{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":496064125,"defaultBranch":"development","name":"cssc-pipeline","ownerLogin":"toddysm","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2022-05-25T03:05:33.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/1007103?v=4","public":true,"private":false,"isOrgOwned":false},"refInfo":{"name":"","listCacheKey":"v0:1717169160.0","currentOid":""},"activityList":{"items":[{"before":"4e9c6d31fbadda76c5372f758ffa0b28e1aee8b7","after":"d8520565189871b9369ae282abdbfdc5eec51b08","ref":"refs/heads/feature/vulnerability-reports","pushedAt":"2024-06-10T03:57:46.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Parameterized Dockerfile\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Parameterized Dockerfile"}},{"before":"a861f5c305a297d1d3ec9d3bdc99823dac025097","after":"4e9c6d31fbadda76c5372f758ffa0b28e1aee8b7","ref":"refs/heads/feature/vulnerability-reports","pushedAt":"2024-05-31T15:34:00.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Added vulnerability reports\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Added vulnerability reports"}},{"before":null,"after":"a861f5c305a297d1d3ec9d3bdc99823dac025097","ref":"refs/heads/feature/vulnerability-reports","pushedAt":"2024-05-31T15:26:00.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Updated main branch (#21)\n\n* Added Flask sample app\r\n\r\n* Moved index.html to templates folder\r\n\r\n* Created Dockerfile for the Flask app\r\n\r\n* Updated the README\r\n\r\n* Added action to build image from feature branch\r\n\r\n* Changed to use date as a tag\r\n\r\n* Added action to build from development branch\r\n\r\n* Added image push for Feature branch\r\n\r\n* Added debugging echo\r\n\r\n* Added environment reference\r\n\r\n* Added log and temp files to .gitignore\r\n\r\n* Added provenance generation\r\n\r\n* Fixed penance step\r\n\r\n* Changed to Philips-Labs action\r\n\r\n* Fixed tags command line parameter\r\n\r\n* Added release step with min information\r\n\r\n* Added registry login to the release action\r\n\r\n* Added environment for the release step\r\n\r\n* Removed condition for release step\r\n\r\n* Added code to retrieve container digest\r\n\r\n* Changed code to obtain image manifest\r\n\r\n* Removed release, added provenance step\r\n\r\n* Fixed action yaml error\r\n\r\n* Added sign into ACR\r\n\r\n* Added skopeo to retrieve the digest\r\n\r\n* Changed the provenance step to use skopeo digest\r\n\r\n* Fixed error in the Get Image Digest step\r\n\r\n* Changed the tags cmd line parameter format\r\n\r\n* Fixed tag to latest\r\n\r\n* Removed tags\r\n\r\n* Passing digest between steps\r\n\r\n* Fixed output reference\r\n\r\n* Added showing the provenance step\r\n\r\n* Cleaned up action yaml\r\n\r\n* Switched step order\r\n\r\n* Testing with latest image tag\r\n\r\n* Using date tag for the image\r\n\r\n* Removed the digest parameter for the provenance call\r\n\r\n* Added tags for provenance call\r\n\r\n* Added /temp folder to .gitignore\r\n\r\n* Added step for ORAS installation\r\n\r\n* Fixed step 'run' key\r\n\r\n* Fixed multi-line 'run'\r\n\r\n* Fixed multi-line 'run' key\r\n\r\n* Checking if ORAS it properly installed\r\n\r\n* Added step to push provenance to the registry\r\n\r\n* Fixed ORAS version\r\n\r\n* FIxed ORAS installation step\r\n\r\n* FIxed provenance media type\r\n\r\n* Added annotations\r\n\r\n* Saved annotations to a file\r\n\r\n* Fixed annotation JSON\r\n\r\n* Changed location of provenance file\r\n\r\n* Changed provenance and annotation location\r\n\r\n* Redirected annotations output\r\n\r\n* Fixed annotations step\r\n\r\n* Saved files in the $HOME folder\r\n\r\n* Fixed missing backwards slash in oras push command\r\n\r\n* Changed to relative paths\r\n\r\n* Added /temp folder to .gitignore\r\n\r\n* Added step for ORAS installation\r\n\r\n* Fixed step 'run' key\r\n\r\n* Fixed multi-line 'run'\r\n\r\n* Fixed multi-line 'run' key\r\n\r\n* Checking if ORAS it properly installed\r\n\r\n* Added step to push provenance to the registry\r\n\r\n* Fixed ORAS version\r\n\r\n* FIxed ORAS installation step\r\n\r\n* FIxed provenance media type\r\n\r\n* Added annotations\r\n\r\n* Saved annotations to a file\r\n\r\n* Fixed annotation JSON\r\n\r\n* Changed location of provenance file\r\n\r\n* Changed provenance and annotation location\r\n\r\n* Redirected annotations output\r\n\r\n* Fixed annotations step\r\n\r\n* Saved files in the $HOME folder\r\n\r\n* Fixed missing backwards slash in oras push command\r\n\r\n* Changed to relative paths\r\n\r\n* Added step to print the provenance file\r\n\r\n* Added simple script to assign ownerhip to layers\r\n\r\n* Added docker inspect and python requirements install\r\n\r\n* Added layer annotation\r\n\r\n* Added print of layer annotations\r\n\r\n* Added pushing ownerhip to the registry\r\n\r\n* Changed ownership file location\r\n\r\n* Moved ORAS installation step\r\n\r\n* Added pushing ownership in build step\r\n\r\n* Removed annotations for ownerhip\r\n\r\n* Changed the dev branch build action\r\n\r\n* Added pub and key to .gitignore\r\n\r\n* Added SPDX SBOM for flasksample:v1\r\n\r\n* Added SLSA example\r\n\r\n* Added Cosign signature manifest\r\n\r\n* Added Cosign signature layer\r\n\r\n* Added Cosign downloaded signature\r\n\r\n* Added Cosign attestation files\r\n\r\n* Added decoded payloads\r\n\r\n* Added Cosign attestation verification output\r\n\r\n* Added Cosign image signature verification output\r\n\r\n* Moved signature verification output file.