Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

enable sbom generation when releasing #1261

Merged
merged 1 commit into from
Dec 30, 2021
Merged

Conversation

cpanato
Copy link
Member

@cpanato cpanato commented Dec 30, 2021

Summary

  • add the sbom for the binaries as part of the release process
  • fix the tuf db when validating the builder image

rehearsal release: /~https://github.com/cpanato/cosign/releases/tag/v99.99.04

Ticket Link

n/a

Release Note

enable sbom generation when releasing

Signed-off-by: Carlos Panato <ctadeu@gmail.com>
@dlorenc dlorenc merged commit 8194edd into sigstore:main Dec 30, 2021
@github-actions github-actions bot added this to the v1.5.0 milestone Dec 30, 2021
@cpanato cpanato deleted the sbom-release branch January 1, 2022 11:40
bmwiedemann pushed a commit to bmwiedemann/openSUSE that referenced this pull request Jan 25, 2022
https://build.opensuse.org/request/show/949015
by user msmeissn + dimstar_suse
- updated to 1.5.0
  ## Highlights
  * enable sbom generation when releasing (sigstore/cosign#1261)
  * feat: log error to stderr (sigstore/cosign#1260)
  * feat: support attach attestation (sigstore/cosign#1253)
  * feat: resolve --cert from URL (sigstore/cosign#1245)
  * feat: generate/upload sbom for cosign projects (sigstore/cosign#1237)
  * feat: vuln attest support (sigstore/cosign#1168)
  * feat: add ambient credential detection with spiffe/spire (sigstore/cosign#1220)
  * feat: generate/upload sbom for cosign projects (sigstore/cosign#1236)
  * feat: implement cosign download attestation (https
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants