge pull request chainguard-dev#334 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.20
• a63c191 Merge pull request chainguard-dev#337 from chainguard-dev/alleged-feature/ldconfig
• 80873c8 Merge pull request chainguard-dev#338 from puerco/SPDX-2.3
• 2b9e28b Merge pull request chainguard-dev#339 from chainguard-dev/dependabot/github_actions/actions/setup-go-3.3.0
• 6b21dc1 Merge pull request chainguard-dev#340 from chainguard-dev/dependabot/github_actions/goreleaser/goreleaser-action-3.1.0
• f3dfee9 Merge pull request chainguard-dev#341 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.21
• 937b2b2 Merge pull request chainguard-dev#342 from chainguard-dev/fix/ldconfig
• 0cf1314 Merge pull request chainguard-dev#343 from chainguard-dev/fix/logging-synchronization
• 9313fee Merge pull request chainguard-dev#345 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.22
• a9e02e8 Merge pull request chainguard-dev#346 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-2.6.0
• ed2b34c Merge pull request chainguard-dev#347 from chainguard-dev/dependabot/github_actions/imjasonh/setup-ko-0.6
• 03082eb Merge pull request chainguard-dev#348 from chainguard-dev/dependabot/go_modules/gitlab.alpinelinux.org/alpine/go-0.6.0
• 8f5f660 Merge pull request chainguard-dev#349 from chainguard-dev/dependabot/go_modules/github.com/google/go-cmp-0.5.9
• b429e9d Merge pull request chainguard-dev#35 from chainguard-dev/feature/proot
• 11db8ac Merge pull request chainguard-dev#351 from jdolitsky/os-release
• d526852 Merge pull request chainguard-dev#353 from imjasonh/annotations
• 0673f61 Merge pull request chainguard-dev#354 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.24
• 7b2593c Merge pull request chainguard-dev#355 from chainguard-dev/feature/tag-suffix
• 9f09efa Merge pull request chainguard-dev#356 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-2.7.0
• 1386d74 Merge pull request chainguard-dev#357 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.25
• 5d9f71d Merge pull request chainguard-dev#36 from chainguard-dev/feature/multi-tag
• 51ec859 Merge pull request chainguard-dev#360 from rawlingsj/yaml_tags
• 938311d Merge pull request chainguard-dev#363 from amouat/main
• 5fcfaf3 Merge pull request chainguard-dev#364 from luhring/fix-config-arch-and-variant
• 1a1d163 Merge pull request chainguard-dev#365 from chainguard-dev/fix/erroneous-alpine-release
• c62b47d Merge pull request chainguard-dev#366 from imjasonh/idx-ann
• 4c79d4e Merge pull request chainguard-dev#367 from imjasonh/cgr-dev
• 4e241b3 Merge pull request chainguard-dev#368 from cpanato/update-dependabot
• c57633b Merge pull request chainguard-dev#369 from cpanato/update-to-go1.19
• 8d10dfe Merge pull request chainguard-dev#37 from developer-guy/main
• c2756fe Merge pull request chainguard-dev#370 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.26
• df38f45 Merge pull request chainguard-dev#371 from cpanato/remove-not-used-err
• a794dad Merge pull request chainguard-dev#372 from chainguard-dev/dependabot/github_actions/actions/checkout-3.1.0
• 205a943 Merge pull request chainguard-dev#374 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-2.8.0
• 767cbd1 Merge pull request chainguard-dev#376 from amouat/main
• 5531f2f Merge pull request chainguard-dev#379 from chainguard-dev/dependabot/github_actions/docker/setup-qemu-action-2.1.0
• b735d9f Merge pull request chainguard-dev#38 from chainguard-dev/feature/fetch-keyring
• 2a17313 Merge pull request chainguard-dev#380 from chainguard-dev/dependabot/go_modules/github.com/spf13/cobra-1.6.0
• 352e1c6 Merge pull request chainguard-dev#381 from chainguard-dev/dependabot/github_actions/goreleaser/goreleaser-action-3.2.0
• f3ac427 Merge pull request chainguard-dev#382 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.28
• f7909f3 Merge pull request chainguard-dev#383 from chainguard-dev/dependabot/github_actions/actions/setup-go-3.3.1
• bbd0ad7 Merge pull request chainguard-dev#384 from chainguard-dev/dependabot/go_modules/github.com/sigstore/cosign-1.13.1
• 95b8682 Merge pull request chainguard-dev#386 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-2.8.1
• 4efe132 Merge pull request chainguard-dev#388 from imjasonh/unescape
• c459c8b Merge pull request chainguard-dev#39 from kruskall/feat/parallel-init
• e775a2b Merge pull request chainguard-dev#390 from puerco/fix-purlencoding
• 2bbccfc Merge pull request chainguard-dev#391 from puerco/fix-purlencoding
• 4edce52 Merge pull request chainguard-dev#392 from patflynn/add-project-syncer
• d9f4575 Merge pull request chainguard-dev#393 from chainguard-dev/dependabot/go_modules/github.com/google/go-containerregistry-0.12.0
• ebac832 Merge pull request chainguard-dev#394 from chainguard-dev/dependabot/github_actions/golangci/golangci-lint-action-3.3.0
• 608caba Merge pull request chainguard-dev#395 from chainguard-dev/dependabot/go_modules/github.com/stretchr/testify-1.8.1
• 791d2e4 Merge pull request chainguard-dev#397 from chainguard-dev/dependabot/go_modules/github.com/spf13/cobra-1.6.1
