Commit Graph
3820 Commits
Author SHA1 Message Date
Sebastiaan van Stijn 5d44afbda4 vendor: golang.org/x/crypto v0.47.0
full diffs:

- https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.46.0...refs/tags/v0.47.0
- https://cs.opensource.google/go/x/net/+/refs/tags/v0.48.0...refs/tags/v0.49.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 746c343d18 vendor: golang.org/x/text v0.33.0
full diff: https://cs.opensource.google/go/x/text/+/refs/tags/v0.32.0...refs/tags/v0.33.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 95a1cb94b3 vendor: golang.org/x/tools v0.40.0
full diff: https://cs.opensource.google/go/x/tools/+/refs/tags/v0.39.0...refs/tags/v0.40.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 214ebd8434 vendor: golang.org/x/term v0.39.0
full diff: https://cs.opensource.google/go/x/term/+/refs/tags/v0.38.0...refs/tags/v0.39.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-27 10:02:48 +01:00
Sebastiaan van Stijn 40d068e12c vendor: golang.org/x/sys v0.40.0
full diff: https://cs.opensource.google/go/x/sys/+/refs/tags/v0.39.0...refs/tags/v0.40.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-27 10:02:48 +01:00
CrazyMaxandGitHub 3b3895d884 Merge pull request #3622 from tonistiigi/buildkit-v0.27.0
Dockerfile: update buildkit to v0.27.0
2026-01-27 09:20:00 +01:00
Tonis Tiigi df56af4e0c Dockerfile: update buildkit to v0.27.0
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-21 17:05:40 -08:00
Tõnis TiigiandGitHub 44945d71ff Merge pull request #3621 from tonistiigi/vendor-buildkit-v0.27
vendor: update buildkit to v0.27.0
2026-01-21 14:48:45 -08:00
Tonis Tiigi 08e5e8ebf2 vendor: update buildkit to v0.27.0
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-21 14:32:32 -08:00
Tõnis TiigiandGitHub 79763c61b3 Merge pull request #3616 from thaJeztah/bump_cli
vendor: github.com/docker/cli v29.1.5
2026-01-20 10:22:06 -08:00
Sebastiaan van Stijn 0d343eff2d vendor: github.com/docker/cli v29.1.5
no changes in code

full diff: https://github.com/docker/cli/compare/v29.1.4...v29.1.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-19 13:08:21 +01:00
Tõnis TiigiandGitHub 9c33ef3ed3 Merge pull request #3612 from tonistiigi/dhi-auth
dockerconfig: add fallback for loading DHI and Scout credentials
2026-01-16 14:27:54 -08:00
Tõnis TiigiandGitHub 9567f7f4d2 Merge pull request #3614 from tonistiigi/policy-json-stub
commands: remove policy json-schema stub
2026-01-16 14:27:33 -08:00
Tõnis TiigiandGitHub 3dabbc568b Merge pull request #3615 from tonistiigi/vendor-buildkit-v0.27.0-rc2
vendor: update buildkit to v0.27.0-rc2
2026-01-16 14:13:10 -08:00
Tonis Tiigi 3fd58dff71 vendor: update buildkit to v0.27.0-rc2
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 13:56:16 -08:00
Tõnis TiigiandGitHub 819ae5d3e1 Merge pull request #3611 from tonistiigi/policy-update-v0.31-rc2
Updates and fixes to policy support
2026-01-16 12:52:06 -08:00
Tonis Tiigi d0e4db27e0 commands: remove policy json-schema stub
Remove stub for now so we don't ship it in a release.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 12:48:46 -08:00
Tonis Tiigi f764c6f025 dockerconfig: add fallback for loading DHI and Scout credentials
These are also Docker managed registries with same users.

Fall back to main hostname if not logged in to exact domain.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 12:45:05 -08:00
Tonis Tiigi 89fdef17e6 policy: fixes for image source handling
- Make sure tag is added to image reference as
containerd reference parser refuses to parse otherwise.

- When attestation is asked from non-index, return
nil instead of error. This is for consistency as likely
to fail in BuildKit before that is fixed separately.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 12:12:41 -08:00
Tonis Tiigi 535da79d62 policy: build policy deny messages with error
Supported from Buildkit v0.27.0-rc1

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:56 -08:00
Tonis Tiigi db9c0c2532 policy: update unknown collection
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:56 -08:00
Tonis Tiigi 86885cd8a2 policy: add docker_github_builder_tag builtin helper
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:55 -08:00
Tonis Tiigi 1d19f3e2dd policy: add docker_github_builder builtin helper
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:55 -08:00
Tonis Tiigi 30260ec935 policy: improve policy logging
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:55 -08:00
Tonis Tiigi 73f5b1f9c7 policy: update policy progress logic
Fix the policy logger being open for the whole build.