\r\n\r\n* Pretty printed the outputs\r\n\r\n* Added extracted attestation signatures\r\n\r\n* Renamed file\r\n\r\n* Added outputs from the ephemeral key signature verifications\r\n\r\n* Added Rekor logentries\r\n\r\n* Generated SBOMs in various formats\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added manifests pulled from DockerHub\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Pretty formatted manifests\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added manifest from ACR referrers\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added acr manifest list output\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added manifests from GAR\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Renamed file\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Updated .gitignore\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added debug output for JFrog\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added debug output for ECR\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added attach debug output for Quay\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added manifests for Harbor\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added manifest for Zot registry\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added ORAS registry manifests\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added GHCR manifests\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Demo #2 vuln mgmt. Kubecon EU 2023 (#11)\r\n\r\n* Temp commit\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for copy and resign images\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Fixed artifact type for CycloneDX (#12)\r\n\r\n* Temp commit\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for copy and resign images\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Fived CycloneDX artifactType\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* kubeconeu23 notary demos (#13)\r\n\r\n* Updated .gitignore\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for signing with Notation\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Changed the typing speed for local and remote signing\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Changed the env var name\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added trust store and trust policy demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added troubleshooting demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added local sign demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Demo script fixes (#14)\r\n\r\n* Updated .gitignore\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for signing with Notation\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Changed the typing speed for local and remote signing\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Changed the env var name\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added trust store and trust policy demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added troubleshooting demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added local sign demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Removed unneccessary ls command\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Changed env var name\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added more prep steps\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added additional cleanup commands (#15)\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added image lifecycle metadata demo script and cast (#16)\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Renamed demo script for image lifecycle (#17)\r\n\r\n* Added image lifecycle metadata demo script and cast\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Renamed demo script for lifecycle management\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Removed outdated file (#18)\r\n\r\n* Added image lifecycle metadata demo script and cast\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Renamed demo script for lifecycle management\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Deleted outdated file\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo scripts for demose (#19)\r\n\r\n* Added emo script for plugin install\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for