• 1483901 Merge pull request chainguard-dev#40 from kruskall/test/tmpdir
• bf689dc Merge pull request chainguard-dev#401 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.31
• 8677657 Merge pull request chainguard-dev#402 from chainguard-dev/feature/gnu-triplet
• 179d388 Merge pull request chainguard-dev#405 from jdolitsky/version-stem
• 75a4805 Merge pull request chainguard-dev#406 from deitch/doc-build-process
• cfe8e56 Merge pull request #407 from chainguard-dev/dependabot/github_actions/golangci/golangci-lint-action-3.3.1
• e6f3703 Merge pull request #408 from chainguard-dev/dependabot/go_modules/github.com/google/go-containerregistry-0.12.1
• 03ad636 Merge pull request #409 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.32
• 9358e74 Merge pull request #411 from puerco/vcs-id-fix
• 7ee5dec Merge pull request #416 from imjasonh/purl
• 7aa15e8 Merge pull request #418 from chainguard-dev/bugfix/proot
• f8ca213 Merge pull request #420 from jdolitsky/apko-publish-local
• 023a995 Merge pull request #421 from rawlingsj/yaml_tags_contents
• 79fcc7d Merge pull request #422 from chainguard-dev/dependabot/github_actions/actions/setup-go-3.4.0
• 28bea29 Merge pull request #424 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.35
• 973e08d Merge pull request #426 from deitch/apk-cli-free
• dd4e249 Merge pull request #427 from deitch/flexible-header
• 358d3d4 Merge pull request #430 from chainguard-dev/chore/release-notes-0.6.0
• a928fc4 Merge pull request #431 from puerco/fix-single-image-sbom
• dc8a517 Merge pull request #432 from puerco/spdx-minors
• 4f5bc55 Merge pull request #433 from jdolitsky/stage-tags
• 16d9c56 Merge pull request #434 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.36
• f51a2a8 Merge pull request #435 from puerco/index-sbon-only-if-index
• fae9b84 Merge pull request #440 from puerco/compose-doc
• 76c455f Merge pull request #442 from chainguard-dev/dependabot/github_actions/goreleaser/goreleaser-action-4.1.0
• 37f45aa Merge pull request #443 from chainguard-dev/dependabot/github_actions/actions/setup-go-3.5.0
• 3f633e4 Merge pull request #445 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.37
• ec747f5 Merge pull request #446 from puerco/originator-type
• 2656385 Merge pull request #45 from kruskall/fix/file-leak
• 328553a Merge pull request #453 from chainguard-dev/dependabot/github_actions/actions/checkout-3.3.0
• 4a24218 Merge pull request #454 from chainguard-dev/fix/armv7-triplet
• 7163851 Merge pull request #455 from chainguard-dev/dependabot/go_modules/github.com/go-git/go-git/v5-5.5.2
• dd09abd Merge pull request #456 from chainguard-dev/fix/no-system-keyring
• 1e4990c Merge pull request #457 from chainguard-dev/chore/copyright-updates-2023
• 7a5ac86 Merge pull request #458 from deitch/build-samples-directly
• 39c8a70 Merge pull request #459 from rawlingsj/no_scripts
• cf9e6f2 Merge pull request #460 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.38
• 2169cda Merge pull request #461 from puerco/redash-damn-it
• 5a924bf Merge pull request #462 from chainguard-dev/feature/die-proot-die
• ec205b9 Merge pull request #463 from chainguard-dev/fix/native-apk-roundup
• 9b500c6 Merge pull request #465 from deitch/read-keyfiles-local
• bb3e8bd Merge pull request #466 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.1.39
• b079022 Merge pull request #467 from chainguard-dev/dependabot/go_modules/golang.org/x/sys-0.4.0
• 0c0a8ae Merge pull request #468 from jdolitsky/ensure-higher-version
• 3ca3c48 Merge pull request #47 from panekj/filepathJoin
• 1e6d158 Merge pull request #471 from deitch/fs-for-entire-build
• 26ce322 Merge pull request #472 from deitch/handle-alias-only-pkgnames
• 21159b6 Merge pull request #473 from deitch/version-with-constraints
• b21be87 Merge pull request #474 from chainguard-dev/dependabot/github_actions/golangci/golangci-lint-action-3.4.0
• 043fac2 Merge pull request #475 from deitch/populate-dirfs
• 2b2111d Merge pull request #476 from chainguard-dev/dependabot/go_modules/github.com/google/go-containerregistry-0.13.0
• 0c96f19 Merge pull request #477 from puerco/readreleasedata
• 52de65b Merge pull request #478 from deitch/case-sensitive-dirfs
• d333405 Merge pull request #479 from katexochen/main
• 88a27ef Merge pull request #480 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.2.1
• a632306 Merge pull request #482 from chainguard-dev/dependabot/github_actions/goreleaser/goreleaser-action-4.2.0
• 947931e Merge pull request #483 from imjasonh/ic-types
• 982e7df Merge pull request #486 from chainguard-dev/dependabot/go_modules/github.com/maxbrunsfeld/counterfeiter/v6-6.6.1
• e4cf1bb Merge pull request #487 from deitch/handle-create-already-exists
• 96b3e93 Merge pull request #49 from chainguard-dev/feature/passwd
• 999810b Merge pull request #490 from chainguard-dev/fix/initdb-err-mkdir
• 008c732 Merge pull request #491 from chainguard-dev/fix/initdb-err-mkdir
• c98d1d4 Merge pull request #495 from deitch/publish-separate-workdir
• 9fb42d8 Merge pull request #498 from deitch/chown-chmod
