shuting
91e6ae14fe
feat: register webhook for ivpol ( #12391 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-12 16:04:11 +05:30
Frank Jogeleit
f59cae97f2
Fix: data access in message expressions ( #12390 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-12 09:32:29 +00:00
dependabot[bot]
978056218a
chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault ( #12388 )
...
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore ) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.9.0...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-12 08:25:03 +00:00
dependabot[bot]
e18f9cf377
chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws ( #12389 )
...
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore ) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.9.0...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-12 08:41:38 +01:00
Charles-Edouard Brétéché
9f70209361
feat: mock list resources in context ( #12380 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-11 17:21:30 +00:00
Aditya Kumar
4dc9296eb1
Minor fixes in Contributing and Development docs ( #12377 )
...
Signed-off-by: Aditya Kumar <aditya.kumar60@infosys.com>
2025-03-11 15:51:12 +00:00
Frank Jogeleit
1a7c581220
fix: providing the http provider in the compiler ( #12379 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-11 15:00:20 +00:00
Charles-Edouard Brétéché
0d43a2d997
feat: make image ref parsing a static function ( #12374 )
...
* feat: make image ref parsing a static function
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* typo
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-11 14:19:36 +00:00
shuting
b5b1287282
chore: improve error handling ( #12376 )
...
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-11 13:52:04 +01:00
dependabot[bot]
aea1ea8c3d
chore(deps): bump fluxcd/flux2 from 2.4.0 to 2.5.1 ( #12359 )
...
Bumps [fluxcd/flux2](https://github.com/fluxcd/flux2 ) from 2.4.0 to 2.5.1.
- [Release notes](https://github.com/fluxcd/flux2/releases )
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml )
- [Commits](5350425cdc...8d5f40dca5
)
---
updated-dependencies:
- dependency-name: fluxcd/flux2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-11 10:57:31 +00:00
dependabot[bot]
248ac53f17
chore(deps): bump github.com/sigstore/sigstore from 1.9.0 to 1.9.1 ( #12370 )
...
Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore ) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.9.0...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-11 10:32:06 +00:00
dependabot[bot]
2274ecbbc7
chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp ( #12371 )
...
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore ) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.9.0...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-11 09:38:52 +00:00
Vishal Choudhary
d812982b2e
feat: webhook handlers for image verification ( #12318 )
...
* feat: webhook support for image verification
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* feat: add validation
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: add tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: tests
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: ci
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: codegen
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: trim prefix
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: only use matched policies
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: conflicts
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
* fix: remove commented code
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
---------
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-03-11 07:38:11 +00:00
dependabot[bot]
a0b1431f41
chore(deps): bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 ( #12347 )
...
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action ) from 6.1.0 to 6.2.1.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases )
- [Commits](9ed2f89a66...90a3faa9d0
)
---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-10 22:24:16 +00:00
dependabot[bot]
4fd4e702ff
chore(deps): bump actions/setup-python from 5.3.0 to 5.4.0 ( #12362 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](0b93645e9f...42375524e2
)
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 21:53:19 +00:00
dependabot[bot]
25c38af5cd
chore(deps): bump actions/cache in /.github/actions/setup-caches ( #12364 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4.2.0 to 4.2.2.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](1bd1e32a3b...d4323d4df1
)
---
updated-dependencies:
- dependency-name: actions/cache
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 21:16:15 +00:00
Charles-Edouard Brétéché
c655ba72c2
fix: use pointer in context config map getter ( #12365 )
2025-03-10 14:31:34 +00:00
dependabot[bot]
456218952b
chore(deps): bump actions/setup-go in /.github/actions/setup-build-env ( #12363 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](3041bf56c9...f111f3307d
)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 13:57:12 +00:00
Charles-Edouard Brétéché
1c3bddf8ca
feat: support mock in CLI for VPs ( #12344 )
...
* feat: support mock in CLI for VPs
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* implement get cm mock
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
* move into cel package
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
---------
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-10 13:28:44 +00:00
dependabot[bot]
0e76c0ed4b
chore(deps): bump sonarsource/sonarcloud-github-action ( #12358 )
...
Bumps [sonarsource/sonarcloud-github-action](https://github.com/sonarsource/sonarcloud-github-action ) from 4.0.0 to 5.0.0.