signing and verification with test key\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for signing with remote key\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added cleanup step and updated script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added cleanup steps\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added more cleanup steps\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Renamed demo scripts (#20)\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Updated main branch (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1805337540\" data-permission-text=\"Title is private\" data-url=\"https://github.com/toddysm/cssc-pipeline/issues/21\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/toddysm/cssc-pipeline/pull/21/hovercard\" href=\"https://github.com/toddysm/cssc-pipeline/pull/21\">#21</a>)"}},{"before":"b169725aac06fa3f0e0e3deceec9680deac2195c","after":"9c6614b27332cd9e9ea8bb6b73466f59ca9b262f","ref":"refs/heads/development","pushedAt":"2024-03-15T19:42:24.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Uploaded asciinema recording (#27)\n\n* Added demo script for KubeCon EU 2024\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Uploded the asciinema cast\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Uploaded asciinema recording (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2189338285\" data-permission-text=\"Title is private\" data-url=\"https://github.com/toddysm/cssc-pipeline/issues/27\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/toddysm/cssc-pipeline/pull/27/hovercard\" href=\"https://github.com/toddysm/cssc-pipeline/pull/27\">#27</a>)"}},{"before":"55a965e079c1f453caf8edd9108e6f05353301a1","after":"db7b5fa8d42be2dc902bc91f42d84cd694186eb3","ref":"refs/heads/feature/kubeconeu-2024","pushedAt":"2024-03-15T19:42:03.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Merge branch 'development' into feature/kubeconeu-2024","shortMessageHtmlLink":"Merge branch 'development' into feature/kubeconeu-2024"}},{"before":"64e4197ce5807028ec8798a156bcd90a2ac22802","after":"55a965e079c1f453caf8edd9108e6f05353301a1","ref":"refs/heads/feature/kubeconeu-2024","pushedAt":"2024-03-15T19:30:59.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Uploded the asciinema cast\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Uploded the asciinema cast"}},{"before":"93fe988bb0215e87cdd5eba2133a963f4875cc98","after":"b169725aac06fa3f0e0e3deceec9680deac2195c","ref":"refs/heads/development","pushedAt":"2024-03-15T19:30:27.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Added demo script for KubeCon EU 2024 (#26)\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Added demo script for KubeCon EU 2024 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2189333858\" data-permission-text=\"Title is private\" data-url=\"https://github.com/toddysm/cssc-pipeline/issues/26\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/toddysm/cssc-pipeline/pull/26/hovercard\" href=\"https://github.com/toddysm/cssc-pipeline/pull/26\">#26</a>)"}},{"before":"b5ee99f84abd3d02788db6a8aa19114bcc7553ea","after":"93fe988bb0215e87cdd5eba2133a963f4875cc98","ref":"refs/heads/development","pushedAt":"2024-03-15T17:47:39.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Added demo script for KubeCon EU 2024 (#25)\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Added demo script for KubeCon EU 2024 (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"2189175162\" data-permission-text=\"Title is private\" data-url=\"https://github.com/toddysm/cssc-pipeline/issues/25\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/toddysm/cssc-pipeline/pull/25/hovercard\" href=\"https://github.com/toddysm/cssc-pipeline/pull/25\">#25</a>)"}},{"before":null,"after":"64e4197ce5807028ec8798a156bcd90a2ac22802","ref":"refs/heads/feature/kubeconeu-2024","pushedAt":"2024-03-15T17:47:06.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Added demo script for KubeCon EU 2024\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Added demo script for KubeCon EU 2024"}},{"before":"e4c489f7cecbb90518a4c3411b872a2c9e73804a","after":"b5ee99f84abd3d02788db6a8aa19114bcc7553ea","ref":"refs/heads/development","pushedAt":"2023-11-05T00:28:31.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Added tree list after signing\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Added tree list after signing"}},{"before":"95f4aa873bf1e957c789761394c322c2c1aa78a3","after":"e4c489f7cecbb90518a4c3411b872a2c9e73804a","ref":"refs/heads/development","pushedAt":"2023-11-04T23:20:26.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Changed workflow names\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Changed workflow names"}},{"before":"5e8914609c2f4dcd16e028e14a1777f3a348af5f","after":"95f4aa873bf1e957c789761394c322c2c1aa78a3","ref":"refs/heads/development","pushedAt":"2023-11-04T23:16:30.