• dfc8b9a Merge pull request #499 from deitch/all-archs-by-default
• f6cea28 Merge pull request #5 from mattmoor/ko-ify
• 0da9e51 Merge pull request #500 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.2.4
• 477bf3c Merge pull request #501 from deitch/tarball-for-sbom
• 274d177 Merge pull request #502 from imjasonh/cosign-v2
• 7727018 Merge pull request #503 from chainguard-dev/chore/fix-canary-version
• 7ae925f Merge pull request #504 from deitch/correctly-handle-build-archs
• f7c9587 Merge pull request #506 from deitch/link-fix
• d0312e3 Merge pull request #507 from developer-guy/feature/apk-upgrade
• 892b4f2 Merge pull request #508 from deitch/same-package-provides-depends
• ebe6c40 Merge pull request #509 from deitch/use-highest-version-provides-deps
• 22d03b1 Merge pull request #51 from kruskall/feat/reproducibility
• 496e951 Merge pull request #510 from chainguard-dev/dependabot/go_modules/github.com/sigstore/cosign/v2-2.0.0-rc.3
• 11db74a Merge pull request #511 from deitch/provider-logic-refinement
• ff53186 Merge pull request #512 from deitch/sort-sigsegv
• bc64788 Merge pull request #513 from chainguard-dev/dependabot/go_modules/golang.org/x/net-0.7.0
• df3e9c4 Merge pull request #514 from deitch/handle-override-provides
• b47bd09 Merge pull request #516 from deitch/include-name
• 94d4714 Merge pull request #517 from deitch/dep-tree
• b218e83 Merge pull request #518 from deitch/apk-multiple-provide-same-version
• 5e93d92 Merge pull request #519 from deitch/handle-invalid-version-better
• 917b52d Merge pull request #52 from chainguard-dev/feature/proot-emulate-busybox-install
• b7ec443 Merge pull request #520 from deitch/handle-later-package
• d870ec6 Merge pull request #521 from deitch/ordering-when-accounting-for-direct-packages
• 441b2cb Merge pull request #522 from deitch/fix-binsh-dep-and-provider-priority
• 10b9481 Merge pull request #523 from deitch/support-install-if
• 22fb85c Merge pull request #524 from chainguard-dev/feature/build-options
• fb6778b Merge pull request #525 from jdolitsky/darwin-target
• 5f8ed31 Merge pull request #526 from chainguard-dev/feature/additional-option-types
• f296652 Merge pull request #527 from chainguard-dev/chore/apko-0.7.0-release-notes
• 65e9f6b Merge pull request #528 from jdolitsky/local-push-fix
• af3c97b Merge pull request #53 from kruskall/refactor/verbose-summarize
• f07212b Merge pull request #530 from jdolitsky/tmp-fix
• 9efb0d6 Merge pull request #532 from deitch/fix-tag-build
• ac11fae Merge pull request #533 from deitch/busybox-missing-symlinks
• 0b049d4 Merge pull request #534 from chainguard-dev/dependabot/go_modules/github.com/sigstore/cosign/v2-2.0.0
• 89912f3 Merge pull request #535 from chainguard-dev/chore/release-notes-0.7.1
• e6dcd4b Merge pull request #536 from imjasonh/build-os
• 8a3d788 Merge pull request #539 from deitch/local-repos
• a715af5 Merge pull request #54 from kruskall/feat/parallel-keyring
• 1b77140 Merge pull request #541 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.2.5
• 92a1b17 Merge pull request #542 from chainguard-dev/dependabot/go_modules/github.com/stretchr/testify-1.8.2
• ae0bb07 Merge pull request #544 from chainguard-dev/dependabot/go_modules/github.com/go-git/go-git/v5-5.6.0
• b7a3f5e Merge pull request #545 from deitch/end-newline
• 135c1be Merge pull request #546 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-3.0.1
• 9d148f9 Merge pull request #547 from deitch/properly-install-user-accounts
• 79fb6c3 Merge pull request #548 from chainguard-dev/dependabot/go_modules/golang.org/x/sys-0.6.0
• f7349f0 Merge pull request #55 from kruskall/feat/func-options
• cc83701 Merge pull request #550 from deitch/fix-pinned-repos
• 259e431 Merge pull request #551 from chainguard-dev/fix/versioned-provides
• f623ea0 Merge pull request #552 from chainguard-dev/fix/cosign
• dd74c7f Merge pull request #553 from chainguard-dev/fix/cosign
• 4e16915 Merge pull request #554 from imjasonh/apk-comments
• cfffa57 Merge pull request #555 from imjasonh/signing-config
• ee246c7 Merge pull request #556 from deitch/busybox-tree
• e788c22 Merge pull request #559 from deitch/fix-installed-database
• 134a592 Merge pull request #56 from imjasonh/feature/multiarch
• 4e8dbd4 Merge pull request #560 from deitch/hardlinks-and-symlinks
• cb833a5 Merge pull request #562 from deitch/get-sudo-bits
• 291d06f Merge pull request #564 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.2.6
• c0407cc Merge pull request #567 from deitch/start-data-section-after-hidden
• 50e415d Merge pull request #568 from chainguard-dev/dependabot/github_actions/actions/setup-go-4.0.0
• 4a8325e Merge pull request #569 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.2.7
• f8e33e2 Merge pull request #57 from kruskall/fix/path-join
• 8fc77a0 Merge pull request #571 from chainguard-dev/dependabot/github_actions/actions/checkout-3.4.0
• ca7b0be Merge pull request #572 from chainguard-dev/dependabot/go_modules/github.com/go-git/go-git/v5-5.6.1
