Skip to content
This repository was archived by the owner on Apr 4, 2024. It is now read-only.

Releases: github-early-access/gh-attestation

Release list

v0.3.1

v0.3.1 Latest
Latest

Choose a tag to compare

View all tags
@ejahnGithub ejahnGithub released this 01 Apr 20:36
v0.3.1
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Bug Fixes

  • Print a more informative error message when the user is not authorized with a container registry
Assets 12
Loading

v0.3.0

v0.3.0

Choose a tag to compare

View all tags
@ejahnGithub ejahnGithub released this 06 Feb 18:49
v0.3.0
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Features

  • Remove Rego policy support
  • Standardize json output handling for verify and download commands

Bug Fixes

  • Fix version command formatting bug
  • Fix GitHub REST client initialization error handling
Loading

v0.2.4

v0.2.4

Choose a tag to compare

View all tags
@ejahnGithub ejahnGithub released this 29 Jan 16:27
v0.2.4
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Bug Fixes

  • Fix a Codespaces specific bug by disabling the local TUF cache when the tool is used in Codespaces
Loading

v0.2.3

v0.2.3

Choose a tag to compare

View all tags
@ejahnGithub ejahnGithub released this 16 Jan 21:03
v0.2.3
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Bug Fixes

  • Removes an incorrect example provided by the download command's --help flag
Loading

v0.2.2

v0.2.2

Choose a tag to compare

View all tags
@ejahnGithub ejahnGithub released this 12 Jan 17:24
v0.2.2
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Bug Fixes

  • This release fixes a bug related to downloading attestations for OCI images
Loading

v0.2.1

v0.2.1

Choose a tag to compare

View all tags
@ejahnGithub ejahnGithub released this 04 Jan 17:37
v0.2.1
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Bug Fixes

  • This release fixes a bug that caused the tool to sometimes verify OCI images with the incorrect SHA-256 hash
Loading

v0.2.0

v0.2.0

Choose a tag to compare

View all tags
@ejahnGithub ejahnGithub released this 28 Nov 21:41
v0.2.0
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Features

This releases introduces support for verifying and downloading attestations for OCI images. To use this, provide an OCI image FQDN prefixed with oci:// instead of a local file path when specifying the artifact. For example:

gh attestation verify oci://ghcr.io/github/my-image:test --owner=github
Loading

v0.1.17

v0.1.17

Choose a tag to compare

View all tags
@ejahnGithub ejahnGithub released this 15 Nov 19:37
v0.1.17
812c2f8
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode. 
Add extended examples for usage / upgrade
Loading

v0.1.16

v0.1.16

Choose a tag to compare

View all tags
@ejahnGithub ejahnGithub released this 14 Nov 23:24
v0.1.16
6f3fe1d 
Add link to CLI

Signed-off-by: Trevor Rosen <trevrosen@github.com>
Loading