v1.1.3

This fixes issue #325. Sigstore root metadata was updated to a key format incompatible with old go-tuf (the underlying TUF client) libraries. This updated sigstore libraries to new ones that pulled in the updated go-tuf libraries.

What's Changed

• Backport release/v1.1: Update sigstore libraries by @ianlewis in #331
• release/v1.1: update release builder by @asraa in #335
• release/v1.1: fix release workflow perms by @asraa in #338

Full Changelog: v1.1.2...v1.1.3

v1.0.5

This fixes issue #325. Sigstore root metadata was updated to a key format incompatible with old go-tuf (the underlying TUF client) libraries. This updated sigstore libraries to new ones that pulled in the updated go-tuf libraries.

What's Changed

• Backport release/v1.0: Update sigstore libraries by @ianlewis in #332
• release/v1.0: update release builder by @asraa in #336
• release/v1.0: fix release workflow permissions by @asraa in #337

Full Changelog: v1.0.4...v1.0.5

v1.4.1

What's Changed

• fix: env vars are case sensitive in configuration by @asraa in #298

Full Changelog: v1.4.0...v1.4.1

v1.4.0

What's Changed

• release: release v1.3.0 of verifier by @asraa in #218
• feat: support oci image verification by @asraa in #147
• fix(deps): update module github.com/go-openapi/swag to v0.22.3 by @renovate-bot in #215
• chore(deps): update golang:1.18 docker digest to 616aa98 by @renovate-bot in #214
• chore(deps): update github-actions by @renovate-bot in #222
• chore(deps): update actions/checkout action to v3 by @renovate-bot in #227
• fix(deps): update module github.com/sigstore/cosign to v1.11.0 by @renovate-bot in #224
• fix(deps): update module github.com/sigstore/rekor to v0.11.0 by @renovate-bot in #225
• chore(deps): update gcr.io/distroless/base:nonroot docker digest to 533c15e by @renovate-bot in #228
• feat: Support for GCB verification by @laurentsimon in #202
• Correct installation command in README by @laurentsimon in #241
• release: add release v1.0.3 by @asraa in #235
• Verify text provenance for GCB by @laurentsimon in #242
• doc: fix comment typos by @laurentsimon in #244
• fix(deps): update module github.com/sigstore/cosign to v1.11.1 by @renovate-bot in #239
• chore(deps): update github-actions by @renovate-bot in #240
• feat: add CLI tests for GCB verification by @laurentsimon in #245
• chore(deps): update github/codeql-action action to v2.1.22 by @renovate-bot in #249
• chore(deps): update golang:1.18 docker digest to 5540a6a by @renovate-bot in #238
• refactor: add subcommands and separate functionality from artifacts a… by @asraa in #231
• feat: support for GCB v0.3 verification by @laurentsimon in #248
• fix: fix CLI flag mishap by @asraa in #250
• feat: CLI tests for GCB verification by @laurentsimon in #251
• feat: support builderID matching with or without semver for GCB by @laurentsimon in #256
• chore(deps): update golang docker tag to v1.19 by @renovate-bot in #196
• chore(deps): update ossf/scorecard-action action to v2 by @renovate-bot in #255
• fix(deps): update module github.com/google/go-cmp to v0.5.9 by @renovate-bot in #253
• feat: support builderID matching with or without semver for GHA by @laurentsimon in #257
• fix(deps): update module github.com/sigstore/cosign to v1.12.0 by @renovate-bot in #264
• chore(deps): update gcr.io/distroless/base:nonroot docker digest to 33fac4d by @renovate-bot in #260
• chore(deps): update github/codeql-action action to v2.1.24 by @renovate-bot in #262
• Add a GitHub Action for installing slsa-verifier. by @kpk47 in #246
• fix(deps): update module github.com/sigstore/sigstore to v1.4.1 by @renovate-bot in #263
• doc: document build id and GCB vs GHA by @laurentsimon in #266
• doc: add links to GH builders by @laurentsimon in #268
• chore(deps): update github-actions by @renovate-bot in #274
• fix(deps): update module github.com/sigstore/sigstore to v1.4.2 by @renovate-bot in #272
• Update README.md by @laurentsimon in #276
• fix: make client shard aware when verifying by @asraa in #282
• chore(deps): update github-actions by @renovate-bot in #284
• Update pre-submits by @ianlewis in #289
• release: add release v1.3.1 and v1.2.1 by @asraa in #288
• release: add release hash for v1.1.2 and v1.0.4 by @asraa in #291
• chore(deps): pin dependencies by @renovate-bot in #269
• chore(deps): update dependency jasmine to v4.4.0 by @renovate-bot in #283
• gcb: add gcb compatibility for provenance formats and buckets by @asraa in #292
• fix: fix release configuration and workflow for version info by @asraa in #296
• ci: use upstream version lib to provide version, commit, and tree state by @asraa in #297

New Contributors

• @kpk47 made their first contribution in #246

Full Changelog: v1.3.0...v1.4.0

v1.1.2

What's Changed

• fix(backport/v1.1): make client shard aware when verifying entries on inactive shards by @asraa in #278
• ci: update builder version for release/v1.1 by @asraa in #287

Full Changelog: v1.1.1...v1.1.2

v1.0.4

What's Changed

• fix(backport/1.0): make client shard aware when verifying entries on inactive shards by @asraa in #286

Full Changelog: v1.0.3...v1.0.4

v1.3.1

What's Changed

• fix(backport/v1.3): make client shard aware when verifying by @asraa in #280

Full Changelog: v1.3.0...v1.3.1

v1.2.1

fix: make client shard aware when verifying (#279)

Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>

v1.0.3

What's Changed

• [backport v1.0] fix: fix intermediate certificate validaiton by @asraa in #234

Full Changelog: v1.0.2...v1.0.3

v1.3.0

What's Changed

• release: add notes for release v1.2.0 by @asraa in #171
• feat: fix renovatebot tags by @laurentsimon in #170
• chore(deps): update github-actions by @renovate-bot in #165
• Releases url fix by @cdris in #172
• fix(deps): update module github.com/sigstore/rekor to v0.10.0 by @renovate-bot in #178
• fix(deps): update module github.com/sigstore/sigstore to v1.3.1 by @renovate-bot in #177
• chore(deps): update github-actions by @renovate-bot in #175
• fix(deps): update module github.com/google/trillian to v1.4.2 by @renovate-bot in #176
• chore(deps): update github/codeql-action action to v2 by @renovate-bot in #168
• feat: Create a verifier as a service by @laurentsimon in #182
• Fix version in README by @laurentsimon in #185
• feat: Create interface for verifiers by @laurentsimon in #187
• Never panic, always return error by @laurentsimon in #199
• chore(deps): update github/codeql-action action to v2.1.18 by @renovate-bot in #195
• fix(deps): update module github.com/sigstore/cosign to v1.10.1 by @renovate-bot in #198
• feat: make branch optional by @laurentsimon in #192
• update link to download the binary to use the latest release (v1.2.0) by @cpanato in #204
• feat: make builder-id flag experimental until fully tested by @laurentsimon in #207
• fix: use experimental flag value 1 by @asraa in #209
• ci: fix path to binary for release by @asraa in #210
• ci: add release workflow test at presubmit by @asraa in #212
• fix: fix dir in release config by @asraa in #217
• feat: add a -workflow-input option by @laurentsimon in #216

New Contributors

• @cdris made their first contribution in #172
• @cpanato made their first contribution in #204

Full Changelog: v1.2.0...v1.3.0