• 959948a Merge pull request #573 from chainguard-dev/dependabot/go_modules/github.com/google/go-containerregistry-0.14.0
• 672688a Merge pull request #574 from deitch/handle-link-in-apk-for-installed-db
• ec0e2cc Merge pull request #575 from deitch/additional-fixes
• 6d862e6 Merge pull request #576 from chainguard-dev/fix/nonexistent-repo
• f18bdbc Merge pull request #577 from chainguard-dev/dependabot/go_modules/google.golang.org/protobuf-1.29.1
• 35d290f Merge pull request #578 from chainguard-dev/chore/news-0.7.2
• 6999856 Merge pull request #579 from chainguard-dev/fix/homedir-revert
• 4d0d0d4 Merge pull request #58 from kruskall/refactor/more-parallel-build-image
• ed9a474 Merge pull request #581 from deitch/busybox-versions
• f7175ff Merge pull request #582 from deitch/case-insensitive-symlinks
• 7a9bb42 Merge pull request #583 from deitch/homedir-correct-ownership
• fab93a1 Merge pull request #586 from deitch/carry-buildcontext-to-sbom-generation
• 807d097 Merge pull request #59 from panekj/improvements
• 650ee93 Merge pull request #590 from jdolitsky/ci-test-harness
• 996f1d9 Merge pull request #596 from chainguard-dev/dependabot/github_actions/actions/checkout-3.5.0
• 4d1b46a Merge pull request #597 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.2.9
• 09f9e8e Merge pull request #598 from chainguard-dev/add-codeowners
• 9b0034a Merge pull request #6 from cpanato/ci
• 011e393 Merge pull request #60 from kruskall/refactor/improve-loadkeyring
• b38d879 Merge pull request #600 from chainguard-dev/chore/news-0.7.3
• 481dcdd Merge pull request #601 from amouat/stopsignal
• b7375dc Merge pull request #603 from amouat/stop-signal-docs
• ddb6145 Merge pull request #604 from dlorenc/busybox
• 0415133 Merge pull request #606 from deitch/missing-trunc
• e57c0d1 Merge pull request #608 from chainguard-dev/dependabot/go_modules/github.com/spf13/cobra-1.7.0
• 37d98c7 Merge pull request #609 from chainguard-dev/dependabot/go_modules/golang.org/x/sys-0.7.0
• 6bd5370 Merge pull request #61 from chainguard-dev/feature/sbom
• 3f1cc95 Merge pull request #610 from chainguard-dev/dependabot/go_modules/github.com/docker/docker-23.0.3incompatible
• 72cd2dc Merge pull request #611 from chainguard-dev/feature/logging-rework-again
• 4cf1b1c Merge pull request #612 from imjasonh/useragent
• 9e877d4 Merge pull request #613 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.2.10
• b78d01c Merge pull request #614 from chainguard-dev/dependabot/go_modules/golang.org/x/term-0.7.0
• f2e3b9c Merge pull request #615 from chainguard-dev/feature/logging-rework-again
• e67e341 Merge pull request #616 from deitch/native-memfs
• 91ea4d7 Merge pull request #617 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.2.11
• 5e8ca1a Merge pull request #618 from chainguard-dev/dependabot/go_modules/github.com/sigstore/cosign/v2-2.0.1
• 0b98106 Merge pull request #619 from deitch/busybox-ignore-other-links
• 39b16b5 Merge pull request #620 from deitch/memfs-symlinks
• 4f064e8 Merge pull request #622 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.2.12
• a8d76b8 Merge pull request #623 from chainguard-dev/dependabot/github_actions/actions/checkout-3.5.2
• 3f5107b Merge pull request #624 from deitch/abstract-apk-funcs
• c2fd16a Merge pull request #625 from chainguard-dev/chore/refactor-logging-part-3
• b7e017d Merge pull request #626 from deitch/multiple-matches-package
• 886e5f6 Merge pull request #628 from chainguard-dev/chore/refactor-logging-part-4
• 2a34e34 Merge pull request #629 from chainguard-dev/feature/logging-iocomb
• c9055be Merge pull request #63 from kruskall/refactor/drop-pkg-errors
• 1385cde Merge pull request #630 from deitch/tilde-matcher
• 66070a9 Merge pull request #631 from deitch/accept-self-as-fill-dep-optional
• 7fb53ba Merge pull request #633 from deitch/fix-version-errors
• 889f9c1 Merge pull request #634 from deitch/report-yaml
• b15089e Merge pull request #64 from kruskall/doc/build-context
• 166cdf4 Merge pull request #640 from deitch/busybox-paths
• 417fd3d Merge pull request #642 from jonjohnsonjr/faster
• 4082ea6 Merge pull request #643 from deitch/override-files-same-origin
• 38b3be4 Merge pull request #644 from deitch/fix-sort-order-for-apk-installed-db
• ad6ffec Merge pull request #646 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.3.2
• cefa379 Merge pull request #647 from chainguard-dev/chore/news-0.8.0
• 7c6da56 Merge pull request #650 from chainguard-dev/fix/support-replaces
• e990f2b Merge pull request #651 from deitch/external-apk-go-library
• dacc425 Merge pull request #652 from chainguard-dev/dependabot/go_modules/gitlab.alpinelinux.org/alpine/go-0.7.0
• a6f6d5b Merge pull request #653 from deitch/latest-go-apk
• ca277d5 Merge pull request #655 from joshrwolf/typedocs
• 918d31c Merge pull request #658 from deitch/latest-apko
• 4d957cc Merge pull request #67 from chainguard-dev/dependabot/github_actions/actions/checkout-3
• 0263afc Merge pull request #670 from deitch/consistent-ordering
• f6a10f7 Merge pull request #673 from chainguard-dev/dependabot/go_modules/github.com/cloudflare/circl-1.3.3
