Brian DeHamer
ccea2d41a8
fix proxy support for jwks retrieval
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-07-26 15:03:40 -07:00
Brian DeHamer
d8e24a34c9
Merge pull request #1759 from actions/bdehamer/rekor-409
...
config rekor to fetch on conflict
2024-06-12 12:25:06 -07:00
Brian DeHamer
7078b65c42
config rekor to fetch on conflict
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-06-12 11:57:18 -07:00
Brian DeHamer
4102b269e4
Merge pull request #1745 from actions/bdehamer/attest-provenance
...
(@actions/attest) New GHA provenance build type
2024-06-12 11:45:37 -07:00
Brian DeHamer
a035e0d5d5
new GHA build provenance
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-06-05 14:54:34 -07:00
Brian DeHamer
1da6586ab2
Merge pull request #1738 from actions/bdehamer/attest-1.3.0
...
(@actions/attest) prepare 1.3.0 release
2024-06-05 14:53:11 -07:00
Brian DeHamer
8c0d1197a8
prep 1.3.0 release of @actions/attest
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-05-21 13:11:37 -07:00
Fredrik Skogman
726009832f
Merge pull request #1735 from kommendorkapten/dynamic-urls
...
Read the server url from the environment variable.
2024-05-21 07:35:07 +02:00
Fredrik Skogman
c25683555f
Fixed a spelling error
2024-05-20 07:57:44 +02:00
Fredrik Skogman
d664948017
PR feedback. Juse more JS idiomatic code
2024-05-20 07:52:36 +02:00
Fredrik Skogman
5f94fee887
Read the server url from the environment variable.
...
Instead of having the urls hardcoded, read them from the environment.
I opted to read from the environment variable instead of the github context
because it would be easier to test.
2024-05-16 17:00:35 +02:00
Brian DeHamer
a8f25ebdd5
Merge pull request #1730 from actions/bdehamer/attest-readme
...
Update @actions/attest README
2024-05-01 11:48:55 -07:00
Brian DeHamer
a072a813df
add doc link in @actions/attest readme
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-05-01 11:30:45 -07:00
Brian DeHamer
46325977ab
Merge pull request #1725 from actions/bdehamer/attest-retry-persist
...
(@actions/attest) retry request on failure to save attestation
2024-04-24 19:59:43 -07:00
Brian DeHamer
019fe54f20
retry request on failure to save attestation
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-04-24 15:07:39 -07:00
Brian DeHamer
82f68045a2
Merge pull request #1714 from actions/bdehamer/attest-no-make-fetch-happen
...
(@actions/attest) remove dep on make-fetch-happen
2024-04-23 10:39:57 -07:00
Brian DeHamer
f04c795925
remove dep on make-fetch-happen
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-04-23 09:39:17 -07:00
Brian DeHamer
c8c4b21917
Merge pull request #1701 from actions/bdehamer/attest-v03-bundle
...
(@actions/attest) generate attestations using v0.3 bundle format
2024-04-03 13:51:26 -07:00
Brian DeHamer
04a08a9a42
generate v0.3 bundles in attest package
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-04-03 12:12:26 -07:00
Brian DeHamer
ae00cbcce7
Merge pull request #1693 from actions/bdehamer/oidc-provenance
...
(@actions/attest) build provenance statement from OIDC claims
2024-03-28 13:44:22 -07:00
Brian DeHamer
4de6ecc2c7
build provenance stmt from OIDC claims
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-03-22 12:34:42 -07:00
Brian DeHamer
dca0c36a52
bump @actions/attest to 1.0.0
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-02-26 10:21:47 -08:00
Brian DeHamer
ab53ed1045
add new @actions/attest package
...
Signed-off-by: Brian DeHamer <bdehamer@github.com >
2024-02-26 08:52:20 -08:00
Brian DeHamer