Pat Zielinski
07c87fa656
gitinterface: Add utilities helpful for gittuf hooks
...
Signed-off-by: Pat Zielinski <70954403+patzielinski@users.noreply.github.com>
Co-authored-by: Jamal Cao <jamaltheodds@gmail.com>
2025-03-06 23:18:09 -05:00
patzielinski
4f3b0cf24b
Merge pull request #841 from yongjae354/list-globalrules
...
gittuf: add command list-globalrules
2025-03-05 18:57:05 +00:00
Yongjae Chung
dfd67f142a
add cmd list-global-rules
...
Signed-off-by: Yongjae Chung <yongjae354@berkeley.edu>
2025-03-05 13:27:50 -05:00
Aditya Sirish
0ad24b7ddf
Merge pull request #854 from gittuf/sync-propagate
...
Reconcile sync and propagation workflows
2025-03-05 11:26:28 -05:00
Aditya Sirish A Yelgundhalli
3e7e688406
gittuf: Update how sync and propagation workflows interact
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-03-05 11:21:29 -05:00
patzielinski
51bb887549
Merge pull request #858 from gittuf/drop-dependabot-frequency
...
dependabot: Drop frequency to weekly
2025-03-02 01:27:43 +00:00
Aditya Sirish A Yelgundhalli
5598cc9300
dependabot: Drop frequency to weekly
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-03-01 11:03:30 -08:00
patzielinski
8ca85c2dd6
Merge pull request #856 from gittuf/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.4
...
chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
2025-02-27 15:47:28 +00:00
dependabot[bot]
db6ce7daae
chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
...
Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose ) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.3...v3.0.4 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-27 15:43:13 +00:00
patzielinski
f17397533e
Merge pull request #855 from gittuf/dependabot/go_modules/all-089cf035f8
...
chore(deps): bump the all group with 2 updates
2025-02-27 15:38:37 +00:00
dependabot[bot]
ccf1a54de1
chore(deps): bump the all group with 2 updates
...
Bumps the all group with 2 updates: [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto ) and [github.com/go-git/go-git/v5](https://github.com/go-git/go-git ).
Updates `github.com/ProtonMail/go-crypto` from 1.1.5 to 1.1.6
- [Release notes](https://github.com/ProtonMail/go-crypto/releases )
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.1.5...v1.1.6 )
Updates `github.com/go-git/go-git/v5` from 5.13.2 to 5.14.0
- [Release notes](https://github.com/go-git/go-git/releases )
- [Commits](https://github.com/go-git/go-git/compare/v5.13.2...v5.14.0 )
---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: github.com/go-git/go-git/v5
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-27 14:37:18 +00:00
patzielinski
05fd1abcbc
Merge pull request #853 from gittuf/dependabot/go_modules/all-a0bc85bfcf
...
chore(deps): bump github.com/charmbracelet/bubbletea from 1.3.3 to 1.3.4 in the all group
2025-02-26 15:42:16 +00:00
dependabot[bot]
c9dc68cd57
chore(deps): bump github.com/charmbracelet/bubbletea in the all group
...
Bumps the all group with 1 update: [github.com/charmbracelet/bubbletea](https://github.com/charmbracelet/bubbletea ).
Updates `github.com/charmbracelet/bubbletea` from 1.3.3 to 1.3.4
- [Release notes](https://github.com/charmbracelet/bubbletea/releases )
- [Changelog](https://github.com/charmbracelet/bubbletea/blob/main/.goreleaser.yml )
- [Commits](https://github.com/charmbracelet/bubbletea/compare/v1.3.3...v1.3.4 )
---
updated-dependencies:
- dependency-name: github.com/charmbracelet/bubbletea
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-26 14:08:22 +00:00
patzielinski
e5bfbdabf1
Merge pull request #852 from gittuf/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
...
chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5
2025-02-25 15:58:02 +00:00
dependabot[bot]
5928682d5a
chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5
...
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ) from 4.0.4 to 4.0.5.
