docker/actions-toolkit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,632 Commits 1 Branch 131 Tags
e05a413e8a42a1687a30aceb79c4e4c5fb65befc
Commit Graph

1632 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
CrazyMax
e05a413e8a ci: update crazy-max/.github/.github/workflows/releases-json to 2842b80 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-12 10:23:32 +01:00
CrazyMax
fc1b7fac4b Merge pull request #845 from crazy-max/buildkit-0.25.2 
update buildkit to 0.25.2
 2025-11-05 13:58:11 +01:00
CrazyMax
af0095404d update buildkit to 0.25.2 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-05 13:15:42 +01:00
CrazyMax
7ee633887d Merge pull request #844 from docker/dependabot/npm_and_yarn/sigstore/sign-4.0.1
Some checks failed
publish / publish (push) Has been cancelled
Details 
build(deps): bump @sigstore/sign from 3.1.0 to 4.0.1
v0.67.0 		2025-11-05 12:31:11 +01:00
dependabot[bot]
9c7140767c build(deps): bump @sigstore/sign from 3.1.0 to 4.0.1 
Bumps [@sigstore/sign](https://github.com/sigstore/sigstore-js) from 3.1.0 to 4.0.1.
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/sign@3.1.0...@sigstore/sign@4.0.1)

---
updated-dependencies:
- dependency-name: "@sigstore/sign"
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-05 11:16:10 +00:00
CrazyMax
7cb0fac5c0 Merge pull request #840 from docker/dependabot/npm_and_yarn/sigstore/bundle-4.0.0 
build(deps): bump @sigstore/bundle from 3.1.0 to 4.0.0
 2025-11-05 12:13:25 +01:00
dependabot[bot]
9b9d27dc4c build(deps): bump @sigstore/bundle from 3.1.0 to 4.0.0 
Bumps [@sigstore/bundle](https://github.com/sigstore/sigstore-js) from 3.1.0 to 4.0.0.
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/bundle@3.1.0...@sigstore/bundle@4.0.0)

---
updated-dependencies:
- dependency-name: "@sigstore/bundle"
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-05 10:45:32 +00:00
CrazyMax
a84516d0dd Merge pull request #843 from crazy-max/rm-actions-attest 
sigstore: remove @actions/attest dependency
 2025-11-05 11:43:19 +01:00
CrazyMax
85dfc7a573 sigstore: remove @actions/attest dependency 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-05 11:11:57 +01:00
CrazyMax
5c04d3904d Merge pull request #842 from crazy-max/cache-failsafe 
cache: gracefully handle cache restore failures with warning
 2025-11-05 10:27:59 +01:00
CrazyMax
d8def31251 cache: gracefully handle cache restore failures with warning 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-05 10:02:21 +01:00
CrazyMax
7ab28f9678 Merge pull request #841 from crazy-max/sigstore-multi-images
Some checks failed
publish / publish (push) Has been cancelled
Details 
sigstore: multi image names support for signing
v0.66.0 		2025-11-04 14:03:26 +01:00
CrazyMax
6bd8db31fe sigstore: multi image names support for signing 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-04 13:36:03 +01:00
CrazyMax
b449e6efd0 Merge pull request #836 from docker/dependabot/npm_and_yarn/npm_and_yarn-a40929283c 
build(deps): bump the npm_and_yarn group across 1 directory with 2 updates
 2025-11-03 23:03:40 +01:00
dependabot[bot]
764b218deb build(deps): bump the npm_and_yarn group across 1 directory with 2 updates 
Bumps the npm_and_yarn group with 2 updates in the / directory: [@octokit/request-error](https://github.com/octokit/request-error.js) and [@octokit/request](https://github.com/octokit/request.js).


Updates `@octokit/request-error` from 5.0.0 to 5.1.1
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](https://github.com/octokit/request-error.js/compare/v5.0.0...v5.1.1)

Updates `@octokit/request` from 8.1.1 to 8.4.1
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](https://github.com/octokit/request.js/compare/v8.1.1...v8.4.1)

