gittuf

vee1e/gittuf

Fork 0

mirror of https://github.com/vee1e/gittuf.git synced 2026-09-01 18:27:06 +00:00

Commit graph

a4cbba9b15

gitinterface: placate gosec taint analysis on worktree path reads fix/worktree-path-resolution lakshit verma 2026-08-24 19:50:38 +05:30
ad88cf998e

gitinterface: harden worktree resolution against stale or hostile records lakshit verma 2026-08-24 17:28:19 +05:30
a7e72c4c05

gitinterface: resolve worktrees for detached git dirs and worktrees lakshit verma 2026-08-24 16:16:00 +05:30
f53b9de5ff

Merge pull request #1546 from aavyankapoor-svg/test/common-cmd-coverage main patzielinski 2026-08-21 14:44:58 +00:00
2726993cd1 test: add unit test for PublicKeys in internal/cmd/common Aavyan Kapoor 2026-08-21 07:28:49 -04:00
c1c2e21c0c

Merge pull request #1545 from Aaravanand00/test/tui-verify-common-bundle patzielinski 2026-08-20 15:34:52 +00:00
7dd8e9ddb6 internal/cmd/tui: add unit tests and fixes for verify, home, help, view, and core engine Aaravanand00 2026-08-20 13:50:46 +05:30
538b181e61

*: Increase testing coverage coverage-80-pct Pat Zielinski 2026-05-26 17:30:28 -04:00
a09fe4bd9d

Prepare v0.16.0 prepare-v0.16.0 Pat Zielinski 2026-08-09 16:21:32 -04:00
98f34024f8

Merge pull request #1501 from kazuhidelee/feat/expanding_trust_menu_to_mirror_CLI_groupings patzielinski 2026-08-19 01:07:15 +00:00
31d6e7ba57 feat(tui): expand trust menu into modular trust management screens Tony Lee 2026-07-25 20:27:42 -04:00
def5bc701e

Merge pull request #1542 from gittuf/dependabot/go_modules/all-ad10cbc4a8 patzielinski 2026-08-18 15:58:57 +00:00
e9890cbef2

chore(deps): bump the all group across 1 directory with 3 updates dependabot[bot] 2026-08-18 15:49:08 +00:00
cbf0620915

Merge pull request #1525 from PratGit1606/deps/bump-all-with-gitsign patzielinski 2026-08-18 15:46:15 +00:00
ab555a79e9 fix dependency merge conflict PratGit1606 2026-08-12 20:21:28 -07:00
3cff10047d replace deprecated fulcioroots with sigstore-go TUF client PratGit1606 2026-08-11 12:40:42 -07:00
7540d208cf deps: Bump gitsign Pat Zielinski 2026-08-04 10:49:59 -04:00
e20b91b6d7

Merge pull request #1541 from gittuf/dependabot/github_actions/all-29ab28765e patzielinski 2026-08-17 22:01:53 +00:00
503e96ed65

chore(deps): bump the all group with 3 updates dependabot[bot] 2026-08-17 21:47:43 +00:00
bebefd9dea

Merge pull request #1506 from Aaravanand00/feature/tui-verify patzielinski 2026-08-14 15:00:32 +00:00
afa5c4080a

Merge pull request #1526 from pjbgf/validation patzielinski 2026-08-14 14:23:01 +00:00
68873bd844

rsl, tuf: stricter validation for entry and metadata fields Paulo Gomes 2026-08-13 22:53:09 +01:00
a61fcecc70

Merge pull request #1524 from gittuf/move-neil-emeritus Aditya Sirish A Yelgundhalli 2026-08-12 17:24:27 -04:00
3195d46b3d governance: Move Neil to emeritus maintainer Aditya Sirish A Yelgundhalli 2026-08-11 15:34:44 -04:00
008dd3a6ef feat(tui): add verify section with live asynchronous viewport output Aaravanand00 2026-08-11 11:51:24 +05:30
4e607dd048

Merge pull request #1522 from gittuf/propose-paulo-as-maintainer Justin Cappos 2026-08-10 20:22:38 -04:00
4349ff7972

Merge pull request #1508 from kazuhidelee/feat/error_ui_screen_tui patzielinski 2026-08-10 17:02:53 +00:00
09ac57ae61 governance: Propose Paulo Gomes as a gittuf maintainer Aditya Sirish A Yelgundhalli 2026-08-10 11:03:01 -04:00
b4b7ed2da7

Merge pull request #1521 from gittuf/dependabot/github_actions/all-d83e1e87b3 patzielinski 2026-08-10 14:08:40 +00:00
3d388ab7b3

chore(deps): bump the all group with 5 updates dependabot[bot] 2026-08-10 12:02:12 +00:00
c01dda894e

Merge pull request #1518 from gittuf/dependabot/go_modules/github.com/go-git/go-git/v6-6.0.0-alpha.5 patzielinski 2026-08-09 19:30:59 +00:00
afa81440d1

chore(deps): bump github.com/go-git/go-git/v6 dependabot[bot] 2026-08-09 19:24:07 +00:00
87f906dcbf