• 509586b Merge pull request #68 from chainguard-dev/dependabot/github_actions/docker/login-action-1.14.1
• faa1b37 Merge pull request #681 from mritunjaysharma394/os-release-warn
• f13094b Merge pull request #685 from deitch/go-apk-no-index
• f3685dd Merge pull request #686 from chainguard-dev/dependabot/go_modules/github.com/sirupsen/logrus-1.9.2
• 00f6aa4 Merge pull request #688 from chainguard-dev/dependabot/go_modules/github.com/stretchr/testify-1.8.3
• 89e4038 Merge pull request #689 from chainguard-dev/imjasonh-patch-1
• 05d6d4a Merge pull request #69 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-2.1.0
• 8da2b41 Merge pull request #690 from amouat/build_annotation
• 2ba3fb3 Merge pull request #695 from deitch/go-apk-tarball-functionality
• 85820bf Merge pull request #696 from jonjohnsonjr/layered
• a581826 Merge pull request #698 from deitch/change-dir
• 7a873c6 Merge pull request #70 from imjasonh/if-err
• f5bf402 Merge pull request #700 from jonjohnsonjr/deject
• 293c6b1 Merge pull request #703 from imjasonh/extra-packages
• 410e65d Merge pull request #707 from deitch/bump-go-apk-symlink-cycle
• d8726f0 Merge pull request #709 from jonjohnsonjr/more-splits
• fb76e16 Merge pull request #710 from jonjohnsonjr/keychains
• 620e6c4 Merge pull request #711 from deitch/extended-options-summarize
• 147199d Merge pull request #712 from deitch/extended-options-summarize-json
• 735ad16 Merge pull request #713 from imjasonh/fix-extra-packages
• 6e7ff9c Merge pull request #714 from jonjohnsonjr/reverting
• b5c7eeb Merge pull request #715 from imjasonh/race-detector
• 8ae7830 Merge pull request #718 from jonjohnsonjr/sorry-everyone
• 093d63c Merge pull request #719 from jonjohnsonjr/smoke-tests
• ffe3e5f Merge pull request #72 from kruskall/skip/user-mutation
• 1ed65c6 Merge pull request #720 from jonjohnsonjr/race
• 894dcbe Merge pull request #721 from jonjohnsonjr/creds
• 3382fce Merge pull request #724 from deitch/unify-publish-build
• 85c6cf5 Merge pull request #726 from imjasonh/envs
• eb091d6 Merge pull request #727 from imjasonh/index-annotations
• 4e8c9db Merge pull request #729 from deitch/go-apk-caching
• 1d51e1a Merge pull request #73 from kruskall/fix/read-or-create-accounts
• e6a8234 Merge pull request #730 from deitch/fix-apk-caching
• a8ad963 Merge pull request #731 from jonjohnsonjr/avi-followup
• 788d369 Merge pull request #732 from jonjohnsonjr/keys
• ae54d27 Merge pull request #733 from deitch/safe-move
• 17219b2 Merge pull request #735 from jonjohnsonjr/plumbing
• 066c042 Merge pull request #736 from deitch/more-build-time-package-logging
• 7009288 Merge pull request #738 from deitch/better-logging-show-packages
• 86e9017 Merge pull request #747 from jdolitsky/fix-vulns
• b88c2bd Merge pull request #75 from kruskall/feat/assertions
• 3192304 Merge pull request #751 from deitch/go-apk-with-local-fix
• 5e3ba4c Merge pull request #753 from chainguard-dev/dependabot/go_modules/github.com/package-url/packageurl-go-0.1.1
• c6fbfb4 Merge pull request #755 from joshrwolf/oci-volume
• 9f9d45e Merge pull request #756 from mattmoor/deduplicate-extras
• e6788cf Merge pull request #761 from jonjohnsonjr/logs
• 7953709 Merge pull request #764 from chainguard-dev/dependabot/go_modules/github.com/sigstore/cosign/v2-2.1.1
• 3492291 Merge pull request #767 from imjasonh/ci-test
• 4962d46 Merge pull request #768 from imjasonh/bump-go-apk
• b8b445e Merge pull request #770 from chainguard-dev/bump/go-apk-20230630
• 1e5f9db Merge pull request #771 from chainguard-dev/chore/release-notes-0.9.0
• 7cb6a34 Merge pull request #782 from jonjohnsonjr/pargzip
• 9c145f3 Merge pull request #783 from jonjohnsonjr/otel
• 64a1fbe Merge pull request #789 from jonjohnsonjr/bump
• ce1eae4 Merge pull request #79 from panekj/patch-1
• 68e80b9 Merge pull request #790 from jonjohnsonjr/bump
• f0d0759 Merge pull request #791 from chainguard-dev/dependabot/go_modules/github.com/klauspost/pgzip-1.2.6
• eabf68b Merge pull request #793 from jonjohnsonjr/bufio
• 6e6ea4a Merge pull request #795 from jonjohnsonjr/bump-go-apk
• 893953c Merge pull request #796 from deitch/report-apkimpl-create-error
• dcd8b7d Merge pull request #797 from deitch/no-cache-when-no-home
• 346ce04 Merge pull request #798 from joemiller/bump-go-apk
• 70176a9 Merge pull request #8 from chainguard-dev/dependabot/github_actions/actions/setup-go-2.2.0
• 4b170d1 Merge pull request #800 from jonjohnsonjr/pass-layer
• 6d6f4a4 Merge pull request #801 from jonjohnsonjr/sbom-generation
• 37b82f3 Merge pull request #803 from deitch/handle-blank-set-source-date-epoch
• 45f5359 Merge pull request #812 from jonjohnsonjr/executor
• 8e4225a Merge pull request #813 from jonjohnsonjr/refactor
• 265d001 Merge pull request #814 from jonjohnsonjr/golden
• 5e53224 Merge pull request #816 from jonjohnsonjr/sbom
• 28c070e Merge pull request #819 from jonjohnsonjr/sbom-gold
• f8a70cc Merge pull request #82 from imjasonh/multiarch-arm
• ada7280 Merge pull request #820 from jonjohnsonjr/demeterfairy
