Skip to content

Releases: actions/attest-build-provenance

v1.4.3

05 Sep 17:22
@bdehamer bdehamer
v1.4.3
1c608d1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.4.3 Latest
Marketplace
Latest
Marketplace

What's Changed

  • Bump predicate from 1.1.2 to 1.1.3 by @bdehamer in #226
    • Bump @actions/attest from 1.3.1 to 1.4.1 by @dependabot in #212
    • Bump @actions/attest from 1.4.1 to 1.4.2 by @bdehamer in #225
    • Fix bug w/ customized OIDC issuer URL for enterprise accounts (#222)

Full Changelog: v1.4.2...v1.4.3

Contributors

bdehamer and dependabot
Assets 2
Loading

v1.4.2

22 Aug 19:09
@bdehamer bdehamer
v1.4.2
6149ea5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.4.2
Marketplace
Marketplace

What's Changed

Full Changelog: v1.4.1...v1.4.2

Contributors

bdehamer
Assets 2
Loading

v1.4.1

09 Aug 16:16
@bdehamer bdehamer
v1.4.1
310b0a4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.4.1
Marketplace
Marketplace

What's Changed

Full Changelog: v1.4.0...v1.4.1

Contributors

bdehamer
Assets 2
Loading

v1.4.0

30 Jul 20:23
@bdehamer bdehamer
v1.4.0
210c191
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.4.0
Marketplace
Marketplace

What's Changed

  • Bump predicate action from 1.1.0 to 1.1.1 by @bdehamer in #182
    • Fix for JWKS proxy bug
  • Bump actions/attest from 1.3.3 to 1.4.0 by @bdehamer in #183
    • Add show-summary input
    • Format summary output as list

Full Changelog: v1.3.3...v1.4.0

Contributors

bdehamer
Assets 2
Loading

v1.3.3

09 Jul 17:09
@bdehamer bdehamer
v1.3.3
5e9cb68
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.3.3
Marketplace
Marketplace

What's Changed

  • Bump actions/attest from 1.3.2 to 1.3.3 by @bdehamer in #152
    • Bugfix for properly handling glob exclusion patterns in subject-path input

Full Changelog: v1.3.2...v1.3.3

Contributors

bdehamer
Assets 2
Loading

v1.3.2

17 Jun 17:35
@bdehamer bdehamer
v1.3.2
bdd5137
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.3.2
Marketplace
Marketplace

What's Changed

  • Bump actions/attest from 1.3.1 to 1.3.2 by @bdehamer in #123
    • Increase timeout for OCI operations

Full Changelog: v1.3.1...v1.3.2

Contributors

bdehamer
Assets 2
Loading

v1.3.1

13 Jun 21:59
@bdehamer bdehamer
v1.3.1
534b352
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.3.1
Marketplace
Marketplace

What's Changed

  • Bump actions/attest from 1.3.0 to 1.3.1 by @bdehamer in #117
    • Bugfix when detecting support for the referrers API with OCI registries

Full Changelog: v1.3.0...v1.3.1

Contributors

bdehamer
Assets 2
Loading

v1.3.0

13 Jun 16:00
@bdehamer bdehamer
v1.3.0
3119152
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.3.0
Marketplace
Marketplace

What's Changed

  • Bump actions/attest-build-provenance/predicate from 1.0.0 to 1.1.0 by @bdehamer in #116
  • Bump actions/attest from 1.2.0 to 1.3.0 by @bdehamer in #116
    • Dynamic construction of GitHub API URLs based on GITHUB_SERVER_URL
    • Improved handling of Rekor 409 responses
    • Bugfix - detection of registries with support for the OCI referrers API

Full Changelog: v1.2.0...v1.3.0

Contributors

bdehamer
Assets 2
Loading

v1.2.0

03 Jun 18:00
@bdehamer bdehamer
v1.2.0
49df96e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.2.0
Marketplace
Marketplace

What's Changed

  • Bump actions/attest from 1.1.2 to 1.2.0 by @bdehamer in #101
    • Batch processing w/ exponential backoff
    • Bugfix when pushing attestation to OCI registry

Full Changelog: v1.1.2...v1.2.0

Contributors

bdehamer
Assets 2
Loading

v1.1.2

16 May 19:42
@bdehamer bdehamer
v1.1.2
173725a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.
Compare
Choose a tag to compare
v1.1.2
Marketplace
Marketplace

What's Changed

  • Bump actions/attest from 1.1.1 to 1.1.2 by @bdehamer in #79
    • Downcase subject name for OCI images
    • Fix accept header when retrieving image manifest
    • Support variants of the Docker Hub registry name

Full Changelog: v1.1.1...v1.1.2

Contributors

bdehamer
Assets 2
Loading