elastic / cloudbeat / 21946951169
76%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 231
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 75.951%. Remained the same
21946951169

push

github

web-flow 
Bump github.com/sigstore/rekor from 1.4.0 to 1.5.0 (#3883)

Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor)
from 1.4.0 to 1.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/rekor/releases">github.com/sigstore/rekor's
releases</a>.</em></p>
<blockquote>
<h1>v1.5.0</h1>
<p>This release fixes GHSA-273p-m2cw-6833 and GHSA-4c4x-jm2x-pf9j. Note
that this
drops support for fetching public keys via URL when querying the search
API.</p>
<h2>Vulnerability Fixes</h2>
<ul>
<li>Handle malformed COSE and DSSE entries (<a
href="https://redirect.github.com/sigstore/rekor/issues/2729">#2729</a>)</li>
<li>Drop support for fetching public keys by URL in the search index (<a
href="https://redirect.github.com/sigstore/rekor/issues/2731">#2731</a>)</li>
</ul>
<h2>Features</h2>
<ul>
<li>Add support for a custom TLS config for clients (<a
href="https://redirect.github.com/sigstore/rekor/issues/2709">#2709</a>)</li>
</ul>
<h1>v1.4.3</h1>
<p>This release reduces dependencies for a number of exported
packages.</p>
<p>This release also changes the format of the binary and container
signature, which is now a
<a href="https://docs.sigstore.dev/about/bundle/">Sigstore bundle</a>.
To verify a release, use the
latest Cosign 3.x, verifying with
<code>cosign verify-blob --bundle &lt;artifact&gt;-keyless.sigstore.json
&lt;artifact&gt;</code>.</p>
<h2>Improvements</h2>
<ul>
<li>use interruptable context to elegantly handle signals in rekor-cli
(<a
href="https://redirect.github.com/sigstore/rekor/issues/2681">#2681</a>)</li>
<li>restapi: Don't log client errors as errors (<a
href="https://redirect.github.com/sigstore/rekor/issues/2680">#2680</a>)</li>
<li>pkg: separate pki types from implementations (<a
href="https://redirect.github.com/sigstore/rekor/issues/2668">#2668</a>)</li>
<li>e2e: don't mix e2e and regular utilities (<a
href="https://redirect.github.com/sigstore/rekor/issues/2672">#2672</a>)</li>
<li>pkg:... (continued)

9667 of 12728 relevant lines covered (75.95%)

16.48 hits per line

Jobs
ID Job ID Ran Files Coverage
1 21946951169.1 231
75.95
 GitHub Action Run
Source Files on build 21946951169