docker/actions-toolkit
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,609 Commits 1 Branch 131 Tags
efa21ec9ac78fcb43395410f245467fbb48ce820
Commit Graph

1609 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
CrazyMax
efa21ec9ac Merge pull request #830 from crazy-max/signing-manifest 
sigstore: sign and verify BuildKit attestation manifests
 2025-11-03 11:42:27 +01:00
CrazyMax
5d9b7822a6 sigstore: sign and verify BuildKit attestation manifests 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-11-03 09:35:07 +01:00
CrazyMax
b4f8e5f0f9 Merge pull request #820 from crazy-max/signing 
sigstore class to sign and verify buildkit provenance blobs
 2025-11-03 09:34:37 +01:00
CrazyMax
3ed33f61c4 Merge pull request #835 from docker/bot/docker-releases-json 
Update `.github/docker-releases.json`
 2025-11-02 01:58:56 +01:00
crazy-max
a61e8fdb65 github: update .github/docker-releases.json 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-11-01 00:35:16 +00:00
CrazyMax
364d8e8cda sigstore: verifySignedArtifacts func 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-30 15:52:34 +01:00
CrazyMax
1c0dc52a0e sigstore: always set TSA server endpoint to provide trusted timestamping 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-30 15:52:34 +01:00
CrazyMax
36cc95143c sigstore class to sign buildkit provenance blobs 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-30 15:52:33 +01:00
CrazyMax
24b234cb06 Merge pull request #823 from crazy-max/buildx-attestations-digest 
buildx(imagetools): return attestations digests
 2025-10-30 15:52:12 +01:00
CrazyMax
b2a04264d7 Merge pull request #829 from docker/bot/compose-releases-json 
Update `.github/compose-releases.json`
 2025-10-30 13:20:56 +01:00
crazy-max
019e7ff457 github: update .github/compose-releases.json 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-10-30 12:10:27 +00:00
CrazyMax
0ea9d89ee1 Merge pull request #828 from crazy-max/cosign-skip-state 
cosign(install): skipState opt to directly upload to GHA cache
 2025-10-30 13:09:52 +01:00
CrazyMax
1764424b68 cosign(install): skipState opt to directly upload to GHA cache 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-30 12:17:33 +01:00
CrazyMax
dfe6c8d9e5 Merge pull request #827 from crazy-max/cosign-version 
cosign version
 2025-10-30 09:56:24 +01:00
CrazyMax
0f9a1c9368 cosign version 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-29 18:24:42 +01:00
CrazyMax
6b0ff671bc Merge pull request #826 from crazy-max/cosign-install 
cosign install
 2025-10-29 18:24:27 +01:00
CrazyMax
5b8fb95ca3 cosign install 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-29 16:18:29 +01:00
CrazyMax
9ada6fdf12 Merge pull request #825 from docker/bot/cosign-releases-json 
Update `.github/cosign-releases.json`
 2025-10-29 14:46:33 +01:00
crazy-max
b0b427d52f github: update .github/cosign-releases.json 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-10-29 13:46:15 +00:00
CrazyMax
0a93f2f5be Merge pull request #824 from crazy-max/cosign-releases-json 
ci: cosign releases json workflow
 2025-10-29 14:45:48 +01:00
CrazyMax
1de1c446bf ci: cosign releases json workflow 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-29 14:44:20 +01:00
CrazyMax
16d264a310 Merge pull request #821 from crazy-max/update-lima-images 
docker(install): update lima images
 2025-10-29 13:31:59 +01:00
CrazyMax
1dc98594b3 Merge pull request #819 from crazy-max/install-cdn-token 
use github token to fetch releases JSON from CDN if available
 2025-10-29 11:07:18 +01:00
CrazyMax
e436a08992 docker(install): update lima images 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-29 10:39:38 +01:00
CrazyMax
75cde1582a Merge pull request #822 from crazy-max/ci-macos-15-intel 
ci(test): update to macos-15-intel
 2025-10-28 13:40:24 +01:00
CrazyMax
2bef6ba8d9 ci(test): update to macos-15-intel 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-28 12:31:25 +01:00
CrazyMax
437b1870cc buildx(imagetools): return attestations digests 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-28 11:35:08 +01:00