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Added info messages\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Added info messages"}},{"before":"c803aab5e75ebdf043916c8ebbead07a0482e915","after":"5e8914609c2f4dcd16e028e14a1777f3a348af5f","ref":"refs/heads/development","pushedAt":"2023-11-04T23:06:39.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Fixed bug with missing directory\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Fixed bug with missing directory"}},{"before":"2bb7e057d8f25649af1ff397322b11887e51ed6f","after":"c803aab5e75ebdf043916c8ebbead07a0482e915","ref":"refs/heads/development","pushedAt":"2023-11-04T23:03:46.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Added debug prints and fixed issue with locations\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Added debug prints and fixed issue with locations"}},{"before":"90aa928d91865fcc8f2e3b6ba464512ea53fce6f","after":"2bb7e057d8f25649af1ff397322b11887e51ed6f","ref":"refs/heads/development","pushedAt":"2023-11-04T22:48:48.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Updated script with verification\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Updated script with verification"}},{"before":"a0be87e1263df6d8429d48f63a6186bf0afb6144","after":"90aa928d91865fcc8f2e3b6ba464512ea53fce6f","ref":"refs/heads/development","pushedAt":"2023-11-04T22:33:34.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Added workflow to sign local image in GHA\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Added workflow to sign local image in GHA"}},{"before":"368a3e6b51fcc71f7368274c5ff680bcb2df7eab","after":"a0be87e1263df6d8429d48f63a6186bf0afb6144","ref":"refs/heads/development","pushedAt":"2023-09-20T17:58:29.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Added demo script and screencast (#23)\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Added demo script and screencast (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1905477377\" data-permission-text=\"Title is private\" data-url=\"https://github.com/toddysm/cssc-pipeline/issues/23\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/toddysm/cssc-pipeline/pull/23/hovercard\" href=\"https://github.com/toddysm/cssc-pipeline/pull/23\">#23</a>)"}},{"before":null,"after":"db680cd2dd6214af15cd3b5f3453519f6d5dd705","ref":"refs/heads/feature/standalone-signing-demo","pushedAt":"2023-09-20T17:57:44.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Added demo script and screencast\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Added demo script and screencast"}},{"before":"e2b5c5380cb8291eb04ea290d950bf9a1e98c181","after":"8395cf3979588aa7fa62cfd5ebefd0ce6c8f8aec","ref":"refs/heads/feature/provenance-metadata","pushedAt":"2023-08-08T00:59:59.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Temp commit to preserve files\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Temp commit to preserve files"}},{"before":"f868ff0427665673d31d2607a4888a617295b103","after":"e2b5c5380cb8291eb04ea290d950bf9a1e98c181","ref":"refs/heads/feature/provenance-metadata","pushedAt":"2023-08-05T04:11:50.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Changed dev branch workflow\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Changed dev branch workflow"}},{"before":"46b344fa333ff77ec9400b0c98e6e3b80f4b48bd","after":"f868ff0427665673d31d2607a4888a617295b103","ref":"refs/heads/feature/provenance-metadata","pushedAt":"2023-07-21T21:50:09.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Fixed bug with ORAS command flag\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Fixed bug with ORAS command flag"}},{"before":"d9d381b079cdbda131febc91601b83e3434df58d","after":"46b344fa333ff77ec9400b0c98e6e3b80f4b48bd","ref":"refs/heads/feature/provenance-metadata","pushedAt":"2023-07-21T21:48:06.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Changed ORAS commands\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Changed ORAS commands"}},{"before":"cad53da808cd16a10972a5cbf59e19b7a9777a50","after":"d9d381b079cdbda131febc91601b83e3434df58d","ref":"refs/heads/feature/provenance-metadata","pushedAt":"2023-07-21T21:43:14.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Updated ORAS version to stable\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Updated ORAS version to stable"}},{"before":"7a12bcad4bc654d7eb34e6498abc163b42ab34df","after":"cad53da808cd16a10972a5cbf59e19b7a9777a50","ref":"refs/heads/feature/provenance-metadata","pushedAt":"2023-07-21T21:30:54.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Changed `verbose` to `debug`\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Changed <code>verbose</code> to <code>debug</code>"}},{"before":"d1556b7b259af830d10ff56ad1770aef7a4399c7","after":"7a12bcad4bc654d7eb34e6498abc163b42ab34df","ref":"refs/heads/feature/provenance-metadata","pushedAt":"2023-07-21T21:22:38.