Skip to content

Actions: sigstore/cosign

Actions

Dependency Review

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
depsreview.yml
1,404 workflow runs
1,404 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

update changelog for v2.4.1 Dependency Review #3644: Pull request #3896 opened by bobcallaway
October 3, 2024 16:43 16s bobcallaway:v241-changelog
bobcallaway:v241-changelog
October 3, 2024 16:43 16s
chore(deps): bump github.com/go-piv/piv-go from 1.11.0 to 2.0.0+incompatible Dependency Review #3643: Pull request #3849 synchronize by bobcallaway
October 3, 2024 15:57 18s dependabot/go_modules/github.com/go-piv/piv-go-2.0.0incompatible
dependabot/go_modules/github.com/go-piv/piv-go-2.0.0incompatible
October 3, 2024 15:57 18s
chore(deps): bump github.com/go-piv/piv-go from 1.11.0 to 2.0.0+incompatible Dependency Review #3642: Pull request #3849 synchronize by bobcallaway
October 3, 2024 15:45 21s dependabot/go_modules/github.com/go-piv/piv-go-2.0.0incompatible
dependabot/go_modules/github.com/go-piv/piv-go-2.0.0incompatible
October 3, 2024 15:45 21s
chore(deps): bump github.com/go-piv/piv-go from 1.11.0 to 2.0.0+incompatible Dependency Review #3641: Pull request #3849 synchronize by bobcallaway
October 3, 2024 15:39 16s dependabot/go_modules/github.com/go-piv/piv-go-2.0.0incompatible
dependabot/go_modules/github.com/go-piv/piv-go-2.0.0incompatible
October 3, 2024 15:39 16s
chore(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.0.0 to 2.0.1 Dependency Review #3640: Pull request #3895 opened by dependabot bot
October 1, 2024 18:16 22s dependabot/go_modules/github.com/theupdateframework/go-tuf/v2-2.0.1
dependabot/go_modules/github.com/theupdateframework/go-tuf/v2-2.0.1
October 1, 2024 18:16 22s
Add support for GitLab group variables Dependency Review #3639: Pull request #3894 synchronize by robertohueso
October 1, 2024 17:43 Action required robertohueso:gitlab-group-variables
robertohueso:gitlab-group-variables
October 1, 2024 17:43 Action required
Add support for GitLab group variables Dependency Review #3638: Pull request #3894 opened by robertohueso
October 1, 2024 17:31 Action required robertohueso:gitlab-group-variables
robertohueso:gitlab-group-variables
October 1, 2024 17:31 Action required
chore(deps): bump actions/checkout from 4.1.7 to 4.2.0 in the actions group Dependency Review #3637: Pull request #3893 opened by dependabot bot
September 30, 2024 16:18 20s dependabot/github_actions/actions-aa3137d618
dependabot/github_actions/actions-aa3137d618
September 30, 2024 16:18 20s
chore(deps): bump the gomod group across 1 directory with 8 updates Dependency Review #3636: Pull request #3892 opened by dependabot bot
September 30, 2024 16:08 20s dependabot/go_modules/gomod-987eb4f1fe
dependabot/go_modules/gomod-987eb4f1fe
September 30, 2024 16:08 20s
remove previously deprecated attach/download sbom commands Dependency Review #3635: Pull request #3891 synchronize by hectorj2f
September 27, 2024 15:33 21s hectorj2f:remove_deprecated_attach_sbom
hectorj2f:remove_deprecated_attach_sbom
September 27, 2024 15:33 21s
remove previously deprecated attach/download sbom commands Dependency Review #3634: Pull request #3891 opened by hectorj2f
September 27, 2024 15:23 19s hectorj2f:remove_deprecated_attach_sbom
hectorj2f:remove_deprecated_attach_sbom
September 27, 2024 15:23 19s
Add trusted-root create helper command Dependency Review #3633: Pull request #3876 synchronize by steiza
September 26, 2024 20:15 23s steiza:trusted-root-helper
steiza:trusted-root-helper
September 26, 2024 20:15 23s
Add support for new bundle specification in cosign verify-attestation Dependency Review #3632: Pull request #3889 opened by codysoyland
September 25, 2024 19:31 17s codysoyland:verify-attestation-bundle-spec
codysoyland:verify-attestation-bundle-spec
September 25, 2024 19:31 17s
Add support for new bundle specification in cosign attest Dependency Review #3631: Pull request #3888 opened by codysoyland
September 25, 2024 15:56 21s codysoyland:cosign-attest-bundle-spec
codysoyland:cosign-attest-bundle-spec
September 25, 2024 15:56 21s
bump scaffolding release to v0.7.11 Dependency Review #3630: Pull request #3887 opened by bobcallaway
September 24, 2024 20:48 29s bobcallaway:bump_scaf_release
bobcallaway:bump_scaf_release
September 24, 2024 20:48 29s
Upgrade to TUF v2 client Dependency Review #3629: Pull request #3844 synchronize by cmurphy
September 24, 2024 20:32 13s cmurphy:upgrade-tuf
cmurphy:upgrade-tuf
September 24, 2024 20:32 13s
Upgrade to TUF v2 client Dependency Review #3628: Pull request #3844 synchronize by cmurphy
September 24, 2024 20:31 17s cmurphy:upgrade-tuf
cmurphy:upgrade-tuf
September 24, 2024 20:31 17s
Support trusted root in cosign verification Dependency Review #3627: Pull request #3854 synchronize by steiza
September 24, 2024 14:44 18s steiza:trusted-root-verify-all
steiza:trusted-root-verify-all
September 24, 2024 14:44 18s
Support trusted root in cosign verification Dependency Review #3626: Pull request #3854 synchronize by steiza
September 23, 2024 20:41 21s steiza:trusted-root-verify-all
steiza:trusted-root-verify-all
September 23, 2024 20:41 21s
Support trusted root in cosign verification Dependency Review #3625: Pull request #3854 synchronize by steiza
September 23, 2024 20:17 18s steiza:trusted-root-verify-all
steiza:trusted-root-verify-all
September 23, 2024 20:17 18s
chore(deps): bump the gomod group across 1 directory with 7 updates Dependency Review #3624: Pull request #3882 synchronize by dependabot bot
September 23, 2024 16:09 22s dependabot/go_modules/gomod-3b1f9d5558
dependabot/go_modules/gomod-3b1f9d5558
September 23, 2024 16:09 22s
Upgrade to TUF v2 client Dependency Review #3623: Pull request #3844 synchronize by cmurphy
September 20, 2024 18:33 17s cmurphy:upgrade-tuf
cmurphy:upgrade-tuf
September 20, 2024 18:33 17s
Upgrade to TUF v2 client Dependency Review #3622: Pull request #3844 synchronize by cmurphy
September 20, 2024 00:14 16s cmurphy:upgrade-tuf
cmurphy:upgrade-tuf
September 20, 2024 00:14 16s
Update README.md to fix links Dependency Review #3621: Pull request #3886 opened by hkadakia
September 19, 2024 20:50 19s hkadakia:patch-1
hkadakia:patch-1
September 19, 2024 20:50 19s
Fix bug in attest-blob when using a timestamp authority with new bundles Dependency Review #3620: Pull request #3877 synchronize by steiza
September 18, 2024 17:59 16s steiza:fix-attest-blob-timestamp
steiza:fix-attest-blob-timestamp
September 18, 2024 17:59 16s