-
Notifications
You must be signed in to change notification settings - Fork 37
Comparing changes
Open a pull request
base repository: sigstore/sigstore-go
base: v1.1.0
head repository: sigstore/sigstore-go
compare: v1.1.1
- 5 commits
- 14 files changed
- 4 contributors
Commits on Jul 29, 2025
-
Make conformance compatible with rekor v2 (#505)
Bundles with entries from rekor v2 will not have inclusion promises or integrated time Signed-off-by: Appu Goundan <appu@google.com>
Configuration menu - View commit details
-
Copy full SHA for f8877fc - Browse repository at this point
Copy the full SHA f8877fcView commit details -
Update GetSigningConfig to use signing_config.v0.2.json (#506)
Signed-off-by: Facundo Tuesca <facundo.tuesca@trailofbits.com>
Configuration menu - View commit details
-
Copy full SHA for 3bd742e - Browse repository at this point
Copy the full SHA 3bd742eView commit details
Commits on Aug 1, 2025
-
Refactor SelectService to return Service rather than URL, add support…
…ed API versions (#503) Each signing service implementation sets a global variable for the list of URLs supported. This avoids clients that use the signing APIs needing to know which set of service API versions are supported when selecting services. This also refactors ServiceService(s) to return the Service struct itself rather than just a URL, since a signer will need to know the API version when initializing its client, like for Rekor. Also removed unnecessary nolints after un-deprecating TrustedRoot's LogId. Signed-off-by: Hayden B <8418760+haydentherapper@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 37e45ae - Browse repository at this point
Copy the full SHA 37e45aeView commit details
Commits on Aug 4, 2025
-
Remove noisy log message (#507)
When initializing trusted material in Cosign, on every signing and verification that uses the new bundle format, this message would print. Removing it since it doesn't provide much value. Signed-off-by: Hayden <haydentherapper@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for d20c39f - Browse repository at this point
Copy the full SHA d20c39fView commit details
Commits on Aug 5, 2025
-
Bump the minor-patch group across 2 directories with 2 updates (#508)
Bumps the minor-patch group with 2 updates in the / directory: [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) and [github.com/sigstore/rekor](https://github.com/sigstore/rekor). Bumps the minor-patch group with 2 updates in the /examples/oci-image-verification directory: [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib) and [github.com/sigstore/rekor](https://github.com/sigstore/rekor). Updates `github.com/secure-systems-lab/go-securesystemslib` from 0.9.0 to 0.9.1 - [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases) - [Commits](secure-systems-lab/go-securesystemslib@v0.9.0...v0.9.1) Updates `github.com/sigstore/rekor` from 1.3.10 to 1.4.0 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.3.10...v1.4.0) Updates `github.com/secure-systems-lab/go-securesystemslib` from 0.9.0 to 0.9.1 - [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases) - [Commits](secure-systems-lab/go-securesystemslib@v0.9.0...v0.9.1) Updates `github.com/sigstore/rekor` from 1.3.10 to 1.4.0 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.3.10...v1.4.0) --- updated-dependencies: - dependency-name: github.com/secure-systems-lab/go-securesystemslib dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/sigstore/rekor dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/secure-systems-lab/go-securesystemslib dependency-version: 0.9.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/sigstore/rekor dependency-version: 1.4.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for d9ac070 - Browse repository at this point
Copy the full SHA d9ac070View commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v1.1.0...v1.1.1