Skip to content

v0.0.17
Compare
Choose a tag to compare
@facutuesca facutuesca released this 19 Nov 22:22
· 7 commits to main since this release
v0.0.17
cfb3d4d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

Fixed

  • The GitLabPublisher policy now takes the workflow file path in order to
    verify attestations, rathen than assuming it will always be gitlab-ci.yml
    (#71).
  • The GitLabPublisher now longer expects claims being passed during construction,
    rather the ref and sha claims are extracted from the certificate's extensions,
    similar to GitHubPublisher's behavior
    (#71).

Changed

  • Publisher classes (GitLabPublisher and GitHubPublisher) no longer take a claims
    dictionary during construction
    (#72).
Assets 2
Loading