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md )
- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-25 15:53:33 +00:00
patzielinski
548e6303da
Merge pull request #850 from gittuf/dependabot/go_modules/all-ee7f9554a6
...
chore(deps): bump golang.org/x/crypto from 0.33.0 to 0.35.0 in the all group
2025-02-25 15:48:34 +00:00
patzielinski
320915a14d
Merge pull request #851 from gittuf/dependabot/github_actions/all-6e57292089
...
chore(deps): bump the all group with 3 updates
2025-02-25 15:47:35 +00:00
dependabot[bot]
5ff4030a2e
chore(deps): bump the all group with 3 updates
...
Bumps the all group with 3 updates: [github/codeql-action](https://github.com/github/codeql-action ), [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) and [actions/upload-artifact](https://github.com/actions/upload-artifact ).
Updates `github/codeql-action` from 3.28.9 to 3.28.10
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](9e8d0789d4...b56ba49b26https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](62b2cac7ed...f49aabe0b5https://github.com/actions/upload-artifact/releases )
- [Commits](65c4c4a1dd...4cec3d8aa0
2025-02-25 15:03:20 +00:00
dependabot[bot]
b9b140c36e
chore(deps): bump golang.org/x/crypto in the all group
...
Bumps the all group with 1 update: [golang.org/x/crypto](https://github.com/golang/crypto ).
Updates `golang.org/x/crypto` from 0.33.0 to 0.35.0
- [Commits](https://github.com/golang/crypto/compare/v0.33.0...v0.35.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-25 14:24:36 +00:00
patzielinski
865ea2a635
Merge pull request #849 from gittuf/dependabot/github_actions/all-b9ad3d8bfe
...
chore(deps): bump sigstore/cosign-installer from 3.8.0 to 3.8.1 in the all group
2025-02-21 00:52:44 +00:00
dependabot[bot]
fc7987d13d
chore(deps): bump sigstore/cosign-installer in the all group
...
Bumps the all group with 1 update: [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ).
Updates `sigstore/cosign-installer` from 3.8.0 to 3.8.1
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](c56c2d3e59...d7d6bc7722
2025-02-21 00:51:04 +00:00
patzielinski
ab5000ff5a
Merge pull request #848 from gittuf/attest-persistent
...
cmd: Add persistent options for attest
2025-02-20 23:18:28 +00:00
Aditya Sirish A Yelgundhalli
0de2972b48
cmd: Add persistent options for attest
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-20 18:13:32 -05:00
Aditya Sirish
edc1c0e67a
Merge pull request #845 from gittuf/gittuf-sync
...
*: Add gittuf sync
2025-02-20 17:58:05 -05:00
Aditya Sirish A Yelgundhalli
3639e23219
*: Add gittuf sync
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-20 17:56:07 -05:00
patzielinski
ffb8fd34d7
Merge pull request #847 from gittuf/fix-lint
...
lint: Update exclude-dir config
2025-02-20 22:55:17 +00:00
Aditya Sirish A Yelgundhalli
d7c7f453fc
lint: Update exclude-dir config
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-20 17:53:13 -05:00
Aditya Sirish
76c284496f
Merge pull request #846 from gittuf/fix-lint-issues
...
tuf: Fix issues raised by linter
2025-02-20 17:41:22 -05:00
Pat Zielinski
6da61db538
tuf: Fix issues raised by linter
...
Signed-off-by: Pat Zielinski <70954403+patzielinski@users.noreply.github.com>
2025-02-20 17:18:26 -05:00
patzielinski
f0d75ae32c
Merge pull request #844 from gittuf/gitinterface-fetch-single-object
...
gitinterface: Support fetching single object
2025-02-20 18:45:08 +00:00
Aditya Sirish A Yelgundhalli
692f95930d
gitinterface: Support fetching single object
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-20 13:41:27 -05:00
patzielinski
cbdf19b90d
Merge pull request #815 from gittuf/add-guppie-metadata
...
[GUPPIEs] *: Add GUPPIEs to gittuf metadata
2025-02-20 18:11:04 +00:00
Pat Zielinski
a992164355
tuf: Add GUPPIEs to gittuf metadata
...
