v0.3.2

Changelog

• 3d51947: Add Provenance and SBOM generation (@Brend-Smits)
• 7181605: Apply suggestions from code review (@Brend-Smits)
• b9a7ccb: Remove matrix repo and add is as a env variable (@Brend-Smits)
• b08a1f6: Use cosign-attach sbom command (@Brend-Smits)

Full Changelog: v0.3.1...v0.3.2

v0.3.1

Changelog

• 4df5c3b: Fix install-dir when using the default (@marcofranssen)

Full Changelog: v0.3.0...v0.3.1

v0.3.0

Changelog

• b7d29d7: ⬆️ Bump actions/cache from 2.1.7 to 3 (@dependabot[bot])
• 69d2e7f: Add documentation for the installer action (@marcofranssen)
• 6f2a987: Add installer-action (@marcofranssen)
• a8302cf: Add tag prefix that allows you to store attestations in a single registry (@Brend-Smits)
• b110f9c: Add tests for Publish and BuildOciRef methods (@Brend-Smits)
• 02967a9: Bump Go from 1.17 to 1.18 (@marcofranssen)
• e86ddb1: Bump fatt default version installer-action (@marcofranssen)
• 1d093e0: Finish up publish to work without signed blobs (@marcofranssen)
• d9f05ae: Fix filters #21 (@marcofranssen)
• 453afe4: Fix windows install and Linux permissions (@Brend-Smits)
• 87095d4: Implement attestation publishing (@marcofranssen)
• 9e30ff0: Implement blob upload for attestation (@marcofranssen)
• a72e488: Implement logic to create Package URLs (@marcofranssen)
• 8d662f5: Implement ociRef to publish towards by hardcoded convention (@marcofranssen)
• 1368dfe: Implement publishing discovery file (@marcofranssen)
• 4c81aec: Improve README.md a bit further. (@marcofranssen)
• 5873566: Improve documentation in README.md (@marcofranssen)
• 672619e: Improve error messages (@marcofranssen)
• 37b1c09: Improve readability of README (@Brend-Smits)
• 26f1d0f: Pin cache action on patch release version (@marcofranssen)
• 4e654e2: Refactor purl parsing + add more tests (@marcofranssen)
• a89dfe6: Remove whiteline (@marcofranssen)
• f932aaa: Tidy go modules (@marcofranssen)

Full Changelog: v0.1.0...v0.3.0

v0.2.0

Changelog

• b7d29d7: ⬆️ Bump actions/cache from 2.1.7 to 3 (@dependabot[bot])
• bab10d1: Add documentation for the installer action (@marcofranssen)
• 96ef07e: Add installer-action (@marcofranssen)
• 841e2c3: Bump Go from 1.17 to 1.18 (@marcofranssen)
• 4c66e29: Fix filters #21 (@marcofranssen)
• a21b5dc: Improve README.md a bit further. (@marcofranssen)
• 22addaa: Improve documentation in README.md (@marcofranssen)
• dd2c0f8: Improve readability of README (@Brend-Smits)
• 26f1d0f: Pin cache action on patch release version (@marcofranssen)
• aaf0208: Tidy go modules (@marcofranssen)

Full Changelog: v0.2.0-rc...v0.2.0

v0.2.0-rc2

Changelog

• bab10d1: Add documentation for the installer action (@marcofranssen)
• 96ef07e: Add installer-action (@marcofranssen)
• 841e2c3: Bump Go from 1.17 to 1.18 (@marcofranssen)
• 4c66e29: Fix filters #21 (@marcofranssen)
• a21b5dc: Improve README.md a bit further. (@marcofranssen)
• 22addaa: Improve documentation in README.md (@marcofranssen)
• dd2c0f8: Improve readability of README (@Brend-Smits)
• aaf0208: Tidy go modules (@marcofranssen)

Full Changelog: v0.2.0-rc...v0.2.0-rc2

v0.2.0-rc

Changelog

• e007356: Finish up publish to work without signed blobs (@marcofranssen)
• 1b35963: Implement attestation publishing (@marcofranssen)
• e4e4c8f: Implement blob upload for attestation (@marcofranssen)
• 3c89192: Implement logic to create Package URLs (@marcofranssen)
• 6ad5429: Implement ociRef to publish towards by hardcoded convention (@marcofranssen)
• f7928a0: Implement publishing discovery file (@marcofranssen)
• 9aa6f16: Refactor purl parsing + add more tests (@marcofranssen)