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Added verbose logging for ORAS\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Added verbose logging for ORAS"}},{"before":"3533464875030bedef0127930bbf5f9a8edd2c19","after":"d1556b7b259af830d10ff56ad1770aef7a4399c7","ref":"refs/heads/feature/provenance-metadata","pushedAt":"2023-07-21T21:16:54.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Fixed comments\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Fixed comments"}},{"before":null,"after":"3533464875030bedef0127930bbf5f9a8edd2c19","ref":"refs/heads/feature/provenance-metadata","pushedAt":"2023-07-21T20:58:39.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Changed workflows to use GHCR\n\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Changed workflows to use GHCR"}},{"before":"6ce5d3d5a3d03334bd451839b193c14362aa084f","after":"368a3e6b51fcc71f7368274c5ff680bcb2df7eab","ref":"refs/heads/development","pushedAt":"2023-07-14T18:32:05.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Updated main branch (#21) (#22)\n\n* Added Flask sample app\r\n\r\n* Moved index.html to templates folder\r\n\r\n* Created Dockerfile for the Flask app\r\n\r\n* Updated the README\r\n\r\n* Added action to build image from feature branch\r\n\r\n* Changed to use date as a tag\r\n\r\n* Added action to build from development branch\r\n\r\n* Added image push for Feature branch\r\n\r\n* Added debugging echo\r\n\r\n* Added environment reference\r\n\r\n* Added log and temp files to .gitignore\r\n\r\n* Added provenance generation\r\n\r\n* Fixed penance step\r\n\r\n* Changed to Philips-Labs action\r\n\r\n* Fixed tags command line parameter\r\n\r\n* Added release step with min information\r\n\r\n* Added registry login to the release action\r\n\r\n* Added environment for the release step\r\n\r\n* Removed condition for release step\r\n\r\n* Added code to retrieve container digest\r\n\r\n* Changed code to obtain image manifest\r\n\r\n* Removed release, added provenance step\r\n\r\n* Fixed action yaml error\r\n\r\n* Added sign into ACR\r\n\r\n* Added skopeo to retrieve the digest\r\n\r\n* Changed the provenance step to use skopeo digest\r\n\r\n* Fixed error in the Get Image Digest step\r\n\r\n* Changed the tags cmd line parameter format\r\n\r\n* Fixed tag to latest\r\n\r\n* Removed tags\r\n\r\n* Passing digest between steps\r\n\r\n* Fixed output reference\r\n\r\n* Added showing the provenance step\r\n\r\n* Cleaned up action yaml\r\n\r\n* Switched step order\r\n\r\n* Testing with latest image tag\r\n\r\n* Using date tag for the image\r\n\r\n* Removed the digest parameter for the provenance call\r\n\r\n* Added tags for provenance call\r\n\r\n* Added /temp folder to .gitignore\r\n\r\n* Added step for ORAS installation\r\n\r\n* Fixed step 'run' key\r\n\r\n* Fixed multi-line 'run'\r\n\r\n* Fixed multi-line 'run' key\r\n\r\n* Checking if ORAS it properly installed\r\n\r\n* Added step to push provenance to the registry\r\n\r\n* Fixed ORAS version\r\n\r\n* FIxed ORAS installation step\r\n\r\n* FIxed provenance media type\r\n\r\n* Added annotations\r\n\r\n* Saved annotations to a file\r\n\r\n* Fixed annotation JSON\r\n\r\n* Changed location of provenance file\r\n\r\n* Changed provenance and annotation location\r\n\r\n* Redirected annotations output\r\n\r\n* Fixed annotations step\r\n\r\n* Saved files in the $HOME folder\r\n\r\n* Fixed missing backwards slash in oras push command\r\n\r\n* Changed to relative paths\r\n\r\n* Added /temp folder to .gitignore\r\n\r\n* Added step for ORAS installation\r\n\r\n* Fixed step 'run' key\r\n\r\n* Fixed multi-line 'run'\r\n\r\n* Fixed multi-line 'run' key\r\n\r\n* Checking if ORAS it properly installed\r\n\r\n* Added step to push provenance to the registry\r\n\r\n* Fixed ORAS version\r\n\r\n* FIxed ORAS installation step\r\n\r\n* FIxed provenance media type\r\n\r\n* Added annotations\r\n\r\n* Saved annotations to a file\r\n\r\n* Fixed annotation JSON\r\n\r\n* Changed location of provenance file\r\n\r\n* Changed provenance and annotation location\r\n\r\n* Redirected annotations output\r\n\r\n* Fixed annotations step\r\n\r\n* Saved files in the $HOME folder\r\n\r\n* Fixed missing backwards slash in oras push command\r\n\r\n* Changed to relative paths\r\n\r\n* Added step to print the provenance file\r\n\r\n* Added simple script to assign ownerhip to layers\r\n\r\n* Added docker inspect and python requirements install\r\n\r\n* Added layer annotation\r\n\r\n* Added print of layer annotations\r\n\r\n* Added pushing ownerhip to the registry\r\n\r\n* Changed ownership file location\r\n\r\n* Moved ORAS installation step\r\n\r\n* Added pushing ownership in build step\r\n\r\n* Removed annotations for ownerhip\r\n\r\n* Changed the dev branch build action\r\n\r\n* Added pub and key to .gitignore\r\n\r\n* Added SPDX SBOM for flasksample:v1\r\n\r\n* Added SLSA example\r\n\r\n* Added Cosign signature manifest\r\n\r\n* Added Cosign signature layer\r\n\r\n* Added Cosign downloaded signature\r\n\r\n* Added Cosign attestation files\r\n\r\n* Added decoded payloads\r\n\r\n* Added Cosign attestation verification output\r\n\r\n* Added Cosign image signature verification output\r\n\r\n* Moved signature verification output file.