v0.2.19

Changelog

• 8d69e67 Add dependants support
• 91771f4 Add release workflow
• ada4f1a Fix github action
• 71fe08d Install rice
• a2b63f2 Merge pull request #86 from gitpod-io/ghuntley-patch-1
• 0e6bfc5 Update go dependencies
• 2c93845 Update go dependencies
• ab6bdde Update go to v1.19
• 7042cd5 Update goreleaser
• ae496be Update release workflow and go generate
• e37f413 [build] Provide transitive Go dependencies
• e4a8d56 [link] Drop outdated replace rules
• 4c01967 [link] Ignore non-go dependencies
• 7cb4179 [link] Support linking individual Go packages
• c0bef69 fix: typo gitpod/ -> Gitpod-io/
• d343f52 resolve typo: scrip -> script

v0.2.18

Changelog

eb11613 Add jailed execution support
8aff282 Build and release darwin arm64
415f18d Remove unsupported darwin build
af3e930 Revert "Build and release darwin arm64"
848eea0 [fix] Properly copy yarn.lock
938530a [provenance] Fix assertions

v0.2.17

Changelog

3ebfb2a [provenance] More sensitive GIt status use

v0.2.16

Changelog

4762c47 Fix generic package provenance packaging
b7d2b54 Fix provenance bundle assembly

v0.2.15

Changelog

d9cd1e3 Fix Yarn library package provenance generation

v0.2.14

Changelog

8b7e195 Fix Yarn package provenance generation

v0.2.13

Changelog

b048e76 Add warning to provenance assert --signed
f77619b Ignore non-regular files when computing provenance subjects
53fc6f2 Support attestation bundle for exported Docker images
4a897f8 Support direct attestation bundle access

v0.2.12

Changelog

5741ced Add supporting commands for working with provenance
cc4b5eb Fix provenance generation for yarn offline-mirror packages
5e2aff7 Ignore node_modules in generated provenance
d55f5cc Improve provenance detail
a76b602 Make max provenance bundle entry size configurable
78bc50a Reduce memory need for provenance bundle merging

v0.2.11

Changelog

0b2c345 [provenance] Improve bundle extraction

v0.2.10

Changelog

1d0912e Add SLSA provenance support