Skip to content

v0.7.0

Choose a tag to compare

@codysoyland codysoyland released this 24 Jan 21:12
· 165 commits to main since this release
9c466a8

Breaking Changes

  • Removed WithOnlineVerification() configuration option, and online argument to VerifyArtifactTransparencyLog() by @steiza in #344
  • Add interface types for TimestampingAuthority and CertificateAuthority by @codysoyland in #300
  • Simplify HasPublicKey interface method by @codysoyland in #348
  • Rename GetCertificate to Certificate by @codysoyland in #349
  • Verify certificate validity with only current time, bump conformance tests by @haydentherapper in #277

What's Changed

  • Include URI for CA verified timestamps by @cmurphy in #270
  • Add Windows to README as tested platform by @steiza in #299
  • Check if entry has inclusion proof rather than entity by @adityasaky in #310
  • Allow parsing of certificates from Fulcio if ctlog is disabled by @codysoyland in #288
  • feat: add unit test for online tlog verification by @vishal-chdhry in #296
  • update sigstore dependencies for oci-image-verification example by @dmitris in #319
  • Update oci-image-verification.md by @dmitris in #320
  • expand oci-image-verification example for private infra by @dmitris in #321
  • Update BaseSignedEntity interface implementation by @cmurphy in #333
  • ci: address zizmor's findings by @woodruffw in #336
  • Adds a check to ensure SCT time is while a CT log key was valid by @steiza in #350
  • Update staging TUF root to latest by @haydentherapper in #354
  • Update prod TUF root to v10 by @haydentherapper in #353
  • Opt into Actions CodeQL public preview by @steiza in #362
  • Refactor DoS limits to separate func by @codysoyland in #364
  • Fix intoto unmarshal by @codysoyland in #366
  • Add custom-certificate-validator example by @codysoyland in #351
  • Add support for SigningConfig by @haydentherapper in #367
  • Bump conformance to latest version by @haydentherapper in #377
  • Support additional SigningConfig configurations by @haydentherapper in #379
  • Use multi-directory configuration for dependabot by @codysoyland in #380
  • Use glob support for directories key by @codysoyland in #383
  • chore: relax go directive to permit 1.22.x by @dnwe in #384
  • docs: minor edits to docs by @trishankatdatadog in #370

New Contributors

Full Changelog: v0.6.2...v0.7.0