Brian DeHamer
19beeb5851
fix bug with customized oidc issuer
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-09-04 10:24:28 -07:00
Brian DeHamer
cda5d64e13
derive default OIDC issuer from current tenant
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-08-16 12:07:23 -07:00
Brian DeHamer
29f863eb6f
support for headers param in attest functions
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-08-15 15:35:32 -07:00
Brian DeHamer
ccea2d41a8
fix proxy support for jwks retrieval
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-07-26 15:03:40 -07:00
Brian DeHamer
a035e0d5d5
new GHA build provenance
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-06-05 14:54:34 -07:00
Fredrik Skogman
5f94fee887
Read the server url from the environment variable.
...
Instead of having the urls hardcoded, read them from the environment.
I opted to read from the environment variable instead of the github context
because it would be easier to test.
2024-05-16 17:00:35 +02:00
Brian DeHamer
019fe54f20
retry request on failure to save attestation
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-04-24 15:07:39 -07:00
Brian DeHamer
f04c795925
remove dep on make-fetch-happen
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-04-23 09:39:17 -07:00
Brian DeHamer
04a08a9a42
generate v0.3 bundles in attest package
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-04-03 12:12:26 -07:00
Brian DeHamer
4de6ecc2c7
build provenance stmt from OIDC claims
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-03-22 12:34:42 -07:00
Brian DeHamer
ab53ed1045
add new @actions/attest package
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-02-26 08:52:20 -08:00
Brian DeHamer