\r\n\r\n* Pretty printed the outputs\r\n\r\n* Added extracted attestation signatures\r\n\r\n* Renamed file\r\n\r\n* Added outputs from the ephemeral key signature verifications\r\n\r\n* Added Rekor logentries\r\n\r\n* Generated SBOMs in various formats\r\n\r\n\r\n\r\n* Added manifests pulled from DockerHub\r\n\r\n\r\n\r\n* Pretty formatted manifests\r\n\r\n\r\n\r\n* Added manifest from ACR referrers\r\n\r\n\r\n\r\n* Added acr manifest list output\r\n\r\n\r\n\r\n* Added manifests from GAR\r\n\r\n\r\n\r\n* Renamed file\r\n\r\n\r\n\r\n* Updated .gitignore\r\n\r\n\r\n\r\n* Added debug output for JFrog\r\n\r\n\r\n\r\n* Added debug output for ECR\r\n\r\n\r\n\r\n* Added attach debug output for Quay\r\n\r\n\r\n\r\n* Added manifests for Harbor\r\n\r\n\r\n\r\n* Added manifest for Zot registry\r\n\r\n\r\n\r\n* Added ORAS registry manifests\r\n\r\n\r\n\r\n* Added GHCR manifests\r\n\r\n\r\n\r\n* Demo #2 vuln mgmt. Kubecon EU 2023 (#11)\r\n\r\n* Temp commit\r\n\r\n\r\n\r\n* Added demo script for copy and resign images\r\n\r\n\r\n\r\n---------\r\n\r\n\r\n\r\n* Fixed artifact type for CycloneDX (#12)\r\n\r\n* Temp commit\r\n\r\n\r\n\r\n* Added demo script for copy and resign images\r\n\r\n\r\n\r\n* Fived CycloneDX artifactType\r\n\r\n\r\n\r\n---------\r\n\r\n\r\n\r\n* kubeconeu23 notary demos (#13)\r\n\r\n* Updated .gitignore\r\n\r\n\r\n\r\n* Added demo script for signing with Notation\r\n\r\n\r\n\r\n* Changed the typing speed for local and remote signing\r\n\r\n\r\n\r\n* Changed the env var name\r\n\r\n\r\n\r\n* Added trust store and trust policy demo script\r\n\r\n\r\n\r\n* Added troubleshooting demo script\r\n\r\n\r\n\r\n* Added local sign demo script\r\n\r\n\r\n\r\n---------\r\n\r\n\r\n\r\n* Demo script fixes (#14)\r\n\r\n* Updated .gitignore\r\n\r\n\r\n\r\n* Added demo script for signing with Notation\r\n\r\n\r\n\r\n* Changed the typing speed for local and remote signing\r\n\r\n\r\n\r\n* Changed the env var name\r\n\r\n\r\n\r\n* Added trust store and trust policy demo script\r\n\r\n\r\n\r\n* Added troubleshooting demo script\r\n\r\n\r\n\r\n* Added local sign demo script\r\n\r\n\r\n\r\n* Removed unneccessary ls command\r\n\r\n\r\n\r\n* Changed env var name\r\n\r\n\r\n\r\n* Added more prep steps\r\n\r\n\r\n\r\n---------\r\n\r\n\r\n\r\n* Added additional cleanup commands (#15)\r\n\r\n\r\n\r\n* Added image lifecycle metadata demo script and cast (#16)\r\n\r\n\r\n\r\n* Renamed demo script for image lifecycle (#17)\r\n\r\n* Added image lifecycle metadata demo script and cast\r\n\r\n\r\n\r\n* Renamed demo script for lifecycle management\r\n\r\n\r\n\r\n---------\r\n\r\n\r\n\r\n* Removed outdated file (#18)\r\n\r\n* Added image lifecycle metadata demo script and cast\r\n\r\n\r\n\r\n* Renamed demo script for lifecycle management\r\n\r\n\r\n\r\n* Deleted outdated file\r\n\r\n\r\n\r\n---------\r\n\r\n\r\n\r\n* Added demo scripts for demose (#19)\r\n\r\n* Added emo script for plugin install\r\n\r\n\r\n\r\n* Added demo script for signing and verification with test key\r\n\r\n\r\n\r\n* Added demo script for signing with remote key\r\n\r\n\r\n\r\n---------\r\n\r\n\r\n\r\n* Added cleanup step and updated script\r\n\r\n\r\n\r\n* Added cleanup steps\r\n\r\n\r\n\r\n* Added more cleanup steps\r\n\r\n\r\n\r\n* Renamed demo scripts (#20)\r\n\r\n\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Updated main branch (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1805337540\" data-permission-text=\"Title is private\" data-url=\"https://github.com/toddysm/cssc-pipeline/issues/21\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/toddysm/cssc-pipeline/pull/21/hovercard\" href=\"https://github.com/toddysm/cssc-pipeline/pull/21\">#21</a>) (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1805339152\" data-permission-text=\"Title is private\" data-url=\"https://github.com/toddysm/cssc-pipeline/issues/22\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/toddysm/cssc-pipeline/pull/22/hovercard\" href=\"https://github.com/toddysm/cssc-pipeline/pull/22\">#22</a>)"}},{"before":"d97f990e91fca559441e89a631443c51844a16f6","after":"a861f5c305a297d1d3ec9d3bdc99823dac025097","ref":"refs/heads/main","pushedAt":"2023-07-14T18:31:24.