Commit Graph

1375 Commits (598f1f0a621692bd4e0b78d5faac998ede43868b)
 

Author SHA1 Message Date
Justin Chadwell 347417ee12 build: use copy for BuildWithResultHandler loop vars
Signed-off-by: Justin Chadwell <me@jedevc.com>
Justin Chadwell fb27e3f919
Merge pull request from developer-guy/fix/readme
fix the directory of the buildx binary
Batuhan Apaydın edb16f8aab
fix the directory of the buildx binary
Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Tõnis Tiigi 5c56e947fe
Merge pull request from tonistiigi/update-buildkit-v0.11.0
github: update CI to buildkit v0.11
Tonis Tiigi 571871b084
github: update CI to buildkit v0.11
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Tõnis Tiigi 8340c40647
Merge pull request from jedevc/attestation-printing
Improved attestation inspect
Justin Chadwell 9818055b0e docs: update with new inspect output
Signed-off-by: Justin Chadwell <me@jedevc.com>
Justin Chadwell 484823c97d inspect: change additional spdxs to not have duplicates
Signed-off-by: Justin Chadwell <me@jedevc.com>
Justin Chadwell 3ce17b01dc inspect: provide access to multiple spdx documents
Signed-off-by: Justin Chadwell <me@jedevc.com>
Justin Chadwell e68c566c1c inspect: parse sbom and provenance into json structs
Signed-off-by: Justin Chadwell <me@jedevc.com>
Justin Chadwell 19d16aa941 inspect: break after first matching attestation
Signed-off-by: Justin Chadwell <me@jedevc.com>
CrazyMax 6852713121
Merge pull request from thaJeztah/docs_update_docs_tools
go.mod: update cli-docs-tool v0.5.1
Sebastiaan van Stijn c97500b117
go.mod: update cli-docs-tool v0.5.1 and re-generate docs
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
CrazyMax 85040a9067
Merge pull request from thaJeztah/docs_fix_anchors
docs: update anchor links
Sebastiaan van Stijn b8285c17e6
docs: update anchor links
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Tõnis Tiigi 332dfb4b92
Merge pull request from crazy-max/inspect-attest
imagetools inspect: handle provenance and sboms
Tõnis Tiigi cb279bb14b
Merge pull request from jedevc/ociindex-refactor
vendor: update buildkit to v0.11.0-rc4
Justin Chadwell 60c9cf74ce
vendor: update buildkit to v0.11.0-rc4
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Signed-off-by: Justin Chadwell <me@jedevc.com>
Tõnis Tiigi ff6754eb04
Merge pull request from jedevc/oci-layout-reference-parsing
build: refactor reference parsing for oci image layouts
CrazyMax e6b9aba997
imagetools inspect: handle provenance and sbom
use stub structs for SLSA/SBOM while waiting for
go-imageinspect library to be public.

Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
CrazyMax 0302894bfb
Merge pull request from crazy-max/e2e-k3s
e2e: use native k3s installation script
CrazyMax e46394c3be
e2e: use native k3s installation script
debianmaster/actions-k3s action gives some warnings in our e2e
workflow. This commit brings https://github.com/debianmaster/actions-k3s/blob/master/index.js
directly in the workflow through actions/github-script with
some changes to properly wait for nodes to be up.

Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
Justin Chadwell 1885e41789 docs: update oci layout with tag resolution
Signed-off-by: Justin Chadwell <me@jedevc.com>
CrazyMax 2fb9db994b
imagetools inspect: missing annotations key
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
Tõnis Tiigi 287aaf1696
Merge pull request from AkihiroSuda/auto-propagate-source-date-epoch
Propagate SOURCE_DATE_EPOCH from the client env
Akihiro Suda 0e6f5a155e
Propagate SOURCE_DATE_EPOCH from the client env
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Tõnis Tiigi 88852e2330
Merge pull request from crazy-max/fix-badge
disable buildx experimental in pipeline
CrazyMax 6369c50614
disable buildx experimental in pipeline
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
CrazyMax a22d0a35a4
readme: fix status badge
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
CrazyMax c93c02df85
Merge pull request from jedevc/fixup-git-err-check-order
build: check error from toSolveOpt before adding FrontendAttrs
Justin Chadwell e584c6e1a7 build: check error from toSolveOpt before adding FrontendAttrs
Signed-off-by: Justin Chadwell <me@jedevc.com>
Tõnis Tiigi 64e4c19971
Merge pull request from crazy-max/git-wsl
build: lookup the right git binary on WSL
Tonis Tiigi 551b8f6785
git: do not show warnings if project does not use git
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Tõnis Tiigi fbbe1c1b91
Merge pull request from crazy-max/ci-attest
ci: opt-in sbom and provenance
Tonis Tiigi 1a85745bf1
github: update buildkit image to v0.11-rc3
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
CrazyMax 0d1fea8134
build: warn if git operation fails
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
CrazyMax 19417e76e7
build: lookup the right git binary on WSL
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
Tõnis Tiigi 53d88a79ef
Merge pull request from jedevc/attest-warn-duplicate
buildflags: error on duplicate attest field
Justin Chadwell 4c21b7e680
Merge pull request from jedevc/dont-filter-attestation-opts
build: forward all build opts everywhere
Justin Chadwell a8f689c223 build: forward all build opts everywhere
All build options should be passed everywhere - the frontend and the
backend of buildkit should both be able to see all attestations, as well
as all other opts: e.g. epoch settings, and no-cache.

Signed-off-by: Justin Chadwell <me@jedevc.com>
CrazyMax ba8e3f9bc5
ci: generate provenance and sbom for bin image
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
CrazyMax 477200d1f9
ci: generate provenance and sbom for release binaries
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
Tõnis Tiigi 662738a7e5
Merge pull request from crazy-max/fix-ci
ci: fix warnings
Justin Chadwell f992b77535 buildflags: warn on duplicate attest field
Signed-off-by: Justin Chadwell <me@jedevc.com>
CrazyMax 21b2f135b5
ci: update to ubuntu 22.04
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
CrazyMax 71e6be5d99
ci: fix deprecated set-output syntax
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
CrazyMax df8e7d0a9a
Merge pull request from crazy-max/fix-docs-prerelease
ci: do not publish docs on prerelease
CrazyMax 64422a48d9
Merge pull request from crazy-max/fix-builder-factory
builder: check endpoint from store when loading factory
CrazyMax 04f9c62772
ci: do not publish docs on prerelease
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>
CrazyMax 2185d07f05
builder: check endpoint from store when loading factory
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com>