CrazyMax
2acf5409f8 Merge pull request #817 from docker/dependabot/github_actions/actions/download-artifact-6 
build(deps): bump actions/download-artifact from 5 to 6
 2025-10-28 10:43:19 +01:00
CrazyMax
0d894f0870 Merge pull request #818 from docker/dependabot/npm_and_yarn/actions/artifact-4.0.0 
build(deps): bump @actions/artifact from 2.3.2 to 4.0.0
 2025-10-28 10:30:53 +01:00
CrazyMax
f8d7170ef4 ci: update crazy-max/.github/.github/workflows/releases-json to 34fd436 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-28 09:46:22 +01:00
CrazyMax
d970614050 github: use github token to fetch releases JSON from CDN if available 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-28 09:35:50 +01:00
CrazyMax
503a033f4a github: use github token to download releases with actions/tool-cache if available 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-28 09:35:50 +01:00
CrazyMax
8e64b4303b releases: mutualize releases handling logic and move it to github class 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-28 09:35:50 +01:00
dependabot[bot]
3249537c32 build(deps): bump @actions/artifact from 2.3.2 to 4.0.0 
Bumps [@actions/artifact](https://github.com/actions/toolkit/tree/HEAD/packages/artifact) from 2.3.2 to 4.0.0.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/artifact/RELEASES.md)
- [Commits](https://github.com/actions/toolkit/commits/@actions/cache@4.0.0/packages/artifact)

---
updated-dependencies:
- dependency-name: "@actions/artifact"
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-24 22:07:10 +00:00
dependabot[bot]
dd7082cfe3 build(deps): bump actions/download-artifact from 5 to 6 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-24 22:06:06 +00:00
CrazyMax
5568d95611 Merge pull request #816 from docker/bot/compose-releases-json 
Update `.github/compose-releases.json`
 2025-10-23 09:12:28 +02:00
crazy-max
3c7308e1e3 github: update .github/compose-releases.json 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-10-23 00:34:20 +00:00
CrazyMax
08239d0545 Merge pull request #814 from docker/bot/compose-releases-json 
Update `.github/compose-releases.json`
 2025-10-22 13:22:12 +02:00
crazy-max
660f4c287e github: update .github/compose-releases.json 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-10-18 00:31:51 +00:00
Paweł Gronowski
779136b849 Merge pull request #813 from crazy-max/docker-install-fix-version
Some checks failed
publish / publish (push) Has been cancelled
Details 
docker(install): fix source archive version
v0.64.0 		2025-10-16 12:01:01 +02:00
CrazyMax
0c5ce444d7 docker(install): fix source archive version 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-15 12:38:08 +02:00
CrazyMax
907e9d8118 Merge pull request #812 from docker/bot/docker-releases-json 
Update `.github/docker-releases.json`
 2025-10-15 12:17:46 +02:00
crazy-max
c9db613fce github: update .github/docker-releases.json 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-10-15 10:15:16 +00:00
CrazyMax
73904748dc Merge pull request #811 from crazy-max/moby-releases-json-fix 
ci: fix docker releases json workflow
 2025-10-15 12:14:47 +02:00
CrazyMax
40cb100aa4 ci: fix docker releases json workflow 
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
 2025-10-15 11:13:31 +02:00
CrazyMax
6b7c32c45e Merge pull request #810 from docker/dependabot/github_actions/actions/setup-node-6 
build(deps): bump actions/setup-node from 5 to 6
 2025-10-15 10:21:48 +02:00
dependabot[bot]
e6b5804ee1 build(deps): bump actions/setup-node from 5 to 6 
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-14 22:05:03 +00:00
CrazyMax
f219785672 Merge pull request #739 from docker/dependabot/npm_and_yarn/csv-parse-6.1.0 
build(deps): bump csv-parse from 5.6.0 to 6.1.0
 2025-10-13 16:27:25 +02:00
CrazyMax
87262f28a1 Merge pull request #808 from docker/bot/docker-releases-json 
Update `.github/docker-releases.json`
 2025-10-09 11:04:10 +02:00
crazy-max
dd8f44d9e0 github: update .github/docker-releases.json 
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2025-10-09 00:30:26 +00:00