You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+14-6Lines changed: 14 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,6 +11,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
11
11
12
12
-[Unreleased](#unreleased)
13
13
-[Unreleased: Vars context recorded in provenance](#unreleased-vars-context-recorded-in-provenance)
14
+
-[Container generator](#container-generator)
15
+
-[New Features](#new-features)
14
16
-[v2.0.0](#v200)
15
17
-[v2.0.0: Breaking Change: upload-artifact and download-artifact](#v200-breaking-change-upload-artifact-and-download-artifact)
16
18
-[v2.0.0: Breaking Change: attestation-name Workflow Input and Output](#v200-breaking-change-attestation-name-workflow-input-and-output)
@@ -33,19 +35,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
33
35
-[v1.6.0](#v160)
34
36
-[Summary of changes](#summary-of-changes)
35
37
-[Go builder](#go-builder)
36
-
-[New Features](#new-features)
37
-
-[Generic generator](#generic-generator)
38
38
-[New Features](#new-features-1)
39
-
-[Container generator](#container-generator)
39
+
-[Generic generator](#generic-generator)
40
+
-[New Features](#new-features-2)
41
+
-[Container generator](#container-generator-1)
40
42
-[Changelog since v1.5.0](#changelog-since-v150)
41
43
-[v1.5.0](#v150)
42
44
-[Summary of changes](#summary-of-changes-1)
43
45
-[Go builder](#go-builder-1)
44
-
-[New Features](#new-features-2)
45
-
-[Generic generator](#generic-generator-1)
46
46
-[New Features](#new-features-3)
47
-
-[Container generator](#container-generator-1)
47
+
-[Generic generator](#generic-generator-1)
48
48
-[New Features](#new-features-4)
49
+
-[Container generator](#container-generator-2)
50
+
-[New Features](#new-features-5)
49
51
-[Changelog since v1.4.0](#changelog-since-v140)
50
52
-[v1.4.0](#v140)
51
53
-[What's Changed](#whats-changed)
@@ -112,6 +114,12 @@ duplication."
112
114
container generators. The `vars` context cannot affect the build in the Go
113
115
builder so it is not recorded.
114
116
117
+
#### Container generator
118
+
119
+
##### New Features
120
+
121
+
- A new [`recursive`](https://github.com/slsa-framework/slsa-github-generator/blob/v1.5.0/internal/builders/container/README.md#workflow-inputs) input was added to allow users to pass `--recursive` option to the provenance attestation, usefull when signing `multi-arch` images.
122
+
115
123
## v2.0.0
116
124
117
125
### v2.0.0: Breaking Change: upload-artifact and download-artifact
| `image` | **(Required)** The OCI image name. This must not include a tag or digest. |
210
-
| `digest` | **(Required)** The OCI image digest. The image digest of the form '<algorithm>:<digest>' (e.g. 'sha256:abcdef...') |
211
-
| `registry-username` | Username to log in the container registry. Either `registry-username` input or `registry-username` secret is required. |
212
-
| `compile-generator` | Whether to build the generator from source. This increases build time by ~2m.<br>Default: `false`. |
213
-
| `private-repository` | Set to true to opt-in to posting to the public transparency log. Will generate an error if false for private repositories. This input has no effect for public repositories. See [Private Repositories](#private-repositories).<br>Default: `false` |
214
-
| `continue-on-error` | Set to true to ignore errors. This option is useful if you won't want a failure to fail your entire workflow.<br>Default: `false`|
215
-
| `gcp-workload-identity-provider` | The full identifier of the Workload Identity Provider, including the project number, pool name, and provider name. If provided, this must be the full identifier which includes all parts:<br>`projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider` |
216
-
| `gcp-service-account` | Email address or unique identifier of the Google Cloud service account for which to generate credentials. For example:<br>`my-service-account@my-project.iam.gserviceaccount.com` |
217
-
| `provenance-registry-username` | Username when publishing to provenance registry (option 'provenance-registry') instead of image registry. Either `provenance-registry-username` input or `provenance-registry-username` secret is required. |
218
-
| `provenance-registry` | If set, provenance is pushed to this registry instead of image registry. (e.g. `gcr.io/my-new-repo`) |
| `image` | **(Required)** The OCI image name. This must not include a tag or digest. |
210
+
| `digest` | **(Required)** The OCI image digest. The image digest of the form '<algorithm>:<digest>' (e.g. 'sha256:abcdef...') |
211
+
| `registry-username` | Username to log in the container registry. Either `registry-username` input or `registry-username` secret is required. |
212
+
| `compile-generator` | Whether to build the generator from source. This increases build time by ~2m.<br>Default: `false`. |
213
+
| `private-repository` | Set to true to opt-in to posting to the public transparency log. Will generate an error if false for private repositories. This input has no effect for public repositories. See [Private Repositories](#private-repositories).<br>Default: `false` |
214
+
| `continue-on-error` | Set to true to ignore errors. This option is useful if you won't want a failure to fail your entire workflow.<br>Default: `false`|
215
+
| `gcp-workload-identity-provider` | The full identifier of the Workload Identity Provider, including the project number, pool name, and provider name. If provided, this must be the full identifier which includes all parts:<br>`projects/123456789/locations/global/workloadIdentityPools/my-pool/providers/my-provider` |
216
+
| `gcp-service-account` | Email address or unique identifier of the Google Cloud service account for which to generate credentials. For example:<br>`my-service-account@my-project.iam.gserviceaccount.com` |
217
+
| `provenance-registry-username` | Username when publishing to provenance registry (option 'provenance-registry') instead of image registry. Either `provenance-registry-username` input or `provenance-registry-username` secret is required. |
218
+
| `provenance-registry` | If set, provenance is pushed to this registry instead of image registry. (e.g. `gcr.io/my-new-repo`) |
219
+
| `recursive` | If set, attestation is performed recursively on the image. Usefull when a multi-arch image is used. |
0 commit comments