Signed-off-by: Pat Zielinski <70954403+patzielinski@users.noreply.github.com>
Co-authored-by: yashobapat <f20210006@goa.bits-pilani.ac.in>
2025-02-20 12:39:05 -05:00
patzielinski
139eee4f9f
Merge pull request #843 from gittuf/gitinterface-object-type
...
gitinterface: Add GetObjectType
2025-02-20 17:29:20 +00:00
Aditya Sirish A Yelgundhalli
4719129e24
gitinterface: Add GetObjectType
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-20 12:15:45 -05:00
patzielinski
fa0a022ca9
Merge pull request #842 from gittuf/dependabot/go_modules/all-229134eb4c
...
chore(deps): bump github.com/sigstore/sigstore from 1.8.14 to 1.8.15 in the all group
2025-02-20 14:42:57 +00:00
dependabot[bot]
07eed9c733
chore(deps): bump github.com/sigstore/sigstore in the all group
...
Bumps the all group with 1 update: [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore ).
Updates `github.com/sigstore/sigstore` from 1.8.14 to 1.8.15
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.8.14...v1.8.15 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-20 14:13:21 +00:00
patzielinski
be73b5e895
Merge pull request #838 from gittuf/remove-unnecessary-bits
...
*: Remove some unnecessary pieces
2025-02-18 15:56:41 +00:00
Aditya Sirish A Yelgundhalli
2dc047ec98
*: Remove some unnecessary pieces
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-18 10:54:27 -05:00
Aditya Sirish
de2459f857
Merge pull request #835 from gittuf/move-attests-out-of-dev
...
Move attestation functionality out of developer mode
2025-02-18 09:24:44 -05:00
Aditya Sirish A Yelgundhalli
03e363a527
*: Move attest functionality out of dev
...
This commit moves GitHub-specific attestations out of developer mode. In
addition, it drops the authorize subcommand of dev, which was deprecated in the
last release.
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-18 09:18:57 -05:00
patzielinski
8a1ac7e48e
Merge pull request #836 from gittuf/dependabot/github_actions/all-7d6039e501
...
chore(deps): bump gittuf/gittuf-installer from 0.6.1 to 0.7.0 in the all group
2025-02-18 01:55:34 +00:00
dependabot[bot]
d1efee8c68
chore(deps): bump gittuf/gittuf-installer in the all group
...
Bumps the all group with 1 update: [gittuf/gittuf-installer](https://github.com/gittuf/gittuf-installer ).
Updates `gittuf/gittuf-installer` from 0.6.1 to 0.7.0
- [Release notes](https://github.com/gittuf/gittuf-installer/releases )
- [Commits](f31e69c7c1...f6589511b7
2025-02-18 01:53:21 +00:00
Aditya Sirish
d31e61acdf
Merge pull request #831 from gittuf/dependabot/github_actions/all-06c47a9d96
...
chore(deps): bump golangci/golangci-lint-action from 6.4.1 to 6.5.0 in the all group
2025-02-17 16:43:15 -05:00
Aditya Sirish
b5d333cc89
lint: Replace deprecated option
...
Signed-off-by: Aditya Sirish <aditya@saky.in>
2025-02-17 16:26:39 -05:00
dependabot[bot]
f0cc688cb9
chore(deps): bump golangci/golangci-lint-action in the all group
...
Bumps the all group with 1 update: [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ).
Updates `golangci/golangci-lint-action` from 6.4.1 to 6.5.0
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](818ec4d51a...2226d7cb06
2025-02-17 20:05:02 +00:00
patzielinski
7504531359
Merge pull request #832 from gittuf/go-1.24
...
ci: Add go 1.24
2025-02-17 20:03:10 +00:00
patzielinski
f42c928102
Merge pull request #833 from gittuf/dependabot/go_modules/all-37a50384ab
...
chore(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 in the all group
2025-02-17 15:43:27 +00:00
dependabot[bot]
2b89f8a096
chore(deps): bump github.com/spf13/cobra in the all group
...
Bumps the all group with 1 update: [github.com/spf13/cobra](https://github.com/spf13/cobra ).
Updates `github.com/spf13/cobra` from 1.8.1 to 1.9.1
- [Release notes](https://github.com/spf13/cobra/releases )
- [Commits](https://github.com/spf13/cobra/compare/v1.8.1...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-02-17 15:39:31 +00:00
Pat Zielinski
11cb74e836
ci: Add go 1.24
...
Signed-off-by: Pat Zielinski <70954403+patzielinski@users.noreply.github.com>
2025-02-17 10:36:26 -05:00
