Ratify new v2 by binbin-li · Pull Request #342 · binbin-li/ratify

binbin-li · 2025-02-10T06:15:05Z

Description

What this PR does / why we need it:

Which issue(s) this PR fixes (optional, using `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when the PR gets merged):

Fixes #

Type of change

Please delete options that are not relevant.

Bug fix (non-breaking change which fixes an issue)
New feature (non-breaking change which adds functionality)
Breaking change (fix or feature that would cause existing functionality to not work as expected)
Helm Chart Change (any edit/addition/update that is necessary for changes merged to the main branch)
This change requires a documentation update

How Has This Been Tested?

Please describe the tests that you ran to verify your changes. Please also list any relevant details for your test configuration

Test A
Test B

Checklist:

Does the affected code have corresponding tests?
Are the changes documented, not just with inline documentation, but also with conceptual documentation such as an overview of a new feature, or task-based documentation like a tutorial? Consider if this change should be announced on your project blog.
Does this introduce breaking changes that would require an announcement or bumping the major version?
Do all new files have appropriate license header?

Post Merge Requirements

MAINTAINERS: manually trigger the "Publish Package" workflow after merging any PR that indicates Helm Chart Change

…#1926) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

) Signed-off-by: dahu.kdh <dahu.kdh@alibaba-inc.com>

…#1929) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…project#1936) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ver (notaryproject#1935) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…otaryproject#1934) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1.17.45 (notaryproject#1933) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1932) Signed-off-by: dependabot[bot] <support@github.com>

…#1904) Signed-off-by: Shahram Kalantari <shahramk@gmail.com>

…project#1938) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1939) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1946) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1945) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1948) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1.17.46 (notaryproject#1953) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…yproject#1949) Signed-off-by: akashsinghal <akashsinghal@microsoft.com>

…ect#1952) Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Susan Shi <huish@microsoft.com> Signed-off-by: Binbin Li <libinbin@microsoft.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: Binbin Li <libinbin050215@gmail.com>

Signed-off-by: Jordan Langue <jordan.langue@doctolib.com>

…notaryproject#1957) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ver (notaryproject#1960) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#1963) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: Akash Singhal <akashsinghal@microsoft.com>

…project#1973) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: Akash Singhal <akashsinghal@microsoft.com>

…project#1900) Signed-off-by: Juncheng Zhu <junczhu@microsoft.com> Co-authored-by: Binbin Li <libinbin@microsoft.com> Co-authored-by: Susan Shi <huish@microsoft.com>

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ct#1971) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#2066) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…roject#2069) Signed-off-by: Binbin Li <libinbin@microsoft.com>

Signed-off-by: Binbin Li <libinbin@microsoft.com>

…project#2078) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#2077) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…#2076) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…0.3 (notaryproject#2075) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…1.17.55 (notaryproject#2073) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ect#2074) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…2067) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: Akash Singhal <akashsinghal@microsoft.com>

…#2086) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…o from 1.3.2 to 1.3.3 (notaryproject#2089)

…incompatible (notaryproject#2090)

…roject#2091)

…1.17.57 (notaryproject#2092)

…ect#2093) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: Juncheng Zhu <junczhu@microsoft.com>

…thority host (notaryproject#2097) Signed-off-by: Akash Singhal <akashsinghal@microsoft.com>

…ect#2096) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…project#2095) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: Binbin Li <libinbin050215@gmail.com> Signed-off-by: Binbin Li <libinbin@microsoft.com>

dependabot bot and others added 30 commits November 13, 2024 08:22

chore: Bump github/codeql-action from 3.27.1 to 3.27.3 (notaryproject…

e73d4f5

…#1926) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

feat: support alibaba cloud rrsa store auth provider (notaryproject#1909

0837c02

) Signed-off-by: dahu.kdh <dahu.kdh@alibaba-inc.com>

chore: Bump github/codeql-action from 3.27.3 to 3.27.4 (notaryproject…

14f75c9

…#1929) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump alpine from beefdbd to 1e42bbe (notaryproject#1937)

7e6e96c

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump golang from 4cfe4a9 to 147f428 in /httpserver (notary…

2b789f3

…project#1936) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump distroless/static from 3a03fc0 to d71f4b2 in /httpser…

d350f5c

…ver (notaryproject#1935) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump github.com/aliyun/credentials-go from 1.3.10 to 1.3.11 (n…

0948848

…otaryproject#1934) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.44 to …

4ae49e0

…1.17.45 (notaryproject#1933) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump codecov/codecov-action from 4.6.0 to 5.0.2 (notaryproject…

a3b5d53

…#1932) Signed-off-by: dependabot[bot] <support@github.com>

chore: Replace deprecated autorest SDK with azidentity (notaryproject…

281ca40

…#1904) Signed-off-by: Shahram Kalantari <shahramk@gmail.com>

chore: Bump step-security/harden-runner from 2.10.1 to 2.10.2 (notary…

9b5d31b

…project#1938) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump codecov/codecov-action from 5.0.2 to 5.0.4 (notaryproject…