• 703467d Merge pull request #821 from jonjohnsonjr/apk
• f3d4312 Merge pull request #823 from jonjohnsonjr/sboms
• c68c72f Merge pull request #825 from deitch/missing-publish-options
• db938d5 Merge pull request #83 from kruskall/feat/goheader
• 764deec Merge pull request #830 from deitch/update-workdir
• 8c93b57 Merge pull request #832 from jonjohnsonjr/news
• f559098 Merge pull request #833 from imjasonh/better-errors
• 1631e2d Merge pull request #834 from jonjohnsonjr/paths
• a2c5d52 Merge pull request #835 from imjasonh/huey-lewis
• 4d7b53d Merge pull request #836 from lyoung-confluent/patch-1
• 866dfe2 Merge pull request #837 from chainguard-dev/dependabot/go_modules/github.com/google/go-containerregistry-0.16.1
• 1a53617 Merge pull request #838 from jonjohnsonjr/ldconfig
• 2ac7be3 Merge pull request #839 from chainguard-dev/dependabot/go_modules/golang.org/x/sys-0.11.0
• 1eafeb1 Merge pull request #84 from chainguard-dev/feature/tarball-override-uid-gid
• 02606a7 Merge pull request #840 from chainguard-dev/dependabot/go_modules/golang.org/x/term-0.11.0
• f72fd70 Merge pull request #842 from chainguard-dev/dependabot/github_actions/actions/setup-go-4.1.0
• b78ef08 Merge pull request #843 from joemiller/fix/tag-stem-arch-comparison
• 0206b3b Merge pull request #844 from chainguard-dev/dependabot/github_actions/goreleaser/goreleaser-action-4.4.0
• 7aa188e Merge pull request #845 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.21.4
• 654ed0c Merge pull request #846 from chainguard-dev/dependabot/github_actions/golangci/golangci-lint-action-3.7.0
• 03e69b3 Merge pull request #847 from planetscale/fix/stage-tags
• 2981437 Merge pull request #849 from imjasonh/no-build-options
• 9cc6134 Merge pull request #85 from chainguard-dev/feature/tarball-override-uname-gname
• 18245f1 Merge pull request #850 from jonjohnsonjr/pgzip-concurrency
• bf500a0 Merge pull request #851 from jonjohnsonjr/faster-index-sbom
• c1779fc Merge pull request #853 from planetscale/fix/publish-cmd-sbom-path-flag
• ef3f4c1 Merge pull request #855 from chainguard-dev/dependabot/github_actions/actions/checkout-3.6.0
• a8dd223 Merge pull request #856 from chainguard-dev/dependabot/go_modules/k8s.io/apimachinery-0.28.1
• 0f242ef Merge pull request #857 from chainguard-dev/chore/go-apk-20230827
• 7391f81 Merge pull request #858 from jonjohnsonjr/fs
• eac5a83 Merge pull request #859 from chainguard-dev/dependabot/go_modules/github.com/jinzhu/copier-0.4.0
• a4aa544 Merge pull request #86 from chainguard-dev/feature/archive-sha1-checksums
• 9a1f226 Merge pull request #860 from jonjohnsonjr/offline
• 1654465 Merge pull request #861 from jonjohnsonjr/just-impl
• 27f8976 Merge pull request #862 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.21.5
• ea12d0e Merge pull request #865 from jonjohnsonjr/update-go-apk
• 6c7c44e Merge pull request #866 from jonjohnsonjr/testifuuuuuuu
• aae61e1 Merge pull request #867 from jonjohnsonjr/use-impl
• 40fc4c1 Merge pull request #868 from chainguard-dev/dependabot/go_modules/github.com/sigstore/cosign/v2-2.2.0
• a1a339e Merge pull request #869 from jonjohnsonjr/expose-tarfs
• 01d4c4c Merge pull request #87 from sipsma/fix-validate
• 57df449 Merge pull request #870 from jonjohnsonjr/whoops
• 535c243 Merge pull request #872 from chainguard-dev/dependabot/go_modules/golang.org/x/term-0.12.0
• d59a78f Merge pull request #873 from chainguard-dev/dependabot/github_actions/actions/checkout-4.0.0
• 90a4199 Merge pull request #875 from jonjohnsonjr/replaces
• ecb0cb3 Merge pull request #876 from jonjohnsonjr/pkg
• 53f6b8c Merge pull request #877 from chainguard-dev/dependabot/go_modules/gitlab.alpinelinux.org/alpine/go-0.8.0
• 732781c Merge pull request #878 from jonjohnsonjr/bumpppp
• ca5cfc3 Merge pull request #879 from jonjohnsonjr/bumppppp
• 9dfee62 Merge pull request #88 from puerco/spdx
• 7c910a4 Merge pull request #880 from jonjohnsonjr/close-files
• 7e47db2 Merge pull request #882 from jonjohnsonjr/layout
• 7072c68 Merge pull request #884 from chainguard-dev/dependabot/github_actions/goreleaser/goreleaser-action-5.0.0
• 823b92f Merge pull request #885 from chainguard-dev/dependabot/go_modules/go.opentelemetry.io/otel-1.18.0
• e9722fc Merge pull request #886 from chainguard-dev/dependabot/go_modules/github.com/go-git/go-git/v5-5.9.0
• 298aed2 Merge pull request #887 from cpanato/upgrade-go
• 09e69d2 Merge pull request #889 from chainguard-dev/dependabot/go_modules/k8s.io/apimachinery-0.28.2
• 12965a3 Merge pull request #89 from AmineChikhaoui/fix-https-urls
• 349d881 Merge pull request #891 from testwill/typo
• 3dc2598 Merge pull request #892 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.21.7
• b039c5a Merge pull request #893 from luhring/codeowners
• cd1b175 Merge pull request #894 from jonjohnsonjr/apko-dot
• a5e5e3b Merge pull request #896 from joshrwolf/propagate-logger
• b71bae6 Merge pull request #897 from jonjohnsonjr/pkgver
• 396a1fc Merge pull request #899 from chainguard-dev/dependabot/github_actions/actions/checkout-4.1.0