Merge pull request #1517 from gittuf/dependabot/go_modules/github.com/go-git/go-git/v5-5.19.2 patzielinski 2026-08-09 19:18:24 +00:00
9d4798610e

chore(deps): bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 dependabot[bot] 2026-08-09 19:10:55 +00:00
9414461692

Merge pull request #1505 from Aaravanand00/fix/tui-add-principal-choice patzielinski 2026-08-08 17:18:01 +00:00
e6f4c9f2c4

Merge pull request #1513 from pjbgf/fuzz-expansion patzielinski 2026-08-06 20:09:46 +00:00
e21d7dd662

Merge pull request #1514 from PratGit1606/fix/github-pullrequest-token-check patzielinski 2026-08-06 15:08:30 +00:00
e22a68eb92 isolate GITHUB_TOKEN env var in TestPullRequest PratGit1606 2026-08-05 11:01:41 -07:00
69f306d2eb

test: add fuzz tests for decoding paths Paulo Gomes 2026-08-05 06:49:25 +01:00
f816160e66

fix: avoid panics when decoding malformed input Paulo Gomes 2026-08-04 23:43:12 +01:00
385a33b547

Merge pull request #1498 from pjbgf/go-git-storer patzielinski 2026-08-04 15:24:15 +00:00
4a53c1b214

refactor: standardize on githash.Hash Paulo Gomes 2026-07-30 08:53:34 +01:00
c14d797310

test: Make TestPagerResolution deterministic Paulo Gomes 2026-07-29 23:30:58 +01:00
9e269f46fb

Introduce gitstore.Storer and make gittuf's core dependency-light Paulo Gomes 2026-07-21 13:09:52 +01:00
4768c27691 feat(tui): add principal choice menu with standalone key support and fix navigation Aaravanand00 2026-07-28 19:49:39 +05:30
d8484026c5

Merge pull request #1510 from gittuf/dependabot/github_actions/all-bf2156f2e9 patzielinski 2026-08-02 23:48:48 +00:00
5187e1803c

chore(deps): bump the all group with 4 updates dependabot[bot] 2026-08-02 22:52:18 +00:00
5bbc236d41 adding error screen for action errors Tony Lee 2026-08-01 14:05:37 -04:00
1f6e4a9d4e

Merge pull request #1486 from Aaravanand00/feature/tui-policy-lifecycle patzielinski 2026-07-31 02:27:18 +00:00
a517e4d554 feat(tui): add policy lifecycle screen Aaravanand00 2026-07-23 01:56:10 +05:30
10876716e7

Merge pull request #1504 from gittuf/dependabot/github_actions/all-007b9456e6 patzielinski 2026-07-28 12:52:09 +00:00
2ba3759186

chore(deps): bump coverallsapp/github-action in the all group dependabot[bot] 2026-07-27 21:43:37 +00:00
2b8a3992c8

Merge pull request #1503 from gittuf/dependabot/go_modules/google.golang.org/grpc-1.82.1 patzielinski 2026-07-27 13:46:28 +00:00
ecd8ece01f

Merge pull request #1502 from gittuf/dependabot/github_actions/all-49f80dc4bc patzielinski 2026-07-27 13:40:11 +00:00
cdc0e58be6

chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 dependabot[bot] 2026-07-27 13:36:13 +00:00
9e962316a8

chore(deps): bump the all group with 4 updates dependabot[bot] 2026-07-27 13:19:25 +00:00
f193707835

Merge pull request #1499 from pjbgf/disable-replace patzielinski 2026-07-24 16:03:42 +00:00
47e4b5258c

gitinterface: ignore refs/replace/ in git invocations Paulo Gomes 2026-07-22 16:22:28 +01:00
2e940b8276

Merge pull request #1500 from gittuf/fix-tests Aditya Sirish A Yelgundhalli 2026-07-23 16:59:59 -04:00
30a8de0d5c

pkg: Fix gitinterface test Pat Zielinski 2026-07-23 16:33:40 -04:00
7c69da80d4

Merge pull request #1463 from git-pkgs/gitinterface-no-chdir Aditya Sirish A Yelgundhalli 2026-07-23 12:53:49 -04:00
1ded25b6fb

Merge pull request #1462 from git-pkgs/detect-dot-git-bare Aditya Sirish A Yelgundhalli 2026-07-23 12:50:27 -04:00
16341091db

Merge pull request #1485 from Aaravanand00/feature/tui-policy-principals patzielinski 2026-07-22 15:28:48 +00:00
add9af0c5e feat(tui): add policy principals management screens Aaravanand00 2026-07-10 14:15:28 +05:30
57239d1098

Merge pull request #1475 from lyixin466/readd-inspect-root-1459 patzielinski 2026-07-21 02:19:21 +00:00
659645b904

