E5CE Comparing v0.6.7...v0.6.8 · sigstore/sigstore-python · GitHub
[go: up one dir, main page]
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: sigstore/sigstore-python
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.6.7
Choose a base ref
...
head repository: sigstore/sigstore-python
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.6.8
Choose a head ref
  • 11 commits
  • 19 files changed
  • 5 contributors

Commits on Oct 11, 2022

  1. _cli: add boolean envvar defaults (#244) 

    * _cli: add boolean envvar defaults

Signed-off-by: William Woodruff <william@trailofbits.com>

* README, _cli: dedupe some common instance options

Signed-off-by: William Woodruff <william@trailofbits.com>

* _cli: conform to `distutils.util.strtobool` coercion behavior

Signed-off-by: William Woodruff <william@trailofbits.com>

Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw authored Oct 11, 2022
    Configuration menu
    Copy the full SHA
    45502bd View commit details
    Browse the repository at this point in the history

  2. build(deps): bump sigstore from 0.6.6 to 0.6.7 in /install (#246) 

    Bumps [sigstore](https://github.com/sigstore/sigstore-python) from 0.6.6 to 0.6.7.
- [Release notes](https://github.com/sigstore/sigstore-python/releases)
- [Commits](v0.6.6...v0.6.7)

---
updated-dependencies:
- dependency-name: sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Oct 11, 2022
    Configuration menu
    Copy the full SHA
    d319880 View commit details
    Browse the repository at this point in the history

  3. build(deps): bump cryptography from 38.0.1 to 38.0.2 in /install (#245) 

    Bumps [cryptography](https://github.com/pyca/cryptography) from 38.0.1 to 38.0.2.
- [Release notes](https://github.com/pyca/cryptography/releases)
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@38.0.1...38.0.2)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: William Woodruff <william@trailofbits.com>
    @dependabot @woodruffw
    dependabot[bot] and woodruffw authored Oct 11, 2022
    Configuration menu
    Copy the full SHA
    68ec7f0 View commit details
    Browse the repository at this point in the history

Commits on Oct 20, 2022

  1. build(deps): bump securesystemslib from 0.24.0 to 0.25.0 in /install (#… 

    …254)

Bumps [securesystemslib](https://github.com/secure-systems-lab/securesystemslib) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/secure-systems-lab/securesystemslib/releases)
- [Changelog](https://github.com/secure-systems-lab/securesystemslib/blob/master/CHANGELOG.md)
- [Commits](secure-systems-lab/securesystemslib@v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: securesystemslib
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Oct 20, 2022
    Configuration menu
    Copy the full SHA
    89a3ba3 View commit details
    Browse the repository at this point in the history

  2. test: add an ambient_oidc marker (#259) 

    * test: add an `ambient_oidc` marker

Fixes #257.

Signed-off-by: William Woodruff <william@trailofbits.com>

* test: register marker correctly

Signed-off-by: William Woodruff <william@trailofbits.com>

Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw authored Oct 20, 2022
    Configuration menu
    Copy the full SHA
    3c8d6d3 View commit details
    Browse the repository at this point in the history

  3. Restore SLSA provenance generator (#256) 

    * Revert "Revert "Add SLSA provenance generator to release; closes #222 (#223)" (#232)"

This reverts commit 2e438cd.

* Bump generator workflow version for new release
    @di
    di authored Oct 20, 2022
    Configuration menu
    Copy the full SHA
    315b078 View commit details
    Browse the repository at this point in the history

  4. add community-wide reusable workflow for license/vuln scan (#255) 

    Signed-off-by: Bob Callaway <bcallaway@google.com>

Signed-off-by: Bob Callaway <bcallaway@google.com>
Co-authored-by: Dustin Ingram <di@users.noreply.github.com>
    @bobcallaway @di
    bobcallaway and di authored Oct 20, 2022
    Configuration menu
    Copy the full SHA
    1d34982 View commit details
    Browse the repository at this point in the history

  5. ctfe: add staging targets (#262) 

    Signed-off-by: Asra Ali <asraa@google.com>

Signed-off-by: Asra Ali <asraa@google.com>
Co-authored-by: William Woodruff <william@trailofbits.com>
    @asraa @woodruffw
    asraa and woodruffw authored Oct 20, 2022
    Configuration menu
    Copy the full SHA
    1216ea0 View commit details
    Browse the repository at this point in the history

Commits on Oct 21, 2022

  1. fix deprecated set-output (#270) 

    Signed-off-by: Bob Callaway <bcallaway@google.com>

Signed-off-by: Bob Callaway <bcallaway@google.com>
    @bobcallaway
    bobcallaway authored Oct 21, 2022
    Configuration menu
    Copy the full SHA
    392e17a View commit details
    Browse the repository at this point in the history

Commits on Oct 24, 2022

  1. sigstore: add a CT keyring, use it for SCT verification (#267)

    @woodruffw
    woodruffw authored Oct 24, 2022
    Configuration menu
    Copy the full SHA
    b5dd9ee View commit details
    Browse the repository at this point in the history

  2. sigstore: 0.6.8 (#284) 

    Signed-off-by: William Woodruff <william@trailofbits.com>

Signed-off-by: William Woodruff <william@trailofbits.com>
    @woodruffw
    woodruffw authored Oct 24, 2022
    Configuration menu
    Copy the full SHA
    2b7a574 View commit details
    Browse the repository at this point in the history
Loading
0