- [Release notes](https://github.com/sonarsource/sonarcloud-github-action/releases )
- [Commits](02ef91109b...ffc3010689
)
---
updated-dependencies:
- dependency-name: sonarsource/sonarcloud-github-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 12:30:49 +00:00
dependabot[bot]
fc41d23439
chore(deps): bump actions/download-artifact from 4.1.8 to 4.1.9 ( #12360 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.1.8 to 4.1.9.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](fa0a91b85d...cc20338598
)
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 11:51:38 +00:00
dependabot[bot]
92bd61456d
chore(deps): bump actions/download-artifact ( #12361 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.1.8 to 4.1.9.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](fa0a91b85d...cc20338598
)
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 11:28:38 +00:00
dependabot[bot]
b70ff28fd5
chore(deps): bump gomodules.xyz/jsonpatch/v2 from 2.4.0 to 2.5.0 ( #12354 )
...
Bumps [gomodules.xyz/jsonpatch/v2](https://github.com/gomodules/jsonpatch ) from 2.4.0 to 2.5.0.
- [Release notes](https://github.com/gomodules/jsonpatch/releases )
- [Changelog](https://github.com/gomodules/jsonpatch/blob/release-2.0/CHANGELOG.md )
- [Commits](https://github.com/gomodules/jsonpatch/compare/v2.4.0...v2.5.0 )
---
updated-dependencies:
- dependency-name: gomodules.xyz/jsonpatch/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 10:58:42 +00:00
Ambrish R
c2287ecff6
fix: Update copyrights to 2025 ( #12356 )
...
* Update copyrights to 2025
Update copyrights to 2025
Signed-off-by: Ambrish R <ambrish.r@infosys.com>
* fix: Update copyrights to 2025
fix: Update copyrights to 2025
Signed-off-by: Ambrish R <ambrish.r@infosys.com>
---------
Signed-off-by: Ambrish R <ambrish.r@infosys.com>
2025-03-10 10:31:55 +00:00
dependabot[bot]
2668e1a59d
chore(deps): bump slsa-framework/slsa-github-generator ( #12349 )
...
Bumps [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator ) from 2.0.0 to 2.1.0.
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases )
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md )
- [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/v2.0.0...v2.1.0 )
---
updated-dependencies:
- dependency-name: slsa-framework/slsa-github-generator
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 10:05:35 +00:00
dependabot[bot]
73762fc072
chore(deps): bump azure/setup-helm in /.github/actions/run-tests ( #12351 )
...
Bumps [azure/setup-helm](https://github.com/azure/setup-helm ) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/azure/setup-helm/releases )
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md )
- [Commits](fe7b79cd5e...b9e51907a0
)
---
updated-dependencies:
- dependency-name: azure/setup-helm
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 09:09:44 +00:00
dependabot[bot]
d1fa7abb56
chore(deps): bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 ( #12355 )
...
Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime ) from 0.20.2 to 0.20.3.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases )
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.20.2...v0.20.3 )
---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-10 08:16:47 +00:00
dependabot[bot]
1ae2efbd71
chore(deps): bump actions/upload-artifact from 4.5.0 to 4.6.1 ( #12348 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.5.0 to 4.6.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](6f51ac03b9...4cec3d8aa0
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-10 07:52:30 +00:00
dependabot[bot]
93c9cd9671
chore(deps): bump actions/upload-artifact ( #12350 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.5.0 to 4.6.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](6f51ac03b9...4cec3d8aa0
)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-09 20:52:44 +00:00
dependabot[bot]
f202ccd9d0
chore(deps): bump azure/setup-helm from 4.2.0 to 4.3.0 ( #12346 )
...
Bumps [azure/setup-helm](https://github.com/azure/setup-helm ) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/azure/setup-helm/releases )
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md )
- [Commits](fe7b79cd5e...b9e51907a0
)
---
updated-dependencies:
- dependency-name: azure/setup-helm
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-09 19:50:31 +00:00
dependabot[bot]
26fc996681
chore(deps): bump github.com/sigstore/sigstore from 1.8.15 to 1.9.0 ( #12331 )
...
Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore ) from 1.8.15 to 1.9.0.
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.8.15...v1.9.0 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-09 18:58:04 +00:00
Charles-Edouard Brétéché
a9ac540ddc
fix: nits in cel context lib ( #12333 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-09 17:47:11 +00:00
Frank Jogeleit
1ac2dd9fa6
Add CEL context.Lib to the imageverification compiler ( #12337 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-09 17:06:53 +00:00
dependabot[bot]
6a367c840c
chore(deps): bump sigstore/cosign-installer ( #12343 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.7.0 to 3.8.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](dc72c7d5c4...d7d6bc7722
)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-09 12:52:52 +00:00
dependabot[bot]
6b2db90046
chore(deps): bump cbrgm/cleanup-stale-branches-action ( #12342 )
...
Bumps [cbrgm/cleanup-stale-branches-action](https://github.com/cbrgm/cleanup-stale-branches-action ) from 1.1.24 to 1.1.27.
- [Release notes](https://github.com/cbrgm/cleanup-stale-branches-action/releases )
- [Commits](7e6763a2d1...59812bcf2d
)
---
updated-dependencies:
- dependency-name: cbrgm/cleanup-stale-branches-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-09 09:07:48 +00:00
dependabot[bot]
3d7f2897b3
chore(deps): bump github/codeql-action from 3.27.9 to 3.28.11 ( #12341 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.27.9 to 3.28.11.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](df409f7d92...6bb031afdd
)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-09 07:59:55 +00:00
dependabot[bot]
871a8cca41
chore(deps): bump sigstore/cosign-installer from 3.7.0 to 3.8.1 ( #12340 )
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.7.0 to 3.8.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](dc72c7d5c4...d7d6bc7722
)
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-09 00:15:04 +00:00
dependabot[bot]
4029acae03
chore(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions ( #12339 )
...
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions ) from 3.0.17 to 3.0.22.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases )
- [Commits](5d6ac37a4c...25ed13d062
)
---
updated-dependencies:
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-08 23:47:58 +00:00
dependabot[bot]
c10f56e21a
chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault ( #12332 )
...
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore ) from 1.8.15 to 1.9.0.
- [Release notes](https://github.com/sigstore/sigstore/releases )
- [Commits](https://github.com/sigstore/sigstore/compare/v1.8.15...v1.9.0 )
---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-08 15:34:33 +00:00
dependabot[bot]
42606657dc
chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.5.0 ( #12322 )
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 6.1.1 to 6.5.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](971e284b60...2226d7cb06
)
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-07 15:56:53 +00:00
Javier Solana
b00b2c96c8
chore: add dryrun as label ( #11962 )
...
* chore: add dryrun as label
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* check request.Dryrun to avoif SIGSEGV
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* chore: add dryrun
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* chore: add dryrun
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* chore: update doc to add DryRun
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* chore: update to add DryRun
Signed-off-by: Javier Solana <javier.solana@cabify.com>
* chore: update crds
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: Javier Solana <javier.solana@cabify.com>
Signed-off-by: ShutingZhao <shuting@nirmata.com>
Co-authored-by: Javier Solana <javier.solana@cabify.com>
Co-authored-by: shuting <shuting@nirmata.com>
2025-03-07 23:30:22 +08:00
Frank Jogeleit
29849e196f
Add CEL HTTP Lib to the imageverification compiler ( #12335 )
...
Signed-off-by: Frank Jogeleit <frank.jogeleit@web.de>
2025-03-07 13:31:38 +00:00
dependabot[bot]
217511ad5b
chore(deps): bump codecov/codecov-action from 5.1.1 to 5.4.0 ( #12321 )
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5.1.1 to 5.4.0.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](7f8b4b4bde...0565863a31
)
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-07 13:05:32 +00:00
dependabot[bot]
b689885155
chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 ( #12327 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](62b2cac7ed...f49aabe0b5
)
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-07 10:48:55 +00:00
Charles-Edouard Brétéché
c55354d5a1
chore: remove unused code ( #12325 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-07 10:21:49 +00:00
dependabot[bot]
f8441701e3
chore(deps): bump fossas/fossa-action from 1.4.0 to 1.5.0 ( #12328 )
...
Bumps [fossas/fossa-action](https://github.com/fossas/fossa-action ) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/fossas/fossa-action/releases )
- [Commits](09bcf127dc...93a52ecf7c
)
---
updated-dependencies:
- dependency-name: fossas/fossa-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-07 09:33:38 +00:00
dependabot[bot]
1cf7a74158
chore(deps): bump golang.org/x/crypto from 0.35.0 to 0.36.0 ( #12330 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.35.0 to 0.36.0.
- [Commits](https://github.com/golang/crypto/compare/v0.35.0...v0.36.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-07 08:48:20 +00:00
shuting
d7a37924a9
feat: skip applying a VP which is converted to VAP ( #12312 )
...
* feat: skip vpol application if it's converted to vap
Signed-off-by: ShutingZhao <shuting@nirmata.com>
* fix: add missing error checks
Signed-off-by: ShutingZhao <shuting@nirmata.com>
---------
Signed-off-by: ShutingZhao <shuting@nirmata.com>
2025-03-07 08:07:50 +00:00
Vishal Choudhary
4b4e6cc415
feat: add parse image reference function ( #12317 )
...
Signed-off-by: Vishal Choudhary <vishal.choudhary@nirmata.com>
Co-authored-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-07 07:34:08 +00:00
Charles-Edouard Brétéché
43ddc8c31e
feat: support rest mapper in cli with cluster enabled ( #12319 )
...
Signed-off-by: Charles-Edouard Brétéché <charles.edouard@nirmata.com>
2025-03-07 06:58:40 +00:00