• 9ef53d2 Merge pull request #9 from mattmoor/mink-e2e
• f3c4aa5 Merge pull request #902 from thesayyn/apko-resolve
• 6fbc74a Merge pull request #903 from debasishbsws/publish-error-817
• 35a7d3e Merge pull request #904 from chainguard-dev/dependabot/go_modules/go.opentelemetry.io/otel-1.19.0
• 69172d9 Merge pull request #906 from debasishbsws/fix-make-devenv
• ad826a8 Merge pull request #907 from debasishbsws/traling-slash-667
• 67a4e34 Merge pull request #908 from debasishbsws/show-config_fix
• 56096d0 Merge pull request #91 from kruskall/depguard/ioutil
• ddc6db4 Merge pull request #912 from chainguard-dev/dependabot/go_modules/golang.org/x/sync-0.4.0
• 312143b Merge pull request #915 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.22.1
• fc046e7 Merge pull request #916 from chainguard-dev/dependabot/go_modules/sigs.k8s.io/release-utils-0.7.5
• 637e35f Merge pull request #917 from chainguard-dev/dependabot/go_modules/github.com/google/go-cmp-0.6.0
• 8aa52d5 Merge pull request #918 from wlynch/wlynch-patch-1
• 1a42e44 Merge pull request #919 from chainguard-dev/dependabot/go_modules/golang.org/x/net-0.17.0
• 1684cb4 Merge pull request #92 from polynomialspace/runAssertions-multierror
• 27c6d86 Merge pull request #923 from jonjohnsonjr/env
• 4ca5fc0 Merge pull request #924 from chainguard-dev/imjasonh-patch-1
• 8c46154 Merge pull request #925 from imjasonh/streamline-release
• c419221 Merge pull request #926 from cpanato/drop-action
• badc1fb Merge pull request #927 from chainguard-dev/dependabot/github_actions/actions/checkout-4.1.1
• f7d14a0 Merge pull request #929 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.22.4
• 0898e9e Merge pull request #93 from kruskall/feat/multi-tarball
• f0febd3 Merge pull request #932 from epsilon-phase/melange-permission-fix
• 184e684 Merge pull request #933 from wlynch/jsonschema
• a2b17f6 Merge pull request #934 from Elizafox/main
• 00cc8bf Merge pull request #937 from chainguard-dev/dependabot/go_modules/sigs.k8s.io/release-utils-0.7.6
• ff1313c Merge pull request #938 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.22.5
• 22cf3aa Merge pull request #939 from chainguard-dev/dependabot/go_modules/github.com/docker/docker-24.0.7incompatible
• 60693ba Merge pull request #94 from puerco/sbom-roundup
• e89b09e Merge pull request #940 from jonjohnsonjr/bum
• 5b1493b Merge pull request #941 from jonjohnsonjr/dot12-news
• ab648bd Merge pull request #942 from imjasonh/drop-flags
• c376bfa Merge pull request #943 from imjasonh/fork-alpine-go
• acc03e0 Merge pull request #948 from chainguard-dev/dependabot/github_actions/sigstore/cosign-installer-3.2.0
• 6b39c0c Merge pull request #949 from chainguard-dev/dependabot/go_modules/github.com/sigstore/cosign/v2-2.2.1
• 1ed34d8 Merge pull request #95 from puerco/deterministic-spdx-ids
• f52c5fd Merge pull request #950 from chainguard-dev/dependabot/go_modules/golang.org/x/term-0.14.0
• 16d6754 Merge pull request #951 from chainguard-dev/dependabot/go_modules/go.opentelemetry.io/otel-1.20.0
• b9586cb Merge pull request #952 from imjasonh/bump-go-apk-2
• 4f9a4c6 Merge pull request #953 from chainguard-dev/dependabot/github_actions/github/codeql-action-2.22.6
• e6914b9 Merge pull request #954 from chainguard-dev/dependabot/go_modules/sigs.k8s.io/release-utils-0.7.7
• 7638320 Merge pull request #955 from jonjohnsonjr/more-dot
• 7d1ed5e Merge pull request #956 from chainguard-dev/imjasonh-patch-1
• 9239707 Merge pull request #96 from chainguard-dev/refactor/never-scripts
• 7fac2ad Merge pull request #962 from imjasonh/check-sbom
• 6e94a2d Merge pull request #964 from wlynch/jsonschema
• c388de7 Merge pull request #966 from jonjohnsonjr/bump-installed
• bcd54df Merge pull request #967 from wlynch/jsonschema
• 0f740c9 Merge pull request #97 from puerco/append-keyring
• 471c7b2 Merge pull request #970 from jonjohnsonjr/more-replacing
• 691fe51 Merge pull request #974 from jonjohnsonjr/news
• 73ce6ec Merge pull request #978 from chainguard-dev/dependabot/github_actions/actions/setup-go-5.0.0
• 3a0a690 Merge pull request #979 from sfc-gh-ptabor/20231206-apko-lock-support
• 2b56c06 Merge pull request #98 from puerco/keybug
• abc45a4 Merge pull request #981 from sfc-gh-ptabor/20231211-all-repositories
• 954b211 Merge pull request #983 from chainguard-dev/dependabot/go_modules/github.com/go-git/go-git/v5-5.11.0
• cc26f13 Merge pull request #989 from chainguard-dev/dependabot/go_modules/golang.org/x/crypto-0.17.0
• 6a1ded5 Merge pull request #990 from jonjohnsonjr/replaced
• ce1f1d5 Merge pull request #991 from jonjohnsonjr/gold-layout
• 842c3c6 Merge pull request #992 from jonjohnsonjr/more-apks
• 7fb5de8 Merge pull request #993 from jonjohnsonjr/idb-to-sbom
• e5f7af4 Merge pull request #994 from jonjohnsonjr/13-news
• 9ad04bd Merge pull request #995 from jonjohnsonjr/leading-slash
• 914648f Merge pull request #999 from jonjohnsonjr/drop-multierror
• 6a3e0cb MergeInto should include Volumes (#1376)
• aad180b Migrate the configuration locking to apko. (#1222)
• 18fbe12 Minor tweak.