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"},"commit":{"message":"Updated main branch (#21)\n\n* Added Flask sample app\r\n\r\n* Moved index.html to templates folder\r\n\r\n* Created Dockerfile for the Flask app\r\n\r\n* Updated the README\r\n\r\n* Added action to build image from feature branch\r\n\r\n* Changed to use date as a tag\r\n\r\n* Added action to build from development branch\r\n\r\n* Added image push for Feature branch\r\n\r\n* Added debugging echo\r\n\r\n* Added environment reference\r\n\r\n* Added log and temp files to .gitignore\r\n\r\n* Added provenance generation\r\n\r\n* Fixed penance step\r\n\r\n* Changed to Philips-Labs action\r\n\r\n* Fixed tags command line parameter\r\n\r\n* Added release step with min information\r\n\r\n* Added registry login to the release action\r\n\r\n* Added environment for the release step\r\n\r\n* Removed condition for release step\r\n\r\n* Added code to retrieve container digest\r\n\r\n* Changed code to obtain image manifest\r\n\r\n* Removed release, added provenance step\r\n\r\n* Fixed action yaml error\r\n\r\n* Added sign into ACR\r\n\r\n* Added skopeo to retrieve the digest\r\n\r\n* Changed the provenance step to use skopeo digest\r\n\r\n* Fixed error in the Get Image Digest step\r\n\r\n* Changed the tags cmd line parameter format\r\n\r\n* Fixed tag to latest\r\n\r\n* Removed tags\r\n\r\n* Passing digest between steps\r\n\r\n* Fixed output reference\r\n\r\n* Added showing the provenance step\r\n\r\n* Cleaned up action yaml\r\n\r\n* Switched step order\r\n\r\n* Testing with latest image tag\r\n\r\n* Using date tag for the image\r\n\r\n* Removed the digest parameter for the provenance call\r\n\r\n* Added tags for provenance call\r\n\r\n* Added /temp folder to .gitignore\r\n\r\n* Added step for ORAS installation\r\n\r\n* Fixed step 'run' key\r\n\r\n* Fixed multi-line 'run'\r\n\r\n* Fixed multi-line 'run' key\r\n\r\n* Checking if ORAS it properly installed\r\n\r\n* Added step to push provenance to the registry\r\n\r\n* Fixed ORAS version\r\n\r\n* FIxed ORAS installation step\r\n\r\n* FIxed provenance media type\r\n\r\n* Added annotations\r\n\r\n* Saved annotations to a file\r\n\r\n* Fixed annotation JSON\r\n\r\n* Changed location of provenance file\r\n\r\n* Changed provenance and annotation location\r\n\r\n* Redirected annotations output\r\n\r\n* Fixed annotations step\r\n\r\n* Saved files in the $HOME folder\r\n\r\n* Fixed missing backwards slash in oras push command\r\n\r\n* Changed to relative paths\r\n\r\n* Added /temp folder to .gitignore\r\n\r\n* Added step for ORAS installation\r\n\r\n* Fixed step 'run' key\r\n\r\n* Fixed multi-line 'run'\r\n\r\n* Fixed multi-line 'run' key\r\n\r\n* Checking if ORAS it properly installed\r\n\r\n* Added step to push provenance to the registry\r\n\r\n* Fixed ORAS version\r\n\r\n* FIxed ORAS installation step\r\n\r\n* FIxed provenance media type\r\n\r\n* Added annotations\r\n\r\n* Saved annotations to a file\r\n\r\n* Fixed annotation JSON\r\n\r\n* Changed location of provenance file\r\n\r\n* Changed provenance and annotation location\r\n\r\n* Redirected annotations output\r\n\r\n* Fixed annotations step\r\n\r\n* Saved files in the $HOME folder\r\n\r\n* Fixed missing backwards slash in oras push command\r\n\r\n* Changed to relative paths\r\n\r\n* Added step to print the provenance file\r\n\r\n* Added simple script to assign ownerhip to layers\r\n\r\n* Added docker inspect and python requirements install\r\n\r\n* Added layer annotation\r\n\r\n* Added print of layer annotations\r\n\r\n* Added pushing ownerhip to the registry\r\n\r\n* Changed ownership file location\r\n\r\n* Moved ORAS installation step\r\n\r\n* Added pushing ownership in build step\r\n\r\n* Removed annotations for ownerhip\r\n\r\n* Changed the dev branch build action\r\n\r\n* Added pub and key to .gitignore\r\n\r\n* Added SPDX SBOM for flasksample:v1\r\n\r\n* Added SLSA example\r\n\r\n* Added Cosign signature manifest\r\n\r\n* Added Cosign signature layer\r\n\r\n* Added Cosign downloaded signature\r\n\r\n* Added Cosign attestation files\r\n\r\n* Added decoded payloads\r\n\r\n* Added Cosign attestation verification output\r\n\r\n* Added Cosign image signature verification output\r\n\r\n* Moved signature verification output file.\r\n\r\n* Pretty printed the outputs\r\n\r\n* Added extracted attestation signatures\r\n\r\n* Renamed file\r\n\r\n* Added outputs from the ephemeral key signature verifications\r\n\r\n* Added Rekor logentries\r\n\r\n* Generated SBOMs in various formats\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added manifests pulled from DockerHub\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Pretty formatted manifests\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added manifest from ACR referrers\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added acr manifest list output\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added manifests from GAR\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Renamed file\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Updated .gitignore\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added debug output for JFrog\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added debug output for