56950ece69
inspect: lazily load attestation data
...
Delay loading the attestation data immediately, and only compute it upon
request. We do this using a deferred function which allows to define the
computation in the same place as before, but perform the computation
later.
With this patch, we ensure that the attestation data is only pulled from
the remote if it is actually referenced in the format string -
otherwise, we can skip it, for improved performance.
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
1d2ac78443
inspect: move attestation loading to struct methods
...
This refactor ensures that the attestations are not output in the JSON
output for "{{ json . }}", and additionally allows future refactors to
dynamically load the attestation contents, ensuring faster performance
when attestations are not used in the output.
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
8b7aa1a168
build: create error group per opt
...
Using the syncronization primitive, we can avoid needing to create a
separate wait group.
This allows us to sidestep the issue where the wait group could be
completed, but the build invocation functions had not terminated - if
one of the functions was to terminate with an error, then it was
possible to encounter a race condition, where the result handling code
would begin executing, despite an error.
The refactor to use a separate error group which more elegantly handles
the concept of function returns and errors, ensures that we can't
encounter this issue.
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
1180d919f5
build: reorder error group funcs
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
347417ee12
build: use copy for BuildWithResultHandler loop vars
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
fb27e3f919
Merge pull request #1502 from developer-guy/fix/readme
...
fix the directory of the buildx binary
3 years ago
edb16f8aab
fix the directory of the buildx binary
...
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
3 years ago
5c56e947fe
Merge pull request #1500 from tonistiigi/update-buildkit-v0.11.0
...
github: update CI to buildkit v0.11
3 years ago
571871b084
github: update CI to buildkit v0.11
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
8340c40647
Merge pull request #1498 from jedevc/attestation-printing
...
Improved attestation inspect
3 years ago
9818055b0e
docs: update with new inspect output
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
484823c97d
inspect: change additional spdxs to not have duplicates
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
3ce17b01dc
inspect: provide access to multiple spdx documents
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
e68c566c1c
inspect: parse sbom and provenance into json structs
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
19d16aa941
inspect: break after first matching attestation
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
6852713121
Merge pull request #1494 from thaJeztah/docs_update_docs_tools
...
go.mod: update cli-docs-tool v0.5.1
3 years ago
c97500b117
go.mod: update cli-docs-tool v0.5.1 and re-generate docs
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
3 years ago
85040a9067
Merge pull request #1493 from thaJeztah/docs_fix_anchors
...
docs: update anchor links
3 years ago
b8285c17e6
docs: update anchor links
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
3 years ago
332dfb4b92
Merge pull request #1444 from crazy-max/inspect-attest
...
imagetools inspect: handle provenance and sboms
3 years ago
cb279bb14b
Merge pull request #1491 from jedevc/ociindex-refactor
...
vendor: update buildkit to v0.11.0-rc4
3 years ago
60c9cf74ce
vendor: update buildkit to v0.11.0-rc4
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
ff6754eb04
Merge pull request #1456 from jedevc/oci-layout-reference-parsing
...
build: refactor reference parsing for oci image layouts
3 years ago
e6b9aba997
imagetools inspect: handle provenance and sbom
...
use stub structs for SLSA/SBOM while waiting for
go-imageinspect library to be public.
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
0302894bfb
Merge pull request #1463 from crazy-max/e2e-k3s
...
e2e: use native k3s installation script
3 years ago
e46394c3be
e2e: use native k3s installation script
...
debianmaster/actions-k3s action gives some warnings in our e2e
workflow. This commit brings https://github.com/debianmaster/actions-k3s/blob/master/index.js
directly in the workflow through actions/github-script with
some changes to properly wait for nodes to be up.
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
1885e41789
docs: update oci layout with tag resolution
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
2fb9db994b
imagetools inspect: missing annotations key
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
287aaf1696
Merge pull request #1482 from AkihiroSuda/auto-propagate-source-date-epoch
...
Propagate SOURCE_DATE_EPOCH from the client env
3 years ago
0e6f5a155e
Propagate SOURCE_DATE_EPOCH from the client env
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
3 years ago
88852e2330
Merge pull request #1480 from crazy-max/fix-badge
...
disable buildx experimental in pipeline
3 years ago
6369c50614
disable buildx experimental in pipeline
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
a22d0a35a4
readme: fix status badge
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
c93c02df85
Merge pull request #1479 from jedevc/fixup-git-err-check-order
...
build: check error from toSolveOpt before adding FrontendAttrs
3 years ago
e584c6e1a7
build: check error from toSolveOpt before adding FrontendAttrs
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
64e4c19971
Merge pull request #1477 from crazy-max/git-wsl
...
build: lookup the right git binary on WSL
3 years ago
551b8f6785
git: do not show warnings if project does not use git
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
fbbe1c1b91
Merge pull request #1472 from crazy-max/ci-attest
...
ci: opt-in sbom and provenance
3 years ago
1a85745bf1
github: update buildkit image to v0.11-rc3
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
3 years ago
0d1fea8134
build: warn if git operation fails
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
19417e76e7
build: lookup the right git binary on WSL
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
53d88a79ef
Merge pull request #1475 from jedevc/attest-warn-duplicate
...
buildflags: error on duplicate attest field
3 years ago
4c21b7e680
Merge pull request #1476 from jedevc/dont-filter-attestation-opts
...
build: forward all build opts everywhere
3 years ago
a8f689c223
build: forward all build opts everywhere
...
All build options should be passed everywhere - the frontend and the
backend of buildkit should both be able to see all attestations, as well
as all other opts: e.g. epoch settings, and no-cache.
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
ba8e3f9bc5
ci: generate provenance and sbom for bin image
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
477200d1f9
ci: generate provenance and sbom for release binaries
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
662738a7e5
Merge pull request #1474 from crazy-max/fix-ci
...
ci: fix warnings
3 years ago
f992b77535
buildflags: warn on duplicate attest field
...
Signed-off-by: Justin Chadwell <me@jedevc.com>
3 years ago
21b2f135b5
ci: update to ubuntu 22.04
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
71e6be5d99
ci: fix deprecated set-output syntax
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
3 years ago
Justin Chadwell