• bb4c55a Modify sbom attach to take index, return index in pub
• 1db0604 Move additional tags to builder interface
• 7590298 Move apk code to own package
• 732c742 Move build.GenerateImageSBOM to use new function
• 3256b04 Move cmd/apko/main.go to repo root
• d31941d Move default remote options out of library
• df02657 Move image qualifiers to options function
• 474b384 Move pkg/cli -> internal/cli
• 9147976 Move purl value generation to SBOM options
• 6d78831 Multiarch support
• 662813c NEWS: document --use-proot
• 1694edb NEWS: update for 0.1.2
• 2025192 Normalize workflow extensions to .yaml
• 48ecc69 OCI: Add annotations to images
• 906a076 OCI: Dont return semi built index on errors
• 66ee102 Only compose required SBOM elements
• 950ddd5 Only cut releases if we've seen material changes (#1891)
• 2a37e98 Only generate index sbom when building more than one image
• a78f40d Optimize SBOM generation
• ca363e2 Optimize ggcr interactions
• 30cbd59 Options: Add support for automatic temp dir creation
• 6ac0f0d Output annotations in IC summary
• 6e25ab2 Parse PKGINFO once and reuse parsed structure everywhere (#2002)
• 3dbfb82 Parse apkindex only once during initialization
• 6d95030 Pass UID and GID mapping to the tarball writer Signed-off-by: Violet White violet.white.batt@gmail.com
• ef7ef08 Pass a whole fs instead of a workdir to build
• 87846cb Pass errors up the stack in CalculateWorld and InstallPackages (#1404)
• 1229399 Pass image configuration to SBOM functions
• b603145 Pass in auth during copy
• fdda3c7 Pass in auth when copying image tags
• e303574 Pass lint.
• 4912937 Pass parsed image reference to sbom
• 7e11dbe Pass remoteOpts to publishIndex
• ce38e2f Pass through ReadAt to tarfs (#1607)
• 3af598f Pin test examples to alpine v3.22 due to ongoing usr-merge effort (#1902)
• 5f307b2 Pipe the mediatypes to the SBOM options
• bcbeff7 Plumb --offline flag
• 44000ac Plumb annotations from cmdline to IC struct
• bc5df11 Plumb context
• 9830b58 Plumb ctx through daemon package
• 9986652 Plumb offline flags around more
• 1843731 Plumb through the notion of build-time repositories.
• d3377d7 Prepare the script to be run as part of github workflow
• 5f48029 Preserve APK hardlinks
• 4e38dc8 Preserve APK timestamps when using dirfs (#1352)
• b6bac08 Preserve symlinks in DirFS (#1570)
• 43da0af Print published image digest to stdout
• 4c7744c Proper binsh handling; sort including provider priority
• 48232b7 Publish a canary image when changes land on main
• e448ce3 Pull in go-apk timestamp change (#757)
• dc7ac85 Pull in https://gitlab.alpinelinux.org/alpine/go/-/merge_requests/25 (#742)
• 74186bc Pull in the auth fix in go-apk (#1145)
• 822aab6 Pull in the latest changes to go-apk (#802)
• 5a76b26 README: add some explanation
• 5de5856 README: fix up formatting
• 10e022f README: fix url typo (#1661)
• 89022df README: hype up some features
• 7e34798 README: mention apko publish
• 15ebd6c README: note examples directory
• 6b21a2d README: some minor tweaks
• 73e12eb Re-instantiate each APK's tarfs after caching (#1383)
• 312c76f Read /etc/os-release from the image to generate SBOM purls
• 9876083 Read system keyring by default
• 2a93470 Record the apko.json file used to produce this image. (#1353)
• 19f351b Reduce the log noise from auto-auth failures. (#1835)
• 75f170b Reenable tmpdir clean up
• 3841e15 Refactor Build Contenxt into separate implementation
• 44573c4 Refactor SBOM to work with pluggable generators
• 89f7c13 Refactor and export range retry transport (#2012)
• 89979bc Refactor build Options to own struct
• 19bf087 Refactor build package to mockable implementation
• e2a0070 Refactor build to hide api into implementation
• 8b4b5ae Refactor internal/cli/publish to drop single image switch
• 4a1135f Refactor into build.Multi, no behavior change
• b520635 Refactor use of options
• 6910119 Refresh make generate
• fbbb278 Regenerate SBOM fakes
• 3f9b91f Regenerate SBOM fakes
• 22f7ae8 Regenerate apko-discover testdata (#2039)
• fb242aa Regenerate apko-discover.lock.json golden file (#2350)
• f41b2e0 Regenerate build fakes
• 2353e65 Regenerate build fakes
• 6661c06 Regenerate build fakes
• b06e08e Regenerate generator fakes
• 68156fb Reimplement purl qualifier string function
• e2577b0 Remove Trailing / if there any
• f2a3080 Remove WantSBOM and GenerateSBOM
• 4d04d1c Remove build implementation interface
• 735ea9e Remove buildImplementation
• 858cf14 Remove duplication, add make target
• d7d42de Remove empty slice declaration
• 2abd956 Remove imagedigest from options
• 00b57dd Remove indirection for apk implementation
• 4f16a93 Remove labels from names and U...