Commit graph

1922 commits

Author SHA1 Message Date
Pat Zielinski
84512fd100 DNM: SF Eval
Signed-off-by: Pat Zielinski <git@patzielinski.com>
2025-08-06 09:31:50 -04:00
Pat Zielinski
caf0310700 DNM: SF Eval
Signed-off-by: Pat Zielinski <git@patzielinski.com>
2025-08-06 09:31:50 -04:00
Pat Zielinski
4f7767609d DNM: SF Eval
Signed-off-by: Pat Zielinski <git@patzielinski.com>
2025-08-06 09:31:50 -04:00
patzielinski
ec74b94608
Merge pull request #1071 from gittuf/dependabot/go_modules/all-4ed9648abe
chore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.9.0 to 0.9.1 in the all group
2025-08-04 14:10:21 +00:00
patzielinski
bc98ed619d
Merge pull request #1070 from gittuf/dependabot/github_actions/all-12d2e1d0cf
chore(deps): bump github/codeql-action from 3.29.4 to 3.29.5 in the all group
2025-08-04 14:06:54 +00:00
dependabot[bot]
70d90a0000
chore(deps): bump github.com/secure-systems-lab/go-securesystemslib
Bumps the all group with 1 update: [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib).


Updates `github.com/secure-systems-lab/go-securesystemslib` from 0.9.0 to 0.9.1
- [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases)
- [Commits](https://github.com/secure-systems-lab/go-securesystemslib/compare/v0.9.0...v0.9.1)

---
updated-dependencies:
- dependency-name: github.com/secure-systems-lab/go-securesystemslib
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-04 14:03:06 +00:00
dependabot[bot]
c8bbe7c37a
chore(deps): bump github/codeql-action in the all group
Bumps the all group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 3.29.4 to 3.29.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](4e828ff8d4...51f77329af)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-04 14:02:56 +00:00
Aditya Sirish
2dca53f3ea
Merge pull request #1065 from Sylani-55/docs/add-cache-command-long-desc
docs: add Long description to cache main command
2025-08-01 15:56:15 -04:00
Syed Mohammed Sylani
1cab1b8ada docs: add Long description to cache main command
Signed-off-by: Syed Mohammed Sylani <sylanmohammed@gmail.com>
2025-08-01 15:27:47 -04:00
patzielinski
373138c4f6
Merge pull request #1053 from Sylani-55/docs/add-long-descriptions-approvals
docs: add long descriptions for add-root-key and GitHub App approval commands
2025-08-01 18:55:29 +00:00
Syed Mohammed Sylani
9df9a5d0c4 docs: add long descriptions for add-root-key and GitHub App approval commands
Signed-off-by: Syed Mohammed Sylani <sylanmohammed@gmail.com>
2025-08-01 14:50:30 -04:00
Aditya Sirish
a54c05090f
Merge pull request #1069 from gittuf/update-testing-ignore
ci: Update .test_ignore.txt
2025-08-01 14:25:48 -04:00
Aditya Sirish
a96954baad
Merge pull request #1026 from shivpratikhande/local-cache
added support for resetting the local persistent cache #1023
2025-08-01 14:25:11 -04:00
Pat Zielinski
19ff4eea45 ci: Update .test_ignore.txt
Signed-off-by: Pat Zielinski <git@patzielinski.com>
2025-08-01 13:27:58 -04:00
shivpratikhande
77839228c4 added support for resetting the local persistent cache #1023
Signed-off-by: shivpratikhande <shivpratikhande2017@gmail.com>
2025-08-01 12:56:58 -04:00
Aditya Sirish
e2ad2a515b
Merge pull request #1064 from Sylani-55/docs/add-attest-subcommands-long-desc
docs: add Long descriptions to attest apply and authorize subcommands
2025-08-01 12:41:29 -04:00
Syed Mohammed Sylani
88236fa3a5 docs: add Long descriptions to attest apply and authorize subcommands
Signed-off-by: Syed Mohammed Sylani <sylanmohammed@gmail.com>
2025-08-01 12:36:50 -04:00
Aditya Sirish
52c36deff0
Merge pull request #1051 from Sylani-55/docs/add-long-descriptions-commands
docs: add long descriptions for skip-rewritten, sync, and trust commands
2025-08-01 12:34:24 -04:00
Aditya Sirish
e32fa51707
Merge pull request #975 from Sylani-55/apply-long-doc
docs: add Long description to attest apply commandApply long doc
2025-08-01 12:28:07 -04:00
Aditya Sirish
a75ef4a630
Merge pull request #958 from Krishna-Sharma-g/main
feat: Implement update-person command for gittuf policy
2025-08-01 12:24:34 -04:00
Pat Zielinski
4b334b0737 docs: add detailed long descriptions for trust commands
Co-authored-by: Syed Mohammed Sylani <sylanmohammed@gmail.com>
Signed-off-by: Pat Zielinski <git@patzielinski.com>
2025-07-31 18:43:32 -04:00
Pat Zielinski
ac4074c83f docs: add Long description to apply
Co-authored-by: Syed Mohammed Sylani <sylanmohammed@gmail.com>
Signed-off-by: Pat Zielinski <git@patzielinski.com>
2025-07-30 13:52:42 -04:00
patzielinski
7a78ef9734
Merge pull request #1068 from gittuf/dependabot/github_actions/all-156f88ae03
chore(deps): bump github/codeql-action from 3.29.3 to 3.29.4 in the all group
2025-07-29 01:18:08 +00:00
dependabot[bot]
c81677f835
chore(deps): bump github/codeql-action in the all group
Bumps the all group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 3.29.3 to 3.29.4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](d6bbdef45e...4e828ff8d4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-28 23:25:14 +00:00
Aditya Sirish
145fb54004
Merge pull request #821 from QH89/update_propagation_directive
update_propagation_directive
2025-07-24 15:30:58 -04:00
patzielinski
03a8845de9
Merge pull request #1063 from gittuf/dependabot/github_actions/all-c9507acf48
chore(deps): bump the all group with 2 updates
2025-07-22 01:43:03 +00:00
dependabot[bot]
8c2331fdd1
chore(deps): bump the all group with 2 updates
Bumps the all group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer).


