Skip to content

Actions: sigstore/cosign

Actions

Dependency Review

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
depsreview.yml
1,380 workflow runs
1,380 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

chore(deps): bump github.com/go-piv/piv-go from 1.11.0 to 2.0.0+incompatible Dependency Review #3641: Pull request #3849 synchronize by bobcallaway
October 3, 2024 15:39 16s dependabot/go_modules/github.com/go-piv/piv-go-2.0.0incompatible
dependabot/go_modules/github.com/go-piv/piv-go-2.0.0incompatible
October 3, 2024 15:39 16s
chore(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.0.0 to 2.0.1 Dependency Review #3640: Pull request #3895 opened by dependabot bot
October 1, 2024 18:16 22s dependabot/go_modules/github.com/theupdateframework/go-tuf/v2-2.0.1
dependabot/go_modules/github.com/theupdateframework/go-tuf/v2-2.0.1
October 1, 2024 18:16 22s
Add support for GitLab group variables Dependency Review #3639: Pull request #3894 synchronize by robertohueso
October 1, 2024 17:43 19s robertohueso:gitlab-group-variables
robertohueso:gitlab-group-variables
October 1, 2024 17:43 19s
chore(deps): bump actions/checkout from 4.1.7 to 4.2.0 in the actions group Dependency Review #3637: Pull request #3893 opened by dependabot bot
September 30, 2024 16:18 20s dependabot/github_actions/actions-aa3137d618
dependabot/github_actions/actions-aa3137d618
September 30, 2024 16:18 20s
chore(deps): bump the gomod group across 1 directory with 8 updates Dependency Review #3636: Pull request #3892 opened by dependabot bot
September 30, 2024 16:08 20s dependabot/go_modules/gomod-987eb4f1fe
dependabot/go_modules/gomod-987eb4f1fe
September 30, 2024 16:08 20s
remove previously deprecated attach/download sbom commands Dependency Review #3635: Pull request #3891 synchronize by hectorj2f
September 27, 2024 15:33 21s hectorj2f:remove_deprecated_attach_sbom
hectorj2f:remove_deprecated_attach_sbom
September 27, 2024 15:33 21s
remove previously deprecated attach/download sbom commands Dependency Review #3634: Pull request #3891 opened by hectorj2f
September 27, 2024 15:23 19s hectorj2f:remove_deprecated_attach_sbom
hectorj2f:remove_deprecated_attach_sbom
September 27, 2024 15:23 19s
Add trusted-root create helper command Dependency Review #3633: Pull request #3876 synchronize by steiza
September 26, 2024 20:15 23s steiza:trusted-root-helper
steiza:trusted-root-helper
September 26, 2024 20:15 23s
Add support for new bundle specification in cosign verify-attestation Dependency Review #3632: Pull request #3889 opened by codysoyland
September 25, 2024 19:31 17s codysoyland:verify-attestation-bundle-spec
codysoyland:verify-attestation-bundle-spec
September 25, 2024 19:31 17s
Add support for new bundle specification in cosign attest Dependency Review #3631: Pull request #3888 opened by codysoyland
September 25, 2024 15:56 21s codysoyland:cosign-attest-bundle-spec
codysoyland:cosign-attest-bundle-spec
September 25, 2024 15:56 21s
bump scaffolding release to v0.7.11 Dependency Review #3630: Pull request #3887 opened by bobcallaway
September 24, 2024 20:48 29s bobcallaway:bump_scaf_release
bobcallaway:bump_scaf_release
September 24, 2024 20:48 29s
Upgrade to TUF v2 client Dependency Review #3629: Pull request #3844 synchronize by cmurphy
September 24, 2024 20:32 13s cmurphy:upgrade-tuf
cmurphy:upgrade-tuf
September 24, 2024 20:32 13s
Upgrade to TUF v2 client Dependency Review #3628: Pull request #3844 synchronize by cmurphy
September 24, 2024 20:31 17s cmurphy:upgrade-tuf
cmurphy:upgrade-tuf
September 24, 2024 20:31 17s
Support trusted root in cosign verification Dependency Review #3627: Pull request #3854 synchronize by steiza
September 24, 2024 14:44 18s steiza:trusted-root-verify-all
steiza:trusted-root-verify-all
September 24, 2024 14:44 18s
Support trusted root in cosign verification Dependency Review #3626: Pull request #3854 synchronize by steiza
September 23, 2024 20:41 21s steiza:trusted-root-verify-all
steiza:trusted-root-verify-all
September 23, 2024 20:41 21s
Support trusted root in cosign verification Dependency Review #3625: Pull request #3854 synchronize by steiza
September 23, 2024 20:17 18s steiza:trusted-root-verify-all
steiza:trusted-root-verify-all
September 23, 2024 20:17 18s
chore(deps): bump the gomod group across 1 directory with 7 updates Dependency Review #3624: Pull request #3882 synchronize by dependabot bot
September 23, 2024 16:09 22s dependabot/go_modules/gomod-3b1f9d5558
dependabot/go_modules/gomod-3b1f9d5558
September 23, 2024 16:09 22s
Upgrade to TUF v2 client Dependency Review #3623: Pull request #3844 synchronize by cmurphy
September 20, 2024 18:33 17s cmurphy:upgrade-tuf
cmurphy:upgrade-tuf
September 20, 2024 18:33 17s
Upgrade to TUF v2 client Dependency Review #3622: Pull request #3844 synchronize by cmurphy
September 20, 2024 00:14 16s cmurphy:upgrade-tuf
cmurphy:upgrade-tuf
September 20, 2024 00:14 16s
Update README.md to fix links Dependency Review #3621: Pull request #3886 opened by hkadakia
September 19, 2024 20:50 19s hkadakia:patch-1
hkadakia:patch-1
September 19, 2024 20:50 19s
Fix bug in attest-blob when using a timestamp authority with new bundles Dependency Review #3620: Pull request #3877 synchronize by steiza
September 18, 2024 17:59 16s steiza:fix-attest-blob-timestamp
steiza:fix-attest-blob-timestamp
September 18, 2024 17:59 16s
Fix documentation link for installation guide on README file Dependency Review #3619: Pull request #3884 synchronize by sota1235
September 17, 2024 12:45 17s sota1235:feat-fix-doc-link
sota1235:feat-fix-doc-link
September 17, 2024 12:45 17s
Upgrade to TUF v2 client Dependency Review #3617: Pull request #3844 synchronize by cmurphy
September 16, 2024 18:23 24s cmurphy:upgrade-tuf
cmurphy:upgrade-tuf
September 16, 2024 18:23 24s
chore(deps): bump the gomod group across 1 directory with 7 updates Dependency Review #3616: Pull request #3882 opened by dependabot bot
September 16, 2024 16:48 17s dependabot/go_modules/gomod-3b1f9d5558
dependabot/go_modules/gomod-3b1f9d5558
September 16, 2024 16:48 17s
Ignore stage names in dockerfile verify Dependency Review #3615: Pull request #3881 opened by slmsbrhgn
September 15, 2024 17:56 20s slmsbrhgn:fix-dockerfile-verify-stage
slmsbrhgn:fix-dockerfile-verify-stage
September 15, 2024 17:56 20s