Aditya Sirish A Yelgundhalli
0de2972b48
cmd: Add persistent options for attest
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-20 18:13:32 -05:00
Aditya Sirish A Yelgundhalli
03e363a527
*: Move attest functionality out of dev
...
This commit moves GitHub-specific attestations out of developer mode. In
addition, it drops the authorize subcommand of dev, which was deprecated in the
last release.
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-02-18 09:18:57 -05:00
Aditya Sirish A Yelgundhalli
16d9e1d9ce
*: Move reference authorizations out of dev mode
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2025-01-31 13:45:23 -05:00
Aditya Sirish
90a4d1a806
gittuf,cache,policy,cmd: Use persistent cache
...
This commit adds support for persistent cache searching as well as
explicit populating.
Signed-off-by: Aditya Sirish <aditya@saky.in>
2025-01-08 12:42:13 -05:00
Pat Zielinski
4a7bc7e168
*: Move and update signing key checks
...
Signed-off-by: Pat Zielinski <70954403+patzielinski@users.noreply.github.com>
2024-11-11 18:05:39 -05:00
Aditya Sirish A Yelgundhalli
5a04f0b614
gittuf: Expose GitHub token as an opt
...
Also, an error is returned if a token is not provided.
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2024-11-11 11:08:37 -05:00
Aditya Sirish A Yelgundhalli
4ccc102f8e
*: Use person associatedIdentities to verify code review tool approvals
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2024-11-07 17:21:19 -05:00
Aditya Sirish A Yelgundhalli
ede40dc5e0
cmd, gittuf: Move key / signer APIs to gittuf
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2024-10-23 15:59:25 -04:00
Aditya Sirish A Yelgundhalli
eda8a89e2a
repository -> gittuf: Expose a gittuf Go API
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2024-10-23 13:30:35 -04:00
Aditya Sirish A Yelgundhalli
f1473c53e5
*: Add sigstore signer for metadata
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2024-10-09 16:13:01 -04:00
Pat Zielinski
d571facb8d
*: Add copyright notice to code files
...
Signed-off-by: Pat Zielinski <70954403+patzielinski@users.noreply.github.com>
2024-09-27 15:28:12 -04:00
Aditya Sirish A Yelgundhalli
537c267bf0
*: Improve app attestations management
...
This commit includes several changes discussed with @wlynch synchronously.
Broadly speaking, the biggest changes are allowing the use of multiple apps in
tandem. There are some supporting changes such as making the GitHub instance
URL a parameter to the CLI / API rather than something read from the
environment.
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2024-08-14 16:52:00 -04:00
Aditya Sirish A Yelgundhalli
b49c0beae8
*: Refactor approval attestations
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2024-08-14 11:16:29 -04:00
Aditya Sirish A Yelgundhalli
d8f72d9fef
*: Add support for GitHub pull request approval attestation
...
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2024-08-14 11:16:28 -04:00
Aditya Sirish
2fd8d2a817
*: Support distinct src and dst refs in RSL
...
Signed-off-by: Aditya Sirish <aditya@saky.in>
2024-06-28 11:22:23 -04:00
Aditya Sirish A Yelgundhalli
898e2eb472
cmd: Wire up ssh-keygen support
...
Drops support for legacy securesystemslib key format in the CLI.
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
2024-06-17 10:06:08 -04:00
Aditya Sirish
706104ebe5
*: Store GitHub PR data as an attestation
...
Signed-off-by: Aditya Sirish <aditya@saky.in>
Co-authored-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>
2024-04-29 13:17:41 -04:00
Aditya Sirish
4d2fed23e2
*: Switch authorizations to use merge tree target
...
Signed-off-by: Aditya Sirish <aditya@saky.in>
2024-04-10 15:21:34 -04:00
Aditya Sirish
c9d6a70fac
*: Generalize developer mode RSL entry creation
...
Previously, this was very specific to commits in branches, and failed
for tag entries.
Signed-off-by: Aditya Sirish <aditya@saky.in>
2024-01-16 11:18:51 -05:00
Aditya Sirish
0de9f978f1
cmd: Reorganize dev cmds and dev mode check
...
Signed-off-by: Aditya Sirish <aditya@saky.in>
2024-01-16 11:18:50 -05:00
Aditya Sirish
3fbf06a4e0
cmd: Update dev only commands
...
Signed-off-by: Aditya Sirish <aditya@saky.in>
2024-01-16 11:18:50 -05:00
Aditya Sirish
8d95538717
cmd: Add developer mode command
...
Signed-off-by: Aditya Sirish <aditya@saky.in>
2024-01-16 11:18:50 -05:00