Updates `github/codeql-action` from 3.29.2 to 3.29.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](181d5eefc2...d6bbdef45e)

Updates `sigstore/cosign-installer` from 3.9.1 to 3.9.2
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](398d4b0eee...d58896d6a1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-21 22:47:00 +00:00
Aditya Sirish
c4a5642991
Merge pull request #1060 from gittuf/fix-lint-ci
*: Fix lint issues with common package name
2025-07-18 10:07:13 -04:00
Pat Zielinski
e0b6bfe7a3 *: Fix lint issues with common package name
Signed-off-by: Pat Zielinski <git@patzielinski.com>
2025-07-18 10:06:04 -04:00
Aditya Sirish
e7d0bc0643
Merge pull request #1059 from gittuf/fix-legacy-git-ci
ci: Fix Git 2.34 workflow
2025-07-18 10:03:49 -04:00
Pat Zielinski
3049a77f40 ci: Fix Git 2.34 workflow
Signed-off-by: Pat Zielinski <git@patzielinski.com>
2025-07-17 14:55:50 -04:00
patzielinski
1d4ac0ce5f
Merge pull request #1058 from gittuf/dependabot/go_modules/all-ad717f8a28
chore(deps): bump the all group with 2 updates
2025-07-15 14:13:48 +00:00
dependabot[bot]
7055fdcd7e
chore(deps): bump the all group with 2 updates
Bumps the all group with 2 updates: [github.com/sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs) and [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `github.com/sigstore/protobuf-specs` from 0.4.3 to 0.5.0
- [Release notes](https://github.com/sigstore/protobuf-specs/releases)
- [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/protobuf-specs/compare/v0.4.3...v0.5.0)

Updates `golang.org/x/crypto` from 0.39.0 to 0.40.0
- [Commits](https://github.com/golang/crypto/compare/v0.39.0...v0.40.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/protobuf-specs
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/crypto
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-15 01:32:54 +00:00
patzielinski
02d7f01f75
Merge pull request #1056 from gittuf/dependabot/go_modules/all-ab3f87bdea
chore(deps): bump github.com/charmbracelet/bubbletea from 1.3.5 to 1.3.6 in the all group
2025-07-08 00:42:54 +00:00
dependabot[bot]
f4980a1281
chore(deps): bump github.com/charmbracelet/bubbletea in the all group
Bumps the all group with 1 update: [github.com/charmbracelet/bubbletea](https://github.com/charmbracelet/bubbletea).


