dependabot[bot]
7c9ba87ee2
chore(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 ( #8507 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.58.1 to 1.58.2.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.1...v1.58.2 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 17:37:19 +00:00
dependabot[bot]
ebb7868d97
chore(deps): bump adRise/update-pr-branch from 0.6.0 to 0.7.0 ( #8506 )
...
Bumps [adRise/update-pr-branch](https://github.com/adrise/update-pr-branch ) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/adrise/update-pr-branch/releases )
- [Commits](437fab6e0a...cd305ecbd7
2023-09-22 14:10:01 +00:00
Charles-Edouard Brétéché
61aa713d27
fix: image cache panic and cleanup ( #8512 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 10:40:16 +00:00
Charles-Edouard Brétéché
21e044eb1a
feat: add cli package to load policy exceptions ( #8508 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 09:53:19 +00:00
Vishal Choudhary
d4d5d751b1
fix: disables TUF by default ( #8509 )
2023-09-22 14:32:57 +05:30
dependabot[bot]
a043325237
chore(deps): bump sigstore/scaffolding ( #8505 )
...
Bumps [sigstore/scaffolding](https://github.com/sigstore/scaffolding ) from b52f64ebe86d2d081b753d7d8549e0b668dcabb7 to d5eada0a29719b385d26831ead049f188bbfd824.
- [Release notes](https://github.com/sigstore/scaffolding/releases )
- [Changelog](https://github.com/sigstore/scaffolding/blob/main/release.md )
- [Commits](b52f64ebe8...d5eada0a29
2023-09-22 07:30:38 +00:00
Charles-Edouard Brétéché
6cf57ee81f
fix: make sure we don't modify reports not owned by kyverno ( #8502 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 04:01:21 +00:00
Charles-Edouard Brétéché
bc6b6e17b9
fix: return gvk when loading resource ( #8501 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-22 11:10:15 +08:00
Charles-Edouard Brétéché
3c76cf5118
feat: add resource load funcs in cli ( #8499 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 21:32:30 +00:00
Vishal Choudhary
9c69774a67
feat: add 1.11.0 in GH issue templates ( #8496 )
2023-09-21 15:17:45 +00:00
Charles-Edouard Brétéché
d421c8860b
fix: webhookTimeout flag not clear ( #8493 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 14:40:38 +00:00
Vishal Choudhary
e6bebeae9b
feat: improve assertion and error messages ( #8489 )
2023-09-21 12:39:54 +00:00
Charles-Edouard Brétéché
86b752e2fb
feat: add cli resource loader package ( #8488 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 11:59:45 +00:00
Charles-Edouard Brétéché
4046315dac
feat: add a package to convert unstructured into typed ( #8484 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 09:34:38 +00:00
Charles-Edouard Brétéché
ae1fa9b260
fix: deep copy before validaitng ( #8483 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 09:01:14 +00:00
Charles-Edouard Brétéché
af50fabc6e
chore: fix release ( #8482 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 08:24:45 +00:00
Charles-Edouard Brétéché
f38011cd8e
fix: check subjects func ( #8470 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-21 03:22:01 +00:00
Charles-Edouard Brétéché
b692e3b817
fix: make free disk space action configurable ( #8478 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 23:13:14 +00:00
Charles-Edouard Brétéché
5eb3ca2d96
fix: release archive name template ( #8475 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 22:35:49 +00:00
Charles-Edouard Brétéché
1a73ca7e9f
fix: publish images workflow ( #8473 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 21:50:00 +00:00
Charles-Edouard Brétéché
da5496bd64
fix: release workflow ( #8471 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 19:46:40 +00:00
Charles-Edouard Brétéché
4925f7a4b3
chore: free disk space before running jobs ( #8468 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 15:49:23 +00:00
Vishal Choudhary
fd01e50280
fix: image verify cache test ( #8462 )
...
* fix: image verify cache test
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: print err message
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: clear mock
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: defer clear mock
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 14:03:58 +02:00
Charles-Edouard Brétéché
69441c6d0f
chore: add a required job to simplify branch protection ( #8464 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 11:19:35 +00:00
Charles-Edouard Brétéché
4f0e378a34
fix: custom-sigstore conformance job ( #8459 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 09:12:02 +00:00
Charles-Edouard Brétéché
c1978d97a6
fix: use vap map in report aggregation ( #8458 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 08:32:38 +00:00
dependabot[bot]
8ed197cb51
chore(deps): bump fluxcd/flux2 from 2.1.0 to 2.1.1 ( #8457 )
...
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2 ) from 2.1.0 to 2.1.1.
- [Release notes](https://github.com/fluxcd/flux2/releases )
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml )
- [Commits](22cf986a79...026ab61ba7
2023-09-20 07:33:32 +00:00
Charles-Edouard Brétéché
2444b7c670
refactor: add per resource reports aggregation ( #8426 )
...
* refactor: add per resource reports aggregation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* added controller implementation
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* clean
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix kuttl tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix kuttl tests
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* vaps
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-20 14:51:32 +08:00
Vishal Choudhary
b4861015f0
feat: add check for digest mismatch ( #8443 )
...
* feat: add check for digest mismatch
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add unit test
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Mariam Fahmy <mariam.fahmy@nirmata.com>
2023-09-20 05:29:20 +00:00
Charles-Edouard Brétéché
8a9d8f14d0
chore: bump a couple of deps ( #8453 )
...
