Skip to content
This repository has been archived by the owner on Apr 4, 2024. It is now read-only.

Releases: github-early-access/gh-attestation

v0.3.1

01 Apr 20:36
@ejahnGithub ejahnGithub
v0.3.1
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.3.1 Latest
Latest

Bug Fixes

  • Print a more informative error message when the user is not authorized with a container registry
Assets 12
Loading

v0.3.0

06 Feb 18:49
@ejahnGithub ejahnGithub
v0.3.0
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.3.0

Features

  • Remove Rego policy support
  • Standardize json output handling for verify and download commands

Bug Fixes

  • Fix version command formatting bug
  • Fix GitHub REST client initialization error handling
Assets 12
Loading

v0.2.4

29 Jan 16:27
@ejahnGithub ejahnGithub
v0.2.4
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.2.4

Bug Fixes

  • Fix a Codespaces specific bug by disabling the local TUF cache when the tool is used in Codespaces
Assets 12
Loading

v0.2.3

16 Jan 21:03
@ejahnGithub ejahnGithub
v0.2.3
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.2.3

Bug Fixes

  • Removes an incorrect example provided by the download command's --help flag
Assets 12
Loading

v0.2.2

12 Jan 17:24
@ejahnGithub ejahnGithub
v0.2.2
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.2.2

Bug Fixes

  • This release fixes a bug related to downloading attestations for OCI images
Assets 12
Loading

v0.2.1

04 Jan 17:37
@ejahnGithub ejahnGithub
v0.2.1
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.2.1

Bug Fixes

  • This release fixes a bug that caused the tool to sometimes verify OCI images with the incorrect SHA-256 hash
Assets 12
Loading

v0.2.0

28 Nov 21:41
@ejahnGithub ejahnGithub
v0.2.0
b178754
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.2.0

Features

This releases introduces support for verifying and downloading attestations for OCI images. To use this, provide an OCI image FQDN prefixed with oci:// instead of a local file path when specifying the artifact. For example:

gh attestation verify oci://ghcr.io/github/my-image:test --owner=github
Assets 12
Loading

v0.1.17

15 Nov 19:37
@ejahnGithub ejahnGithub
v0.1.17
812c2f8
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.
Compare
Choose a tag to compare
v0.1.17 
Add extended examples for usage / upgrade
Assets 12
Loading

v0.1.16

14 Nov 23:24
@ejahnGithub ejahnGithub
v0.1.16
6f3fe1d
Compare
Choose a tag to compare
v0.1.16 
Add link to CLI

Signed-off-by: Trevor Rosen <[email protected]>
Assets 11
Loading