Skip to content

Releases: liatrio/gh-trusted-builds-attestations

v0.4.1

19 May 20:34
@github-actions github-actions
v0.4.1
This tag was signed with the committer’s verified signature.
alexashley Alex Ashley
GPG key ID: F70196A3430450C3
Learn about vigilant mode.
5e0a29b
This commit was signed with the committer’s verified signature.
alexashley Alex Ashley
GPG key ID: F70196A3430450C3
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.4.1

Changelog

Assets 7
Loading

v0.4.0

19 May 20:04
@github-actions github-actions
v0.4.0
This tag was signed with the committer’s verified signature.
alexashley Alex Ashley
GPG key ID: F70196A3430450C3
Learn about vigilant mode.
204ee5f
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.4.0

Changelog

  • 204ee5f feat: attaching ghpr to oci artifact & vsa sign/upload (#9)
  • f75594a feat: defaults for fulcio and rekor (#7)
Assets 7
Loading

v0.3.0

18 May 19:03
@github-actions github-actions
v0.3.0
This tag was signed with the committer’s verified signature.
alexashley Alex Ashley
GPG key ID: F70196A3430450C3
Learn about vigilant mode.
7b3536c
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.3.0

Changelog

  • 7b3536c feat: enable three-legged keyless signing (#6)
Assets 7
Loading

v0.2.0

17 May 15:46
@github-actions github-actions
v0.2.0
This tag was signed with the committer’s verified signature.
alexashley Alex Ashley
GPG key ID: F70196A3430450C3
Learn about vigilant mode.
3022553
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.2.0

Changelog

  • 3022553 feat: write VSA predicate to file (#5)
Assets 7
Loading

v0.1.0

17 May 14:47
@github-actions github-actions
v0.1.0
This tag was signed with the committer’s verified signature.
alexashley Alex Ashley
GPG key ID: F70196A3430450C3
Learn about vigilant mode.
01e5cb7
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.1.0

Changelog

  • f5df94f build: correct command
  • 4b5b1f3 feat: initial commit
  • 01e5cb7 feat: take digest type from artifact digest (#4)
Assets 7
Loading