Repository navigation

All pull requests

Labels (23)Milestones (1)New pull request

Open

(51)

Closed

(3,828)

chore(deps): bump github.com/go-chi/chi/v5 from 5.3.2 to 5.4.0
#5194dependabot[bot] opened Oct 29, 2026Bot
chore(deps): bump the actions group with 6 updates
#5192dependabot[bot] opened Oct 26, 2026Bot
chore(deps): bump github.com/buildkite/agent/v3 from 3.130.0 to 3.138.2
#5191dependabot[bot] opened Oct 26, 2026Bot
chore(deps): bump github.com/open-policy-agent/opa from 1.20.2 to 1.21.4
#5190dependabot[bot] opened Oct 26, 2026Bot
chore(deps): bump gitlab.com/gitlab-org/api/client-go/v3 from 3.13.0 to 3.32.0
#5189dependabot[bot] opened Oct 26, 2026Bot
chore(deps): bump google.golang.org/api from 0.301.0 to 0.308.0
#5188dependabot[bot] opened Oct 26, 2026Bot
chore(deps): bump github.com/google/certificate-transparency-go from 1.3.3 to 1.4.0
#5187dependabot[bot] opened Oct 26, 2026Bot
chore(deps): bump github.com/sigstore/timestamp-authority/v2 from 2.1.5 to 2.2.0
#5186dependabot[bot] opened Oct 26, 2026Bot
chore(deps): bump the gomod group with 3 updates
#5185dependabot[bot] opened Oct 26, 2026Bot
test: cover Rekor bundle verification in image signature tests
#5184lcmangalagiri opened Oct 25, 2026
fix: honor key and bundle default hash algorithms during signature verification
#5167trukhinyuri opened Oct 14, 2026
4
Replace --use-signing-config with --no-signing-config
#5163aaronlew02 opened Oct 12, 2026Contributor
1
verify: avoid downloading unrelated bundle layers
#5155jstar0 opened Oct 8, 2026
4
chore(deps): bump k8s.io/client-go from 0.36.2 to 0.37.1
#5152dependabot[bot] opened Oct 5, 2026Bot
chore(deps): bump k8s.io/apimachinery from 0.36.2 to 0.37.1
#5151dependabot[bot] opened Oct 5, 2026Bot
Delete legacy verification code
#5146aaronlew02 opened Oct 2, 2026Contributor
1
Remove legacy flags and helpers
#5145aaronlew02 opened Oct 2, 2026Contributor
1
feat: support selecting PIV cards
#5126niallnsec opened Sep 18, 2026
3
chore(deps): bump golang.org/x/oauth2 from 0.36.0 to 0.37.0
#5115dependabot[bot] opened Sep 14, 2026Bot
Verify image attestations exclusively via sigstore-go
#5109aaronlew02 opened Sep 11, 2026Contributor
2
Require new bundle format for attest
#5108aaronlew02 opened Sep 10, 2026Contributor
2
Fix stale version comment on pinned actions/checkout
#5102crimsondhakx opened Sep 7, 2026
1
move to maintained lib for azure env detection
#5099bobcallaway opened Sep 5, 2026Member
3
Require new bundle format for image signing and verification
#5093aaronlew02 opened Sep 2, 2026Contributor
2
Verify blob attestations exclusively via sigstore-go
#5089aaronlew02 opened Sep 2, 2026Contributor
2

Pull requests