Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: sigstore/cosign-installer
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v3.0.1
Choose a base ref
...
head repository: sigstore/cosign-installer
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v3.0.2
Choose a head ref
  • 7 commits
  • 3 files changed
  • 5 contributors

Commits on Mar 6, 2023

  1. add --yes to example workflow (#110) 

    Version 2.0 of cosign is asking users to confirm that information is
stored in public transparency logs. This interactive interaction does
not work in automated CI pipelines like GitHub actions and breaks
builds that are now starting to use 2.0. Adding --yes removes the
required user interaction and enables automated builds again.

Signed-off-by: Sebastian Hoß <seb@xn--ho-hia.de>
    @sebhoss
    sebhoss authored Mar 6, 2023
    Configuration menu
    Copy the full SHA
    bd2d118 View commit details
    Browse the repository at this point in the history

Commits on Mar 17, 2023

  1. Fix aarch64 action run (#113) 

    It seems there's a typo in the ARM64 case. 

The `desired_cosign_filename` variable is set to `_amd64`. This small patch fixes it.

Signed-off-by: Anastassios Nanos <ananos@nubificus.co.uk>
    @ananos
    ananos authored Mar 17, 2023
    Configuration menu
    Copy the full SHA
    ca922a5 View commit details
    Browse the repository at this point in the history

Commits on Mar 20, 2023

  1. Bump actions/checkout from 3.3.0 to 3.4.0 (#115)

    @dependabot
    dependabot[bot] authored Mar 20, 2023
    Configuration menu
    Copy the full SHA
    a153265 View commit details
    Browse the repository at this point in the history

  2. Bump actions/setup-go from 3.5.0 to 4.0.0 (#114) 

    Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.5.0 to 4.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@6edd440...4d34df0)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Mar 20, 2023
    Configuration menu
    Copy the full SHA
    00bf136 View commit details
    Browse the repository at this point in the history

Commits on Mar 27, 2023

  1. Bump actions/checkout from 3.4.0 to 3.5.0 (#116)

    @dependabot
    dependabot[bot] authored Mar 27, 2023
    Configuration menu
    Copy the full SHA
    8348525 View commit details
    Browse the repository at this point in the history

Commits on Apr 7, 2023

  1. default cosign to v2.0.1 (#117) 

    Signed-off-by: cpanato <ctadeu@gmail.com>
    @cpanato
    cpanato authored Apr 7, 2023
    Configuration menu
    Copy the full SHA
    9e9de22 View commit details
    Browse the repository at this point in the history

Commits on Jun 3, 2023

  1. update v3.0.2 to download cosign from GitHub instead of GCS 

    Signed-off-by: Bob Callaway <bcallaway@google.com>
    @bobcallaway
    bobcallaway committed Jun 3, 2023
    Configuration menu
    Copy the full SHA
    0f98322 View commit details
    Browse the repository at this point in the history
Loading