Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: sigstore/cosign
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.12.0
Choose a base ref
...
head repository: sigstore/cosign
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.12.1
Choose a head ref
  • 10 commits
  • 19 files changed
  • 6 contributors

Commits on Sep 15, 2022

  1. Configuration menu
    Copy the full SHA
    f43839b View commit details
    Browse the repository at this point in the history

Commits on Sep 16, 2022

  1. fix: fix cert chain validation for verify-blob in non-experimental mo…

    …de (#2256)
    
    * fix!: fix cert chain validation for verify-blob in non-experimental mode (#2256)
    
    Signed-off-by: Asra Ali <[email protected]>
    asraa authored Sep 16, 2022
    Configuration menu
    Copy the full SHA
    63fe875 View commit details
    Browse the repository at this point in the history
  2. Bump github/codeql-action from 2.1.22 to 2.1.23 (#2257)

    * Bump github/codeql-action from 2.1.22 to 2.1.23
    
    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.22 to 2.1.23.
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@b398f52...6a38b7d)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    * update version comment
    
    Signed-off-by: cpanato <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Signed-off-by: cpanato <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: cpanato <[email protected]>
    dependabot[bot] and cpanato authored Sep 16, 2022
    Configuration menu
    Copy the full SHA
    af581bb View commit details
    Browse the repository at this point in the history
  3. add changelog for v1.12.0 and v1.11.1 (#2250)

    * add changelog for v1.12.0 and v1.11.1
    
    Signed-off-by: cpanato <[email protected]>
    
    * update based on feedback
    
    Signed-off-by: cpanato <[email protected]>
    
    * add breaking change notice
    
    Signed-off-by: cpanato <[email protected]>
    
    Signed-off-by: cpanato <[email protected]>
    cpanato authored Sep 16, 2022
    Configuration menu
    Copy the full SHA
    ff18e66 View commit details
    Browse the repository at this point in the history

Commits on Sep 18, 2022

  1. Bump github/codeql-action from 2.1.23 to 2.1.24 (#2261)

    Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.23 to 2.1.24.
    - [Release notes](https://github.com/github/codeql-action/releases)
    - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - [Commits](github/codeql-action@6a38b7d...904260d)
    
    ---
    updated-dependencies:
    - dependency-name: github/codeql-action
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Sep 18, 2022
    Configuration menu
    Copy the full SHA
    d11982b View commit details
    Browse the repository at this point in the history
  2. fix: add COSIGN_EXPERIMENTAL=1 for verify-blob (#2254)

    Signed-off-by: Batuhan Apaydın <[email protected]>
    
    Signed-off-by: Batuhan Apaydın <[email protected]>
    developer-guy authored Sep 18, 2022
    Configuration menu
    Copy the full SHA
    fde55b6 View commit details
    Browse the repository at this point in the history

Commits on Sep 19, 2022

  1. Resolves sigstore/community#121 (#2263)

    * Squash & merge
    
    * add paths to all needed workflows
    
    * fixing action versions
    
    * remove whitespace
    
    Signed-off-by: n3k0m4 <[email protected]>
    
    * lint
    
    Signed-off-by: n3k0m4 <[email protected]>
    
    Signed-off-by: n3k0m4 <[email protected]>
    n3k0m4 authored Sep 19, 2022
    Configuration menu
    Copy the full SHA
    c1322bc View commit details
    Browse the repository at this point in the history

Commits on Sep 20, 2022

  1. Fix BYO-root with intermediate to fetch intermediates from annotation (

    …#2244)
    
    This fixes a regression where intermediates, when not present in the
    intermediate certificate pool, would be fetched from the OCI chain
    annotation.
    
    Ref #1554, which includes more details
    
    Signed-off-by: Hayden Blauzvern <[email protected]>
    
    Signed-off-by: Hayden Blauzvern <[email protected]>
    Hayden-IO authored Sep 20, 2022
    Configuration menu
    Copy the full SHA
    63fb755 View commit details
    Browse the repository at this point in the history
  2. chore(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1 (#2266)

    * chore(deps): bump codecov/codecov-action from 3.1.0 to 3.1.1
    
    Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.0 to 3.1.1.
    - [Release notes](https://github.com/codecov/codecov-action/releases)
    - [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
    - [Commits](codecov/codecov-action@81cd2dc...d9f34f8)
    
    ---
    updated-dependencies:
    - dependency-name: codecov/codecov-action
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    
    * update version comment
    
    Signed-off-by: cpanato <[email protected]>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Signed-off-by: cpanato <[email protected]>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: cpanato <[email protected]>
    dependabot[bot] and cpanato authored Sep 20, 2022
    Configuration menu
    Copy the full SHA
    bc66c2f View commit details
    Browse the repository at this point in the history
  3. fix: fixing breaking changes in rekor v1.12.0 upgrade (#2260)

    * fix: fixing breaking changes in  rekor v1.12.0 upgrade
    
    Signed-off-by: Batuhan Apaydın <[email protected]>
    
    * fix: update tests but require rekor bump to main todo
    
    Signed-off-by: Asra Ali <[email protected]>
    
    * bump: bump rekor to main
    
    Signed-off-by: Asra Ali <[email protected]>
    Signed-off-by: Batuhan Apaydın <[email protected]>
    
    Signed-off-by: Batuhan Apaydın <[email protected]>
    Signed-off-by: Asra Ali <[email protected]>
    Co-authored-by: Asra Ali <[email protected]>
    developer-guy and asraa authored Sep 20, 2022
    Configuration menu
    Copy the full SHA
    0baa044 View commit details
    Browse the repository at this point in the history
Loading