Merge pull request #1497 from gittuf/dependabot/github_actions/all-5b761a524f patzielinski 2026-07-20 22:31:59 +00:00
e193433a24

chore(deps): bump the all group across 1 directory with 7 updates dependabot[bot] 2026-07-20 22:24:00 +00:00
f6d6b04eb3

Merge pull request #1337 from Aaravanand00/test/add-parallel-tests patzielinski 2026-07-20 22:20:38 +00:00
a869511ec3 Readd gittuf trust inspect-root, add gittuf policy inspect Leng 2026-07-16 16:49:28 -04:00
83444b9b92

Merge pull request #1495 from kazuhidelee/finish_extracting_the_trust_global_rules_screen_behavior patzielinski 2026-07-20 19:27:53 +00:00
dc5f236ac5

Merge pull request #1490 from Sahil-13082003/test/lua-run-script patzielinski 2026-07-20 18:36:10 +00:00
65c44626e7 test: fix loop variable capture in parallel subtests; ci: fix Windows D drive path setup Aaravanand00 2026-05-20 18:46:20 +05:30
d62c341395

test: add RunScript coverage Sahil-13082003 2026-07-11 01:53:31 -04:00
2887523b5e refactor(tui):finish_extracting_the_trust_global_rules_screen_behavior Tony Lee 2026-07-17 19:09:25 -04:00
4b39e5fab9

Merge pull request #1477 from Aaravanand00/test/cli-test-cleanup patzielinski 2026-07-19 14:26:48 +00:00
48f56f600b test: replace t.Fatal(err) with require.NoError(t, err) in CLI tests Aaravanand 2026-07-19 13:16:42 +05:30
0bd8dc5fa9

Merge pull request #1301 from yashrajshuklaaa/feat/persistent-cache-default patzielinski 2026-07-17 17:14:25 +00:00
61065901ee feat: enable persistent cache by default on trust init and clone Yashraj Shukla 2026-07-17 16:54:50 +00:00
2a351a8ddc

Merge pull request #1472 from pjbgf/sha256 patzielinski 2026-07-17 03:20:39 +00:00
ce6f2bc29e

Block use of extensions.compatObjectFormat Paulo Gomes 2026-07-16 21:28:02 +01:00
5f5f5508e3

feat(sha256): support SHA-256 object format Paulo Gomes 2026-07-02 12:32:48 +01:00
a38704c5de

Merge pull request #1464 from git-pkgs/rsl-signing-key-option patzielinski 2026-07-16 20:52:25 +00:00
f5dabef000

Merge pull request #1489 from kazuhidelee/refactor/extract_trust_global_rules patzielinski 2026-07-16 15:17:14 +00:00
2cfed1a3fa

Merge pull request #1493 from gittuf/dependabot/github_actions/all-f2830242e4 patzielinski 2026-07-16 14:57:34 +00:00
fff782e9ae

chore(deps): bump the all group with 2 updates dependabot[bot] 2026-07-16 14:51:12 +00:00
dac600654b refactor(tui): split trust global rules and forms into modular screens Tony Lee 2026-07-15 15:40:44 -04:00
ba4d5bc767

Merge pull request #1461 from PratGit1606/docs/fix-policy-command-docstrings patzielinski 2026-07-15 15:13:21 +00:00
b6a652ede7 docs: fix policy command docstrings for stage, discard, and apply PratGit1606 2026-06-29 01:39:10 -07:00
03410d0ca6

Merge pull request #1491 from gittuf/dependabot/go_modules/all-dfa00a9e44 patzielinski 2026-07-14 18:52:20 +00:00
9559e00d55

Merge pull request #1492 from gittuf/dependabot/github_actions/all-7512263334 patzielinski 2026-07-14 18:49:57 +00:00
cb6a334fc7

chore(deps): bump the all group with 3 updates dependabot[bot] 2026-07-13 21:43:49 +00:00
a939d2783e

chore(deps): bump the all group with 2 updates dependabot[bot] 2026-07-13 19:11:11 +00:00
58e0a60a12

Merge pull request #1481 from kazuhidelee/refactor/creating-trust-sub-menu patzielinski 2026-07-13 13:51:44 +00:00
0f3f5e5a12 refactor(tui): split trust menu into its own component Tony Lee 2026-07-12 17:05:08 -04:00
a6a51600f0

Merge pull request #1483 from Aaravanand00/refactor/tui-screen-help patzielinski 2026-07-10 12:06:50 +00:00
a5616a3b3e

Merge pull request #1474 from PratGit1606/docs/fix-command-docstrings-audit patzielinski 2026-07-10 11:05:18 +00:00
e77e0516a6

Merge pull request #1482 from R4R3D1FF/close-fulcio-connection patzielinski 2026-07-10 10:13:09 +00:00
9707977fd3 docs: audit and fix CLI command docstrings across all commands PratGit1606 2026-06-29 02:01:44 -07:00
671d5885cf refactor(tui): split help overlay screen into modular component Aaravanand 2026-07-06 22:38:57 +05:30
e2308b0e6b test: clean up CLI command tests Aaravanand 2026-07-08 15:51:06 +05:30