⚠️ Note: Due to a bug, gitsign >= v0.1 is now required to work with the public sigstore instance starting 2022/06/01. See #49 for more details.
Changelog
- 2d9cff2 Fix gitsign for public Sigstore changes. (#50)
- 61a4195 e2e: Verify commit with command that will return non-zero. (#51)
- fe9a344 Bump actions/setup-go from 3.1.0 to 3.2.0 (#48)
- 5cce35c Add privacy section to README. (#47)
- 05dd77d Verify: check if summary is nil before accessing cert. (#43)
- 01b9cc3 Unexport NewRekorClient which is only used in its own package (#45)
- 9861d9d Ensure GITSIGN_REKOR_URL is respected. (#44)
- 3911553 Added environment variable for OIDC Redirect URL (#39)
- ab580ed Bump goreleaser/goreleaser-action from 2.9.1 to 3 (#42)
- 6e70287 all: remove dependency on deprecated github.com/pkg/errors (#41)
- 7cd8fa3 Resize GitHub unverified image, add link to smime verification. (#38)
- 20e9e75 Fix GitHub verified limitation typos (#35)
- 72b4a2d Add GitHub verified badge explaination to limitations. (#34)
- 71a1010 Fix readme file to allow copy/pasting CLI configuration (#33)
- dff662e Bump github.com/go-openapi/runtime from 0.24.0 to 0.24.1 (#32)
- cc20420 Some updates on CI, add new jobs and dependabot config (#29)
- 1d333a3 update goreleaser config to explicity some configurations (#28)
- 7058874 add initial makefile
- 107ac24 Drop go version to 1.17. (#23)
- 4d501b6 Add GITSIGN_LOG environment variable for debug log path.
- 3a5916b Update error temp log base directory to use os.Tempdir.
- b9d0176 README: s/cosign/sigstore
Thanks to all contributors!