issues
search
chainguard-dev
/
vex
vexctl is a tool to attest VEX impact statements
Apache License 2.0
44
stars
11
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Bump actions/checkout from 3.3.0 to 3.5.0
#85
dependabot[bot]
opened
1 year ago
1
Bump github.com/google/go-containerregistry from 0.12.1 to 0.14.0
#84
dependabot[bot]
opened
1 year ago
1
Bump actions/checkout from 3.3.0 to 3.4.0
#83
dependabot[bot]
closed
1 year ago
2
Bump actions/setup-go from 3.5.0 to 4.0.0
#82
dependabot[bot]
opened
1 year ago
1
Bump golang.org/x/net from 0.5.0 to 0.7.0
#81
dependabot[bot]
opened
1 year ago
1
Bump sigstore/cosign-installer from 2.8.1 to 3.0.1
#80
dependabot[bot]
opened
1 year ago
1
Bump github.com/sigstore/sigstore from 1.5.1 to 1.6.0
#79
dependabot[bot]
opened
1 year ago
1
Bump github.com/in-toto/in-toto-golang from 0.3.4-0.20220709202702-fa494aaa0add to 0.7.0
#78
dependabot[bot]
opened
1 year ago
1
Bump github.com/sigstore/sigstore from 1.5.1 to 1.5.2
#77
dependabot[bot]
closed
1 year ago
2
Bump github.com/stretchr/testify from 1.8.1 to 1.8.2
#76
dependabot[bot]
opened
1 year ago
1
Bump github.com/secure-systems-lab/go-securesystemslib from 0.4.0 to 0.5.0
#75
dependabot[bot]
opened
1 year ago
1
vexctl show command referenced but not present
#74
brandtkeller
opened
1 year ago
0
Twislock output filter
#73
ducthinh993
opened
1 year ago
0
Bump goreleaser/goreleaser-action from 4.1.0 to 4.2.0
#72
dependabot[bot]
closed
1 year ago
1
Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1
#71
dependabot[bot]
closed
1 year ago
2
Bump github.com/google/go-containerregistry from 0.12.1 to 0.13.0
#70
dependabot[bot]
closed
1 year ago
2
Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0
#69
dependabot[bot]
closed
1 year ago
1
Update `README.md`
#68
picatz
closed
1 year ago
2
Bump github.com/sigstore/sigstore from 1.5.0 to 1.5.1
#67
dependabot[bot]
closed
1 year ago
1
OSV Scanner output filtering
#66
puerco
opened
1 year ago
0
Strip out attestation attachment code
#65
puerco
opened
1 year ago
0
Last changes from jan 9th meeting
#64
puerco
closed
1 year ago
0
Enable json-ld !
#63
puerco
closed
1 year ago
0
Grype output filter
#62
puerco
closed
1 year ago
1
Trivy output filter
#61
puerco
opened
1 year ago
0
Snyk output filter
#60
puerco
opened
1 year ago
0
Add vexctl create subcommand
#59
puerco
closed
1 year ago
0
Small tweaks to conform with spec
#58
luhring
closed
1 year ago
0
Bump actions/checkout from 3.2.0 to 3.3.0
#57
dependabot[bot]
closed
1 year ago
1
Remove format from document metadata
#56
luhring
closed
1 year ago
1
Add and improve doc comments for VEX symbols
#55
luhring
closed
1 year ago
0
Make action statement optional for affected status
#54
luhring
closed
1 year ago
0
Add deeper validation for statements
#53
luhring
closed
1 year ago
0
Support RFC3339 in SOURCE_DATE_EPOCH
#52
puerco
closed
1 year ago
0
Cascade down dates from document
#51
puerco
closed
1 year ago
0
Expose default author and roles
#50
puerco
closed
1 year ago
0
Land document dates to statements on merge
#49
puerco
closed
1 year ago
0
Change dates to pointers
#48
puerco
closed
1 year ago
1
vexctl merge: Combine vex data sources into new doc
#47
puerco
closed
1 year ago
0
Update VEX struct to latest model
#46
puerco
closed
1 year ago
2
Refactor, add timestamp, helper funcs
#45
luhring
closed
1 year ago
0
Update data model and doc comments
#44
luhring
closed
1 year ago
3
Bump goreleaser/goreleaser-action from 3.2.0 to 4.1.0
#43
dependabot[bot]
closed
1 year ago
1
Bump actions/setup-go from 3.4.0 to 3.5.0
#42
dependabot[bot]
closed
1 year ago
1
Bump actions/checkout from 3.1.0 to 3.2.0
#41
dependabot[bot]
closed
1 year ago
1
Bump github.com/sigstore/sigstore from 1.4.6 to 1.5.0
#40
dependabot[bot]
closed
1 year ago
1
Wrap VEX data open errors
#39
puerco
closed
1 year ago
0
Confusion over how to get started..
#38
jnach
closed
1 year ago
11
Bump actions/setup-go from 3.3.1 to 3.4.0
#37
dependabot[bot]
closed
1 year ago
1
Bump github.com/sigstore/sigstore from 1.4.5 to 1.4.6
#36
dependabot[bot]
closed
1 year ago
1
Next