Skip to content

Actions: sigstore/cosign

Actions

Dependency Review

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
depsreview.yml
1,382 workflow runs
1,382 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

update builder to use go1.21.1 and bump cosign image Dependency Review #2371: Pull request #3227 synchronize by cpanato
September 7, 2023 13:39 17s cpanato:udate-builder
cpanato:udate-builder
September 7, 2023 13:39 17s
update builder to use go1.21.1 and bump cosign image Dependency Review #2370: Pull request #3227 synchronize by cpanato
September 7, 2023 12:26 23s cpanato:udate-builder
cpanato:udate-builder
September 7, 2023 12:26 23s
update builder to use go1.21.1 and bump cosign image Dependency Review #2369: Pull request #3227 opened by cpanato
September 7, 2023 12:26 25s cpanato:udate-builder
cpanato:udate-builder
September 7, 2023 12:26 25s
bump scaffolding to newest v0.6.7 release Dependency Review #2368: Pull request #3226 opened by bobcallaway
September 6, 2023 22:34 24s bobcallaway:bump_scaf_v067
bobcallaway:bump_scaf_v067
September 6, 2023 22:34 24s
attest: pass OCI remote opts to att resolver. Dependency Review #2367: Pull request #3225 synchronize by wlynch
September 6, 2023 21:04 21s wlynch:attest-remoteopts
wlynch:attest-remoteopts
September 6, 2023 21:04 21s
attest: pass OCI remote opts to att resolver. Dependency Review #2366: Pull request #3225 opened by wlynch
September 6, 2023 21:03 24s wlynch:attest-remoteopts
wlynch:attest-remoteopts
September 6, 2023 21:03 24s
Fail timestamp verification if no root is provided Dependency Review #2365: Pull request #3224 synchronize by haydentherapper
September 6, 2023 20:12 17s haydentherapper:fix-ts-verify
haydentherapper:fix-ts-verify
September 6, 2023 20:12 17s
Fail timestamp verification if no root is provided Dependency Review #2364: Pull request #3224 synchronize by haydentherapper
September 6, 2023 19:57 22s haydentherapper:fix-ts-verify
haydentherapper:fix-ts-verify
September 6, 2023 19:57 22s
Fail timestamp verification if no root is provided Dependency Review #2363: Pull request #3224 synchronize by haydentherapper
September 6, 2023 18:37 15s haydentherapper:fix-ts-verify
haydentherapper:fix-ts-verify
September 6, 2023 18:37 15s
Fail timestamp verification if no root is provided Dependency Review #2362: Pull request #3224 opened by haydentherapper
September 6, 2023 18:31 22s haydentherapper:fix-ts-verify
haydentherapper:fix-ts-verify
September 6, 2023 18:31 22s
Add SLSA 1.0 attestation support to cosign. Closes #2860 Dependency Review #2361: Pull request #3219 synchronize by ziel
September 6, 2023 18:21 18s ziel:feat-slsa-1.0
ziel:feat-slsa-1.0
September 6, 2023 18:21 18s
chore(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 Dependency Review #2360: Pull request #3223 opened by dependabot bot
September 6, 2023 16:08 23s dependabot/go_modules/golang.org/x/oauth2-0.12.0
dependabot/go_modules/golang.org/x/oauth2-0.12.0
September 6, 2023 16:08 23s
chore(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0 Dependency Review #2359: Pull request #3220 opened by dependabot bot
September 5, 2023 16:03 24s dependabot/go_modules/golang.org/x/crypto-0.13.0
dependabot/go_modules/golang.org/x/crypto-0.13.0
September 5, 2023 16:03 24s
Add SLSA 1.0 attestation support to cosign. Closes #2860 Dependency Review #2358: Pull request #3219 synchronize by ziel
September 5, 2023 16:00 17s ziel:feat-slsa-1.0
ziel:feat-slsa-1.0
September 5, 2023 16:00 17s