Full Changelog: v0.1.0...v0.2.0-rc

v0.1.0

Changelog

• c67762a: ⬆️ Bump actions/checkout from 2.4.0 to 3 (@dependabot[bot])
• 11c746f: ⬆️ Bump actions/setup-go from 2.2.0 to 3 (@dependabot[bot])
• 7d487ed: ⬆️ Bump docker/login-action from 1.14.0 to 1.14.1 (@dependabot[bot])
• 0635515: ⬆️ Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 (@dependabot[bot])
• 35eb5c2: ⬆️ Bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (@dependabot[bot])
• f5143bb: ⬆️ Bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (@dependabot[bot])
• 7f74f46: Add .editorconfig and .gitignore (@marcofranssen)
• 074e6bf: Add CODEOWNERS (@marcofranssen)
• 9759663: Add Docker output format in list command (@Brend-Smits)
• eba95f5: Add MIT license to this repo (@JeroenKnoops)
• fe6c2b7: Add attestation resolver interface (@marcofranssen)
• c5baa6d: Add attestations.txt resolver (@marcofranssen)
• 663d3ac: Add basic version command (@Brend-Smits)
• 8bb3ce5: Add ci workflow (@marcofranssen)
• 4be7a41: Add dependabot config (@marcofranssen)
• 70e0229: Add filter option to list command (@Brend-Smits)
• 674ded3: Add filter options (@Brend-Smits)
• 7eb32bf: Add new resolver that tries to resolve using all resolvers (@marcofranssen)
• 95ad19e: Add npm example with sbom (@marcofranssen)
• ea7ece7: Add output-format option with tests for version command (@Brend-Smits)
• 5c3ed11: Add resolver configuration flag to cli (@marcofranssen)
• 851af55: Add support for Docker purls (@marcofranssen)
• 1fb2510: Add test for resolver and fix implementation (@marcofranssen)
• 5322b99: Add tests for filtering attestations (@Brend-Smits)
• ee5cb90: Add version command to README documentation (@Brend-Smits)
• b761dd3: Add workflow to created signed releases (@marcofranssen)
• 34ba3cf: Allow to specify which file-path to traverse (@marcofranssen)
• 3d5a265: Apply suggestions from codereview (@Brend-Smits)
• 8e82dfd: Bump cosign from v1.5.2 to v1.6.0 (@marcofranssen)
• 71a9f5e: Fix release workflow permissions (@marcofranssen)
• 7f7dea1: Fix workflow permissions (@marcofranssen)
• 6d062cd: Happy Linter (@Brend-Smits)
• 9b30bec: Implement list command to output PURLs (@marcofranssen)
• 70cef26: Implement logic to resolve sbom purl from package.json (@marcofranssen)
• 43d324f: Init cli (@marcofranssen)
• c5d8a12: Move debug output to stderr (@marcofranssen)
• e1e885e: Move packagejson resolver implementation to new package (@marcofranssen)
• c778376: Refactor GetPrinter to options (@marcofranssen)
• 4f9b1ce: Refactor GetResolver to options (@marcofranssen)
• 760f932: Refactor lint task in Makefile (@marcofranssen)
• dfd3cc7: Refactor list command to support discovering from fs and oci (@marcofranssen)
• d6f2db7: Remove old implementation for listing attestations (@marcofranssen)
• 78c478f: Remove the sget specific output on signature verification (@marcofranssen)
• 75321df: Simplify by using io.Reader (@marcofranssen)
• 4384925: Tidy go modules (@marcofranssen)
• 7a73ab5: Update docs in README.md (@marcofranssen)
• 8e3805d: Update example to fetch all attestations returned via sget (@marcofranssen)
• b69c100: Update implementation for npm to use attestations array (@marcofranssen)
• 38656d7: Update readme with fatt usage documentation (@Brend-Smits)

Full Changelog: ...v0.1.0