ECR\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added attach debug output for Quay\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added manifests for Harbor\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added manifest for Zot registry\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added ORAS registry manifests\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added GHCR manifests\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Demo #2 vuln mgmt. Kubecon EU 2023 (#11)\r\n\r\n* Temp commit\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for copy and resign images\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Fixed artifact type for CycloneDX (#12)\r\n\r\n* Temp commit\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for copy and resign images\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Fived CycloneDX artifactType\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* kubeconeu23 notary demos (#13)\r\n\r\n* Updated .gitignore\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for signing with Notation\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Changed the typing speed for local and remote signing\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Changed the env var name\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added trust store and trust policy demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added troubleshooting demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added local sign demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Demo script fixes (#14)\r\n\r\n* Updated .gitignore\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for signing with Notation\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Changed the typing speed for local and remote signing\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Changed the env var name\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added trust store and trust policy demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added troubleshooting demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added local sign demo script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Removed unneccessary ls command\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Changed env var name\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added more prep steps\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added additional cleanup commands (#15)\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added image lifecycle metadata demo script and cast (#16)\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Renamed demo script for image lifecycle (#17)\r\n\r\n* Added image lifecycle metadata demo script and cast\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Renamed demo script for lifecycle management\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Removed outdated file (#18)\r\n\r\n* Added image lifecycle metadata demo script and cast\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Renamed demo script for lifecycle management\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Deleted outdated file\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo scripts for demose (#19)\r\n\r\n* Added emo script for plugin install\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for signing and verification with test key\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added demo script for signing with remote key\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added cleanup step and updated script\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added cleanup steps\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Added more cleanup steps\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n* Renamed demo scripts (#20)\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Toddy Mladenov <toddysm@gmail.com>","shortMessageHtmlLink":"Updated main branch (<a class=\"issue-link js-issue-link\" data-error-text=\"Failed to load title\" data-id=\"1805337540\" data-permission-text=\"Title is private\" data-url=\"https://github.com/toddysm/cssc-pipeline/issues/21\" data-hovercard-type=\"pull_request\" data-hovercard-url=\"/toddysm/cssc-pipeline/pull/21/hovercard\" href=\"https://github.com/toddysm/cssc-pipeline/pull/21\">#21</a>)"}},{"before":"1f2bd7569b9b36d628ee6af73cf03489b52647db","after":null,"ref":"refs/heads/feature/file-rename","pushedAt":"2023-07-14T18:30:36.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"toddysm","name":"Toddy Mladenov","path":"/toddysm","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1007103?s=80&v=4"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"startCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wNi0xMFQwMzo1Nzo0Ni4wMDAwMDBazwAAAARgsFpJ","endCursor":"Y3Vyc29yOnYyOpK7MjAyMy0wNy0xNFQxODozMDozNi4wMDAwMDBazwAAAANV2am1"}},"title":"Activity · toddysm/cssc-pipeline"}