 Brian DeHamer
|
e34e1a99d2
|
bump @actions/http-client from 2.2.1 to 2.2.3
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-08-22 07:52:03 -07:00 |
|
|
Brian DeHamer
|
b4b02b837a
|
improve release notes for @actions/attest
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-08-16 12:43:39 -07:00 |
|
|
Brian DeHamer
|
cda5d64e13
|
derive default OIDC issuer from current tenant
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-08-16 12:07:23 -07:00 |
|
|
Brian DeHamer
|
29f863eb6f
|
support for headers param in attest functions
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-08-15 15:35:32 -07:00 |
|
|
Brian DeHamer
|
ccea2d41a8
|
fix proxy support for jwks retrieval
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-07-26 15:03:40 -07:00 |
|
|
Brian DeHamer
|
7078b65c42
|
config rekor to fetch on conflict
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-06-12 11:57:18 -07:00 |
|
|
Brian DeHamer
|
a035e0d5d5
|
new GHA build provenance
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-06-05 14:54:34 -07:00 |
|
|
Brian DeHamer
|
8c0d1197a8
|
prep 1.3.0 release of @actions/attest
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-05-21 13:11:37 -07:00 |
|
|
Brian DeHamer
|
019fe54f20
|
retry request on failure to save attestation
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-04-24 15:07:39 -07:00 |
|
|
Brian DeHamer
|
f04c795925
|
remove dep on make-fetch-happen
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-04-23 09:39:17 -07:00 |
|
|
Brian DeHamer
|
04a08a9a42
|
generate v0.3 bundles in attest package
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-04-03 12:12:26 -07:00 |
|
|
Brian DeHamer
|
4de6ecc2c7
|
build provenance stmt from OIDC claims
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-03-22 12:34:42 -07:00 |
|
|
Brian DeHamer
|
ab53ed1045
|
add new @actions/attest package
Signed-off-by: Brian DeHamer <bdehamer@github.com>
|
2024-02-26 08:52:20 -08:00 |
|