chore(deps): bump golang.org/x/term from 0.11.0 to 0.12.0 Dependency Review #2355: Pull request #3217 opened by dependabot bot
September 4, 2023 16:54 22s dependabot/go_modules/golang.org/x/term-0.12.0
dependabot/go_modules/golang.org/x/term-0.12.0
September 4, 2023 16:54 22s
chore(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.91.1 Dependency Review #2354: Pull request #3216 opened by dependabot bot
September 4, 2023 16:54 22s dependabot/go_modules/github.com/xanzy/go-gitlab-0.91.1
dependabot/go_modules/github.com/xanzy/go-gitlab-0.91.1
September 4, 2023 16:54 22s
chore(deps): bump actions/checkout from 3.6.0 to 4.0.0 Dependency Review #2353: Pull request #3215 opened by dependabot bot
September 4, 2023 16:36 25s dependabot/github_actions/actions/checkout-4.0.0
dependabot/github_actions/actions/checkout-4.0.0
September 4, 2023 16:36 25s
chore(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2 Dependency Review #2352: Pull request #3214 opened by dependabot bot
September 4, 2023 16:36 25s dependabot/github_actions/sigstore/cosign-installer-3.1.2
dependabot/github_actions/sigstore/cosign-installer-3.1.2
September 4, 2023 16:36 25s
chore(deps): bump github.com/sigstore/rekor from 1.2.2 to 1.3.0 Dependency Review #2351: Pull request #3212 synchronize by dependabot bot
September 4, 2023 09:54 26s dependabot/go_modules/github.com/sigstore/rekor-1.3.0
dependabot/go_modules/github.com/sigstore/rekor-1.3.0
September 4, 2023 09:54 26s
chore(deps): bump github.com/sigstore/rekor from 1.2.2 to 1.3.0 Dependency Review #2350: Pull request #3212 synchronize by dependabot bot
September 4, 2023 09:52 17s dependabot/go_modules/github.com/sigstore/rekor-1.3.0
dependabot/go_modules/github.com/sigstore/rekor-1.3.0
September 4, 2023 09:52 17s
chore(deps): bump github.com/sigstore/rekor from 1.2.2 to 1.3.0 Dependency Review #2349: Pull request #3212 synchronize by dependabot bot
September 3, 2023 09:41 20s dependabot/go_modules/github.com/sigstore/rekor-1.3.0
dependabot/go_modules/github.com/sigstore/rekor-1.3.0
September 3, 2023 09:41 20s
chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.7.2 to 1.7.3 Dependency Review #2348: Pull request #3208 synchronize by dependabot bot
September 3, 2023 09:40 20s dependabot/go_modules/github.com/sigstore/sigstore/pkg/signature/kms/hashivault-1.7.3
dependabot/go_modules/github.com/sigstore/sigstore/pkg/signature/kms/hashivault-1.7.3
September 3, 2023 09:40 20s
chore(deps): bump github.com/sigstore/sigstore from 1.7.2 to 1.7.3 Dependency Review #2347: Pull request #3210 synchronize by dependabot bot
September 3, 2023 09:40 18s dependabot/go_modules/github.com/sigstore/sigstore-1.7.3
dependabot/go_modules/github.com/sigstore/sigstore-1.7.3
September 3, 2023 09:40 18s
chore(deps): bump github.com/sigstore/rekor from 1.2.2 to 1.3.0 Dependency Review #2346: Pull request #3212 synchronize by dependabot bot
September 3, 2023 05:45 19s dependabot/go_modules/github.com/sigstore/rekor-1.3.0
dependabot/go_modules/github.com/sigstore/rekor-1.3.0
September 3, 2023 05:45 19s
chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.7.2 to 1.7.3 Dependency Review #2345: Pull request #3208 synchronize by dependabot bot
September 3, 2023 05:44 16s dependabot/go_modules/github.com/sigstore/sigstore/pkg/signature/kms/hashivault-1.7.3
dependabot/go_modules/github.com/sigstore/sigstore/pkg/signature/kms/hashivault-1.7.3
September 3, 2023 05:44 16s
ProTip! You can narrow down the results and go further in time using created:<2023-09-03 or the other filters available.