Tonis Tiigi 5c3551beeb policy: add GitHub attestation verification ...

Add github_attestation and github_release_attestation policy support.
Fetch GitHub attestation bundles (including bundle_url .json.sn decode)
and verify against input.http.checksum.

Wire source metadata resolver progress through resolver options and add
ResolveState support for policy HTTP attestation fetches.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>

2026-02-20 08:56:40 -08:00

..

resolver

update linters for go1.25 base version

2026-01-09 18:54:15 -08:00

build.go

policy: add GitHub attestation verification

2026-02-20 08:56:40 -08:00

dial.go

build: split out node resolver

2025-12-04 09:48:36 +00:00

git_test.go

lint: modernize fix

2025-05-13 20:44:57 +02:00

git.go

policy: add helper modules loading

2026-01-14 09:03:42 -08:00

invoke.go

dap: add debug adapter implementation

2025-06-30 10:51:20 -05:00

localstate.go

history: don't import build package

2026-02-11 10:29:47 +01:00

opt_test.go

build: Don't unpack by default when pushing

2026-01-14 16:04:45 +01:00

opt.go

policy: add GitHub attestation verification

2026-02-20 08:56:40 -08:00

policy_test.go

policy: implement policy support for bake

2026-01-14 09:34:23 -08:00

provenance.go

fix empty provenance metadata for multi-platform builds

2025-11-25 17:39:46 +01:00

replicatedstream_test.go

use "#nosec" instead of "nolint:gosec" to be more specific

2025-07-03 13:31:06 +02:00

replicatedstream.go

build: allow builds from stdin for multi-node builders

2024-08-14 13:13:18 +03:00

result.go

dap: make exec shell persistent across the build

2025-08-11 12:40:09 -05:00

url.go

build: raise maximum size limit for dockerfile and fix size check

2024-10-03 12:12:40 -05:00

utils_test.go

bake: multi ips support for extra hosts

2025-06-16 11:55:17 +02:00

utils.go

history: don't import build package

2026-02-11 10:29:47 +01:00