In new logic logger is opened on-demand if there are logs,
remains open until timeout and is restarted if new logs
come after.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:55 -08:00
Tonis Tiigi 20405112c2 policy: allow image source without set platform
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:55 -08:00
Tonis Tiigi eaee6675fb policy: fix exposing signature kind and type
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-16 11:48:53 -08:00
Tõnis TiigiandGitHub bc5d652738 Merge pull request #3610 from tonistiigi/bake-var-flag
bake: add --var flag for setting variable values
2026-01-16 08:25:12 -08:00
Tõnis TiigiandGitHub 4682edf8bd Merge pull request #3609 from tonistiigi/dockerfile-worktree-fix
Dockerfile: allow dev builds from git worktree
2026-01-16 08:24:38 -08:00
Tonis Tiigi c5322ca727 bake: add --var flag for setting variable values
This provides alternative way to set values for Bake
variables without adding them the global environment variables.
This can also be used then environment variable access
is disabled with BUILDX_BAKE_DISABLE_VARS_ENV_LOOKUP.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-15 23:17:28 -08:00
Tonis Tiigi 88359c58a0 tests: add TestBakeDisableEnvLookup
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-15 22:46:30 -08:00
Tonis Tiigi 38750e5958 Dockerfile: allow dev builds from git worktree
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit f24db9495537a9658b0defba34c10acd2ad61118)
2026-01-15 17:24:44 -08:00
Tõnis TiigiandGitHub 8b1f6fd8c0 Merge pull request #3600 from crazy-max/ci-sigstore-darwin
ci: don't upload signature bundle for darwin
2026-01-15 16:49:25 -08:00
CrazyMax f79f69b449 ci: don't upload signature bundle for darwin
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
2026-01-15 12:20:48 +01:00
CrazyMaxandGitHub 9e1b08f7ca Merge pull request #3592 from tonistiigi/opa-source-policy-test-cmd
policy: add policy test command
2026-01-15 12:16:00 +01:00
CrazyMaxandGitHub 3da7958c8b Merge pull request #3597 from thaJeztah/bump_logrus
vendor: github.com/sirupsen/logrus v1.9.4
2026-01-15 12:14:53 +01:00
Sebastiaan van Stijn 99b8143e28 vendor: github.com/sirupsen/logrus v1.9.4
full diff: https://github.com/sirupsen/logrus/compare/dd1b4c2e81af...v1.9.4

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-15 11:23:56 +01:00
Tõnis TiigiandGitHub b9b24359ba Merge pull request #3595 from tonistiigi/bake-var-disable
bake: allow disabling env lookup for bake
2026-01-14 14:54:17 -08:00
Tonis Tiigi d27c7f8e9f bake: allow disabling env lookup for bake
Allow bake to be run in a mode where the local environment
variable values can't be captured by bake definition.

In future we will likely also add --var k=v for alternative
way to pass values to variables.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-14 14:18:26 -08:00
Tõnis TiigiandGitHub efaf9daa21 Merge pull request #3594 from tonistiigi/vendor-buildkit-v0.27.0-rc1
vendor: update buildkit to v0.27.0-rc1
2026-01-14 13:58:10 -08:00
Tonis Tiigi d54f398c5d vendor: update buildkit to v0.27.0-rc1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-14 13:36:15 -08:00
Tonis Tiigi c6ecdc08cf commands: implement policy test command
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-14 10:31:12 -08:00
Tõnis TiigiandGitHub 32b6b75478 Merge pull request #3593 from tonistiigi/opa-bake-tests
policy: add policy to bake and improve test coverage
2026-01-14 10:07:08 -08:00
Tonis Tiigi 9f1daffb32 policy: implement policy support for bake
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-14 09:34:23 -08:00
Tonis Tiigi 6f9a1cfb17 tests: add git based policy tests
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-14 09:34:15 -08:00
Tonis Tiigi 6d80e701f6 tests: add tests checking combinations of --policy flag
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-14 09:34:09 -08:00
Tonis Tiigi 071ce556a5 tests: add http based policy eval tests
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-14 09:34:01 -08:00
Tonis Tiigi 4b4f2aa682 tests: add http policy integration tests
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-14 09:33:49 -08:00
Tõnis TiigiandGitHub 5a5d59f503 Merge pull request #3539 from tonistiigi/opa-source-policy
add rego integration to source policies
2026-01-14 09:32:39 -08:00
Tonis Tiigi e5116c1555 tests: update policy tests matrix to require modern buildkit
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2026-01-14 09:10:35 -08:00