From c5c61728237f7e48212f37501736efaa8c32c8c5 Mon Sep 17 00:00:00 2001 From: "attest-release[bot]" <176524748+attest-release[bot]@users.noreply.github.com> Date: Wed, 14 Aug 2024 21:57:07 +0000 Subject: [PATCH 1/6] [BOT] Update attest lib (#68) Co-authored-by: attest-release[bot] <176524748+attest-release[bot]@users.noreply.github.com> --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 88c7035..bbd913f 100644 --- a/go.mod +++ b/go.mod @@ -3,7 +3,7 @@ module github.com/docker/attest-provider go 1.22.5 require ( - github.com/docker/attest v0.3.0 + github.com/docker/attest v0.3.1 github.com/google/go-containerregistry v0.20.1 github.com/in-toto/in-toto-golang v0.9.0 github.com/open-policy-agent/frameworks/constraint v0.0.0-20221214024800-b745745c4118 diff --git a/go.sum b/go.sum index 9d8774b..ac4c461 100644 --- a/go.sum +++ b/go.sum @@ -212,8 +212,8 @@ github.com/dimchansky/utfbom v1.1.1 h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi github.com/dimchansky/utfbom v1.1.1/go.mod h1:SxdoEBH5qIqFocHMyGOXVAybYJdr71b1Q/j0mACtrfE= github.com/distribution/reference v0.6.0 h1:0IXCQ5g4/QMHHkarYzh5l+u8T3t73zM5QvfrDyIgxBk= github.com/distribution/reference v0.6.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E= -github.com/docker/attest v0.3.0 h1:rXLcq5QEFeePwFzJjcNZYS1ePhpzXktRIVEn/rvA0co= -github.com/docker/attest v0.3.0/go.mod h1:UuJ+jXWrCep9HDnWocjxD2fgyWisqCZ3kgQSJ+wOJyc= +github.com/docker/attest v0.3.1 h1:cRxXrDPAngWVhhfmTGLOxY+zql4fgyJUVz58bqhAk+k= +github.com/docker/attest v0.3.1/go.mod h1:UuJ+jXWrCep9HDnWocjxD2fgyWisqCZ3kgQSJ+wOJyc= github.com/docker/cli v27.1.1+incompatible h1:goaZxOqs4QKxznZjjBWKONQci/MywhtRv2oNn0GkeZE= github.com/docker/cli v27.1.1+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8= github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk= From 1ecf2c1898a96f82b58dfaf4769e1e184f693e1d Mon Sep 17 00:00:00 2001 From: mrjoelkamp Date: Tue, 20 Aug 2024 10:17:34 -0500 Subject: [PATCH 2/6] feat: add service account to attest deployment --- .../attest-provider/templates/attest-provider-deployment.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/charts/attest-provider/templates/attest-provider-deployment.yaml b/charts/attest-provider/templates/attest-provider-deployment.yaml index 7a74fc6..ddad379 100644 --- a/charts/attest-provider/templates/attest-provider-deployment.yaml +++ b/charts/attest-provider/templates/attest-provider-deployment.yaml @@ -15,6 +15,9 @@ spec: app: '{{ template "attest-provider.name" . }}' chart: '{{ template "attest-provider.name" . }}' spec: + {{- if .Values.serviceAccountName }} + serviceAccountName: {{ .Values.serviceAccountName }} + {{- end }} containers: - image: {{ .Values.image }} imagePullPolicy: IfNotPresent From f2196e3c9a0ea753436648ca0f95efb59d413375 Mon Sep 17 00:00:00 2001 From: mrjoelkamp Date: Tue, 20 Aug 2024 10:18:14 -0500 Subject: [PATCH 3/6] chore: rev chart version --- charts/attest-provider/Chart.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/charts/attest-provider/Chart.yaml b/charts/attest-provider/Chart.yaml index b148b0f..994e631 100644 --- a/charts/attest-provider/Chart.yaml +++ b/charts/attest-provider/Chart.yaml @@ -1,8 +1,8 @@ apiVersion: v2 description: A Helm chart for attest external data provider name: attest-provider -version: 0.0.8 +version: 0.0.9 home: https://github.com/docker/attest-provider sources: - https://github.com/docker/attest-provider.git -appVersion: 0.0.8 +appVersion: 0.0.9 From 77dd3aa016a2b0d1f980ddec931a4aa8c11cb724 Mon Sep 17 00:00:00 2001 From: mrjoelkamp Date: Tue, 20 Aug 2024 10:25:24 -0500 Subject: [PATCH 4/6] docs: update chart README --- charts/attest-provider/README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/charts/attest-provider/README.md b/charts/attest-provider/README.md index 107b13e..5b71ae2 100644 --- a/charts/attest-provider/README.md +++ b/charts/attest-provider/README.md @@ -8,6 +8,7 @@ |port|port for provider service|`8090`| |handlerTimeout|timeout in seconds for provider HTTP handler|`25`| |replicas|number of provider replicas in deployment|`1`| +|serviceAccountName|name of service account to attach to provider pods|``| |tufRoot|name of embedded Docker TUF root to use for client (`dev`, `staging`, `prod`)|`prod`| |tufMetadataSource|URI for TUF metadata (registry or http source)|`registry-1.docker.io/docker/tuf-metadata`| |tufTargetsSource|URI for TUF targets (registry or http source)|`registry-1.docker.io/docker/tuf-targets`| From 4be015fd408abb2387edbb75b50ed9342d6f358d Mon Sep 17 00:00:00 2001 From: mrjoelkamp Date: Tue, 20 Aug 2024 12:32:52 -0500 Subject: [PATCH 5/6] feat: update chart image to v0.0.10 --- charts/attest-provider/Chart.yaml | 4 ++-- charts/attest-provider/values.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/charts/attest-provider/Chart.yaml b/charts/attest-provider/Chart.yaml index 994e631..4fa1f4c 100644 --- a/charts/attest-provider/Chart.yaml +++ b/charts/attest-provider/Chart.yaml @@ -1,8 +1,8 @@ apiVersion: v2 description: A Helm chart for attest external data provider name: attest-provider -version: 0.0.9 +version: 0.0.10 home: https://github.com/docker/attest-provider sources: - https://github.com/docker/attest-provider.git -appVersion: 0.0.9 +appVersion: 0.0.10 diff --git a/charts/attest-provider/values.yaml b/charts/attest-provider/values.yaml index db24cf5..a9528f9 100644 --- a/charts/attest-provider/values.yaml +++ b/charts/attest-provider/values.yaml @@ -1,4 +1,4 @@ -image: "docker/attest-provider:0.0.8@sha256:ad61961bbb9779822e8627c9ddb5c2f29c1ece4ecf9577fb81df02eb108a59ef" +image: "docker/attest-provider:0.0.10@sha256:891da7141dff7e433f64b07d64c89693f029da08349ef8775ba7e064db9d3a9b" certDir: /certs clientCAFile: /tmp/gatekeeper/ca.crt From 65a45785048230d23da4f3e396677043bffd2463 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Aug 2024 01:57:04 +0000 Subject: [PATCH 6/6] chore: bump github/codeql-action from 3.25.15 to 3.26.5 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.15 to 3.26.5. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/afb54ba388a7dca6ecae48f608c4ff05ff4cc77a...2c779ab0d087cd7fe7b826087247c2c81f27bfa6) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/scorecards.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index f188dad..ab2115a 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -78,6 +78,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15 + uses: github/codeql-action/upload-sarif@2c779ab0d087cd7fe7b826087247c2c81f27bfa6 # v3.26.5 with: sarif_file: results.sarif