elastic / cloudbeat / 25200493559
76%
main: 76%

LAST BUILD BRANCH: renovate/8.19-github.com-hashicorp-go-getter-1.x
DEFAULT BRANCH: main
Ran
Jobs 1
Files 235
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 75.807% (-0.007%) from 75.814%
25200493559

push

github

web-flow 
chore(deps): update sigstore (9.4) (#5760)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/sigstore/cosign/v2](https://redirect.github.com/sigstore/cosign)
| indirect | minor | `v2.2.4` -> `v2.6.3` |
|
[github.com/sigstore/timestamp-authority](https://redirect.github.com/sigstore/timestamp-authority)
| indirect | patch | `v1.2.2` -> `v1.2.9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>sigstore/cosign (github.com/sigstore/cosign/v2)</summary>

###
[`v2.6.3`](https://redirect.github.com/sigstore/cosign/releases/tag/v2.6.3)

[Compare
Source](https://redirect.github.com/sigstore/cosign/compare/v2.6.2...v2.6.3)

#### Changelog

v2.6.3 resolves
[GHSA-w6c6-c85g-mmv6](https://redirect.github.com/sigstore/cosign/security/advisories/GHSA-w6c6-c85g-mmv6).

-
[`fecddd3`](https://redirect.github.com/sigstore/cosign/commit/fecddd3c2)
Fix DSSE predicate check
([#&#8203;4802](https://redirect.github.com/sigstore/cosign/issues/4802))
-
[`564c5b1`](https://redirect.github.com/sigstore/cosign/commit/564c5b1b0)
Backport bundle detection to sign and attest
([#&#8203;4727](https://redirect.github.com/sigstore/cosign/issues/4727))

##### Thanks to all contributors!

###
[`v2.6.2`](https://redirect.github.com/sigstore/cosign/blob/HEAD/CHANGELOG.md#v262)

[Compare
Source](https://redirect.github.com/sigstore/cosign/compare/v2.6.1...v2.6.2)

v2.6.2 resolves
https://github.com/sigstore/cosign/security/advisories/GHSA-whqx-f9j3-ch6m.

#### Changes

- Fix bundle verify path for old bundle/trusted root
(GHSA-whqx-f9j3-ch6m)
([#&#8203;4624](https://redirect.github.com/sigstore/cosign/issues/4624))
- bump sigstore deps to resolve build errors
([#&#8203;4619](https://redirect.github.com/sigstore/cosign/issues/4619))

###
[`v2.6.1`](https://redir... (continued)

9726 of 12830 relevant lines covered (75.81%)

16.41 hits per line

Coverage Regressions

Lines Coverage ∆ File
3
82.74
 -0.33% internal/resources/providers/gcplib/inventory/provider.go
Jobs
ID Job ID Ran Files Coverage
1 25200493559.1 235
75.81
 GitHub Action Run
Source Files on build 25200493559