v0.2.14

Changelog

8b7e195 Fix Yarn package provenance generation

v0.2.13

Changelog

b048e76 Add warning to provenance assert --signed
f77619b Ignore non-regular files when computing provenance subjects
53fc6f2 Support attestation bundle for exported Docker images
4a897f8 Support direct attestation bundle access

v0.2.12

Changelog

5741ced Add supporting commands for working with provenance
cc4b5eb Fix provenance generation for yarn offline-mirror packages
5e2aff7 Ignore node_modules in generated provenance
d55f5cc Improve provenance detail
a76b602 Make max provenance bundle entry size configurable
78bc50a Reduce memory need for provenance bundle merging

v0.2.11

Changelog

0b2c345 [provenance] Improve bundle extraction

v0.2.10

Changelog

1d0912e Add SLSA provenance support

v0.2.9

Changelog

663ae48 Add __GIT_COMMIT build arg to Docker builds
9fc87c8 Add filesystem safe name to describe
6340960 Merge branch 'master' of https://github.com/gitpod-io/leeway
f00cb9e Update Go dependencies
75c7f12 Updated release link on Readme
f023318 Use one Yarn cache per build
bc6c6dd [go] Don't run buildCoammand for libraries
f32752e minio support

v0.2.8

Changelog

9d5a138 Bump go version to Go1.17
431246e Update dependencies
d4729c4 [go] Improve dependecy replacement
b000692 [go] Use go mod download instead of go get
8ca9630 [gokart] Add native GoKart support
ead090f fix golang build error

v0.2.7

Changelog

7ad80d7 [generic] Add "DontTest" field analogous to yarn/go packages
996782a [generic] Add "test" field
1cae7b3 add "docker-build-options" for passing options to "docker build"

v0.2.6

Changelog

486ac76 Move to gitpod-io namespace and update deps
f7fa9bc [go linker] Properly ignore non-Go packages

v0.2.5

Changelog

d8f664e [package] Support __git_commit built-in variable