Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: sigstore/cosign-installer
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 204a51a57a74d190b284a0ce69b44bc37201f343
Choose a base ref
...
head repository: sigstore/cosign-installer
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: dd6b2e2b610a11fd73dd187a43d57cc1394e35f9
Choose a head ref
  • 6 commits
  • 2 files changed
  • 4 contributors

Commits on May 9, 2023

  1. we should rely upon the digests not the tags, typos (#121) 

    Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
    @developer-guy
    developer-guy committed May 9, 2023
    Configuration menu
    Copy the full SHA
    84448ba View commit details
    Browse the repository at this point in the history

Commits on May 16, 2023

  1. use intermediate environment variables to avoid risks of script injec… 

    …tion (#122)

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
    @developer-guy
    developer-guy committed May 16, 2023
    Configuration menu
    Copy the full SHA
    46b5db7 View commit details
    Browse the repository at this point in the history

  2. Fix unsafe evaluation of inputs.use-sudo (#124) 

    The previous code was (presumably mistakenly) running inputs.use-sudo as
a command, which worked assuming it was true or false (as they ignore
their arguments), but this results in the action executing the value of
inputs.use-sudo as a command.

Signed-off-by: Hal Blackburn <hwtb2@cam.ac.uk>
    @h4l
    h4l committed May 16, 2023
    Configuration menu
    Copy the full SHA
    03d0fec View commit details
    Browse the repository at this point in the history

Commits on May 17, 2023

  1. Remove warning about OIDC signing being experimental (#123) 

    See comment in #120

Signed-off-by: Jannik Hollenbach <jannik.hollenbach@iteratec.com>
    @J12934
    J12934 committed May 17, 2023
    Configuration menu
    Copy the full SHA
    87f4580 View commit details
    Browse the repository at this point in the history

  2. add --yes option to cosign sign (#125) 

    Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
    @developer-guy
    developer-guy committed May 17, 2023
    Configuration menu
    Copy the full SHA
    8e47e41 View commit details
    Browse the repository at this point in the history

  3. download cosign releases from GitHub rather than GCS (#126) 

    * download cosign releases from GitHub rather than GCS

Signed-off-by: Bob Callaway <bcallaway@google.com>

* remove custom UA header

Signed-off-by: Bob Callaway <bcallaway@google.com>

* update 0.6.0 filenames

Signed-off-by: Bob Callaway <bcallaway@google.com>

* add space

Signed-off-by: Bob Callaway <bcallaway@google.com>

---------

Signed-off-by: Bob Callaway <bcallaway@google.com>
    @bobcallaway
    bobcallaway committed May 17, 2023
    Configuration menu
    Copy the full SHA
    dd6b2e2 View commit details
    Browse the repository at this point in the history
Loading