---
updated-dependencies:
- dependency-name: "@octokit/request-error"
  dependency-version: 5.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request"
  dependency-version: 8.4.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-03 16:45:09 +00:00
CrazyMax
f592739bbc Merge pull request #838 from crazy-max/fix-toolkit-class
Some checks failed
publish / publish (push) Has been cancelled
Details 
toolkit: add missing classes
v0.65.0 		2025-11-03 12:34:58 +01:00
CrazyMax
dd7595981f Merge pull request #839 from crazy-max/lima-timeout-env 
docker(install): LIMA_START_TIMEOUT env var
 2025-11-03 12:34:39 +01:00
CrazyMax
8ba2bc9036 docker(install): LIMA_START_TIMEOUT env var 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-03 12:29:57 +01:00
CrazyMax
18535e8207 toolkit: add missing classes 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-03 12:27:34 +01:00
CrazyMax
8032ed96f6 Merge pull request #837 from crazy-max/lima-dns 
docker(install): don't use local system resolver with lima and increase timeouts
 2025-11-03 12:10:21 +01:00
CrazyMax
efa21ec9ac Merge pull request #830 from crazy-max/signing-manifest 
sigstore: sign and verify BuildKit attestation manifests
 2025-11-03 11:42:27 +01:00
CrazyMax
3588cc8ad4 docker(install): increase lima start timeout 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-03 11:39:42 +01:00
CrazyMax
bbd652b087 docker(install): increase dockerd startup timeout 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-03 11:39:31 +01:00
CrazyMax
e85f11c5bd docker(install): don't use local system resolver with lima 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-03 11:09:16 +01:00
CrazyMax
5d9b7822a6 sigstore: sign and verify BuildKit attestation manifests 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-03 09:35:07 +01:00
CrazyMax
b4f8e5f0f9 Merge pull request #820 from crazy-max/signing 
sigstore class to sign and verify buildkit provenance blobs
 2025-11-03 09:34:37 +01:00
CrazyMax
3ed33f61c4 Merge pull request #835 from docker/bot/docker-releases-json 
Update `.github/docker-releases.json`
 2025-11-02 01:58:56 +01:00
crazy-max
a61e8fdb65 github: update .github/docker-releases.json 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-11-01 00:35:16 +00:00
CrazyMax
364d8e8cda sigstore: verifySignedArtifacts func 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-30 15:52:34 +01:00
CrazyMax
1c0dc52a0e sigstore: always set TSA server endpoint to provide trusted timestamping 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-30 15:52:34 +01:00
CrazyMax
36cc95143c sigstore class to sign buildkit provenance blobs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-30 15:52:33 +01:00
CrazyMax
24b234cb06 Merge pull request #823 from crazy-max/buildx-attestations-digest 
buildx(imagetools): return attestations digests
 2025-10-30 15:52:12 +01:00
CrazyMax
b2a04264d7 Merge pull request #829 from docker/bot/compose-releases-json 
Update `.github/compose-releases.json`
 2025-10-30 13:20:56 +01:00
crazy-max
019e7ff457 github: update .github/compose-releases.json 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-10-30 12:10:27 +00:00
CrazyMax
0ea9d89ee1 Merge pull request #828 from crazy-max/cosign-skip-state 
cosign(install): skipState opt to directly upload to GHA cache
 2025-10-30 13:09:52 +01:00
CrazyMax
1764424b68 cosign(install): skipState opt to directly upload to GHA cache 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-30 12:17:33 +01:00
CrazyMax
dfe6c8d9e5 Merge pull request #827 from crazy-max/cosign-version 
cosign version
 2025-10-30 09:56:24 +01:00
CrazyMax
0f9a1c9368 cosign version 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-29 18:24:42 +01:00
CrazyMax
6b0ff671bc Merge pull request #826 from crazy-max/cosign-install 
cosign install
 2025-10-29 18:24:27 +01:00
CrazyMax
5b8fb95ca3 cosign install 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-29 16:18:29 +01:00
CrazyMax
9ada6fdf12 Merge pull request #825 from docker/bot/cosign-releases-json 
Update `.github/cosign-releases.json`
 2025-10-29 14:46:33 +01:00
crazy-max
b0b427d52f github: update .github/cosign-releases.json 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-10-29 13:46:15 +00:00
CrazyMax
0a93f2f5be Merge pull request #824 from crazy-max/cosign-releases-json 
ci: cosign releases json workflow
 2025-10-29 14:45:48 +01:00
CrazyMax
1de1c446bf ci: cosign releases json workflow 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-29 14:44:20 +01:00
CrazyMax
16d264a310 Merge pull request #821 from crazy-max/update-lima-images 
docker(install): update lima images
 2025-10-29 13:31:59 +01:00
CrazyMax
1dc98594b3 Merge pull request #819 from crazy-max/install-cdn-token 
use github token to fetch releases JSON from CDN if available
 2025-10-29 11:07:18 +01:00
CrazyMax
e436a08992 docker(install): update lima images 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-29 10:39:38 +01:00
CrazyMax
75cde1582a Merge pull request #822 from crazy-max/ci-macos-15-intel 
ci(test): update to macos-15-intel
 2025-10-28 13:40:24 +01:00
CrazyMax
2bef6ba8d9 ci(test): update to macos-15-intel 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-28 12:31:25 +01:00
CrazyMax
437b1870cc buildx(imagetools): return attestations digests 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-28 11:35:08 +01:00