Updates `github.com/charmbracelet/bubbletea` from 1.3.5 to 1.3.6
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Changelog](https://github.com/charmbracelet/bubbletea/blob/main/.goreleaser.yml)
- [Commits](https://github.com/charmbracelet/bubbletea/compare/v1.3.5...v1.3.6)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/bubbletea
  dependency-version: 1.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-07 23:49:33 +00:00
Aditya Sirish
1eac4a9cdb
Merge pull request #1052 from gittuf/dependabot/github_actions/all-384b59e5c3
chore(deps): bump github/codeql-action from 3.29.0 to 3.29.2 in the all group
2025-07-01 11:22:47 -04:00
dependabot[bot]
55a6744cf4
chore(deps): bump github/codeql-action in the all group
Bumps the all group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 3.29.0 to 3.29.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](ce28f5bb42...181d5eefc2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-01 01:23:44 +00:00
patzielinski
d82a808edd
Merge pull request #1050 from gittuf/dependabot/github_actions/all-5ce7fed9eb
chore(deps): bump sigstore/cosign-installer from 3.9.0 to 3.9.1 in the all group
2025-06-23 21:58:36 +00:00
dependabot[bot]
1281690109
chore(deps): bump sigstore/cosign-installer in the all group
Bumps the all group with 1 update: [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer).


Updates `sigstore/cosign-installer` from 3.9.0 to 3.9.1
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](fb28c2b633...398d4b0eee)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-23 21:53:28 +00:00
Aditya Sirish
3e399fd2f5
Merge pull request #1028 from gittuf/move-functionality-out-of-devmode
Move functionality out of devmode
2025-06-23 10:27:05 -04:00
patzielinski
5d4f847308
Merge pull request #1049 from gittuf/dependabot/github_actions/all-e5e5069bb4
chore(deps): bump sigstore/cosign-installer from 3.8.2 to 3.9.0 in the all group
2025-06-23 05:51:48 +00:00
dependabot[bot]
42a5c3f2e1
chore(deps): bump sigstore/cosign-installer in the all group
Bumps the all group with 1 update: [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer).


Updates `sigstore/cosign-installer` from 3.8.2 to 3.9.0
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](3454372f43...fb28c2b633)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-23 05:49:05 +00:00
patzielinski
0ecd4c729e
Merge pull request #1048 from gittuf/fix-pager-coloring
display: Fix pager to parse ANSI color sequences
2025-06-22 15:04:51 +00:00
Aditya Sirish
b2f076463e
display: Fix pager to parse ANSI color sequences
Co-authored-by: shivv <shivpratikhande2017@gmail.com>
Signed-off-by: Aditya Sirish <aditya@saky.in>
2025-06-22 11:02:40 -04:00
Aditya Sirish
1dec54e357
Merge pull request #1034 from duke-mai/patch-1
Fix subject-verb agreement in installation instructions
2025-06-22 10:23:34 -04:00
Duke Mai
91def537bb
Fix subject-verb agreement in installation instructions
Signed-off-by: Duke Mai <ducmai.network@gmail.com>
Signed-off-by: Aditya Sirish <aditya@saky.in>
2025-06-22 10:20:48 -04:00
patzielinski
4ab04ee0cd
Merge pull request #1037 from gittuf/dependabot/github_actions/all-8dc2abc1f8
chore(deps): bump the all group with 2 updates
2025-06-16 13:16:46 +00:00
patzielinski
bedce5122c
Merge pull request #1036 from gittuf/dependabot/go_modules/all-e5fc6cc429
chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2 in the all group
2025-06-16 13:14:20 +00:00
dependabot[bot]
bb9222e30a
chore(deps): bump the all group with 2 updates
Bumps the all group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [gittuf/gittuf-installer](https://github.com/gittuf/gittuf-installer).


Updates `github/codeql-action` from 3.28.19 to 3.29.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](fca7ace96b...ce28f5bb42)

Updates `gittuf/gittuf-installer` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/gittuf/gittuf-installer/releases)
- [Commits](fe9ac76ca1...172d0010e1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: gittuf/gittuf-installer
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-16 13:11:16 +00:00
dependabot[bot]
5e0cdedbd5
chore(deps): bump github.com/in-toto/attestation in the all group
Bumps the all group with 1 update: [github.com/in-toto/attestation](https://github.com/in-toto/attestation).


Updates `github.com/in-toto/attestation` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/in-toto/attestation/releases)
- [Commits](https://github.com/in-toto/attestation/compare/v1.1.1...v1.1.2)

---
updated-dependencies:
- dependency-name: github.com/in-toto/attestation
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-06-16 13:11:15 +00:00