* fix: use go 1.21 new packages
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* chore: bump a couple of deps
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 16:05:00 +00:00
Charles-Edouard Brétéché
fb90d0935d
fix: use go 1.21 new packages ( #8452 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 12:06:53 +00:00
Charles-Edouard Brétéché
33dbdc9c5b
fix: linter ( #8454 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 11:36:29 +00:00
Charles-Edouard Brétéché
6a43ec4bcf
chore: fix policies ( #8449 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 10:28:58 +00:00
Charles-Edouard Brétéché
f9c85f447d
chore: bump golang to 1.21 ( #8450 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 17:48:11 +08:00
Jim Bugwadia
fb12f7330b
skip other checks if operations do not match ( #8324 )
...
* skip other checks if operations do not match
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* copy resource/rule as match seems to mutate for wildcard checks
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
* fix deepcopy
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-19 08:01:49 +00:00
dependabot[bot]
12d61720b5
chore(deps): bump sigstore/scaffolding ( #8448 )
...
Bumps [sigstore/scaffolding](https://github.com/sigstore/scaffolding ) from 9fb4937ae18ed8456d725e99cb2871d309673022 to b52f64ebe86d2d081b753d7d8549e0b668dcabb7.
- [Release notes](https://github.com/sigstore/scaffolding/releases )
- [Changelog](https://github.com/sigstore/scaffolding/blob/main/release.md )
- [Commits](9fb4937ae1...b52f64ebe8
2023-09-19 07:29:27 +00:00
shuting
ca62b37886
chore: improve log messages ( #8442 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2023-09-19 08:54:40 +02:00
Vishal Choudhary
828807bddb
feat: add a new wrapper logger for debugging ( #8436 )
...
* feat: add a new debug logger
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* fix: duplicate first messages
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add checks in info()
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* add debug logger to notary package
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update info func
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add error func
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update wrapper to use right fmt functions
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* fix: use sprintln not sprint
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: remove V(4)
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* refactor: removed common code
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* Update pkg/notary/log.go
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* Update pkg/notary/log.go
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* Update pkg/notary/log.go
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* fix: update names
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* Update pkg/notary/log.go
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add verbosity levels
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* Update pkg/notary/log.go
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* fix: lint
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: use errors new
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-18 19:47:59 +00:00
Vishal Choudhary
b6c959bfac
style: improve descriptions in notary verifier ( #8444 )
...
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
2023-09-18 18:09:48 +00:00
Charles-Edouard Brétéché
427806f061
chore: embed cli schemas in cli ( #8439 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-18 13:55:44 +00:00
Vishal Choudhary
e2469415b7
feat: add support for custom sigstore using TUF ( #8385 )
...
* feat; add support for custom sigstore using TUF
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add kuttl test
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add commit hash
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add kyverno.yaml
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update kyverno deployment
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update ordering
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update deployment
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update create image step
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: remove wait step
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: install crane
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: set sha on install crane
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add cosign installer
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update custom deployment
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: helm chart linting
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update Chart.yaml
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* fix: helm values liniting error
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: remove step
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: kind-deploy-kyverno
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: create configmap in kyverno namespace
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update policy
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: create kyverno ns
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: use envfrom
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* fix: indentation
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update tuf root
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add sigstore volume
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: nit
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: remove tuf root
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: use default tuf instead :(
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update Create kind cluster
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: remove root
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update impl
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: nit
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: use custom test
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: remove force
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: cosign initialize
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add yes flag
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* update manifest
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: move tuf to features
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: update comments
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* chore: helmchart generate
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: trailing white space
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: remove old fields
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: decouple env config map from tuf
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* change the way we pass flags
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix: re add envConfigMap
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* fix env vars
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* remove envConfigMap
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* fix
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-18 13:16:08 +00:00
Charles-Edouard Brétéché
382754c055
feat: fix variables used in tests ( #8438 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-18 12:32:04 +00:00
dependabot[bot]
2b583b1a86
chore(deps): bump github.com/opencontainers/image-spec ( #8434 )
...
Bumps [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec ) from 1.1.0-rc4 to 1.1.0-rc5.
- [Release notes](https://github.com/opencontainers/image-spec/releases )
- [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md )
- [Commits](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc4...v1.1.0-rc5 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/image-spec
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 11:27:23 +00:00
Charles-Edouard Brétéché
2e4bf7ee83
feat: fix user infos used in tests ( #8429 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-18 10:51:35 +00:00
dependabot[bot]
bb1764543e
chore(deps): bump sigs.k8s.io/controller-runtime from 0.16.1 to 0.16.2 ( #8433 )
...
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime ) from 0.16.1 to 0.16.2.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases )
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.16.1...v0.16.2 )
---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 10:05:18 +00:00
dependabot[bot]
d06f50ced9
chore(deps): bump k8s.io/cli-runtime from 0.28.1 to 0.28.2 ( #8432 )
...
Bumps [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime ) from 0.28.1 to 0.28.2.
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.28.1...v0.28.2 )
---
updated-dependencies:
- dependency-name: k8s.io/cli-runtime
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 08:40:26 +00:00
Vishal Choudhary
fec2992e3f
fix: address vulnerability issues in notary implementations ( #8428 )
...
* fix: set max limit on referrers count
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add limit to max size of payload
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add max count limit on listsignatures
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
* feat: add max signature size limit in FetchSignatureBlob
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
---------
Signed-off-by: Vishal Choudhary <sendtovishalchoudhary@gmail.com>
Co-authored-by: shuting <shuting@nirmata.com>
2023-09-18 15:02:31 +08:00
Jim Bugwadia
cef9a7a3d0
fix excessive logs ( #8431 )
...
Signed-off-by: Jim Bugwadia <jim@nirmata.com>
2023-09-18 10:19:06 +05:30
Charles-Edouard Brétéché
7562bea6db
chore: apply policy fixes ( #8427 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-17 22:24:26 +00:00
Charles-Edouard Brétéché
3a61f2c6b7
fix: add missing omitempty tag ( #8430 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2023-09-17 21:51:51 +00:00