04d1de7

…#1939) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump codecov/codecov-action from 5.0.4 to 5.0.7 (notaryproject…

675a5d6

…#1946) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump github/codeql-action from 3.27.4 to 3.27.5 (notaryproject…

6c5604b

…#1945) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump anchore/sbom-action from 0.17.7 to 0.17.8 (notaryproject#…

b31e250

…1948) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.45 to …

67cd411

…1.17.46 (notaryproject#1953) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix: add missing pod annotations and labels to deployment spec (notar…

aae1aa6

…yproject#1949) Signed-off-by: akashsinghal <akashsinghal@microsoft.com>

chore: bump up golangci-lint version (notaryproject#1961)

d8dfa60

Signed-off-by: Binbin Li <libinbin050215@gmail.com>

fix(tls): allowing TLS when crd-manager disabled (notaryproject#1954)

666849a

Signed-off-by: Jordan Langue <jordan.langue@doctolib.com>

chore: Bump github.com/aws/aws-sdk-go-v2/config from 1.28.3 to 1.28.6 (…

527004b

…notaryproject#1957) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump distroless/static from d71f4b2 to 6cd937e in /httpser…

ca88b62

…ver (notaryproject#1960) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump github/codeql-action from 3.27.5 to 3.27.6 (notaryproject…

fa9be71

…#1963) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

build: add image signing for all release images (notaryproject#1947)

a2efeb7

Signed-off-by: Akash Singhal <akashsinghal@microsoft.com>

chore: Bump golang from 73f06be to 574185e in /httpserver (notary…

78b2eba

…project#1973) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

docs: update dev image release guidance (notaryproject#1974)

d176ea0

Signed-off-by: Akash Singhal <akashsinghal@microsoft.com>

feat: Implementation of KMP CRL revocation factory with cache (notary…

59240ad

…project#1900) Signed-off-by: Juncheng Zhu <junczhu@microsoft.com> Co-authored-by: Binbin Li <libinbin@microsoft.com> Co-authored-by: Susan Shi <huish@microsoft.com>

chore: Bump alpine from 1e42bbe to 21dc606 (notaryproject#1972)

bb71ae7

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump google.golang.org/grpc from 1.68.0 to 1.68.1 (notaryproje…

dd3a6b0

…ct#1971) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump actions/cache from 4.1.2 to 4.2.0 (notaryproject#1967)

0c39265

Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot bot and others added 22 commits January 24, 2025 15:51

chore: Bump github/codeql-action from 3.28.3 to 3.28.4 (notaryproject…

d37ab24

…#2066) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix: enforce host checking before exchanging a refresh token (notaryp…

b6ad5d8

…roject#2069) Signed-off-by: Binbin Li <libinbin@microsoft.com>

chore: add more acr endpoints (notaryproject#2079)

8f3965f

Signed-off-by: Binbin Li <libinbin@microsoft.com>

chore: Bump golang from 51a6466 to 8c10f21 in /httpserver (notary…

2e8e488

…project#2078) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump github/codeql-action from 3.28.4 to 3.28.5 (notaryproject…

69e3961

…#2077) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump codecov/codecov-action from 5.3.0 to 5.3.1 (notaryproject…

5bd5509

…#2076) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump github.com/google/go-containerregistry from 0.20.2 to 0.2…

ec7fed2

…0.3 (notaryproject#2075) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.54 to …

42f30ea

…1.17.55 (notaryproject#2073) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump github.com/sigstore/rekor from 1.3.7 to 1.3.8 (notaryproj…

5988e88

…ect#2074) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump anchore/sbom-action from 0.17.9 to 0.18.0 (notaryproject#…

6af40d8

…2067) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: bump ristretto pkg version (notaryproject#2085)

9e4c5e2

Signed-off-by: Akash Singhal <akashsinghal@microsoft.com>

chore: Bump github/codeql-action from 3.28.5 to 3.28.8 (notaryproject…

38b2e7f

…#2086) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump github.com/AzureAD/microsoft-authentication-library-for-g…

71305cf

…o from 1.3.2 to 1.3.3 (notaryproject#2089)

chore: Bump github.com/docker/cli from 27.5.0+incompatible to 27.5.1+…

50a590e

…incompatible (notaryproject#2090)

chore: Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 (notaryp…

7dde730

…roject#2091)

chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.55 to …

c7d3e0e

…1.17.57 (notaryproject#2092)

chore: Bump github.com/sigstore/rekor from 1.3.8 to 1.3.9 (notaryproj…

15d0b79

…ect#2093) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: upgrade CRL revocation factory interface (notaryproject#2028)

fb5b227

Signed-off-by: Juncheng Zhu <junczhu@microsoft.com>

chore: update dev chart (notaryproject#2094)

12aa045

Signed-off-by: Juncheng Zhu <junczhu@microsoft.com>

fix: update Azure authentication utility method to provide correct au…

4ebb248

…thority host (notaryproject#2097) Signed-off-by: Akash Singhal <akashsinghal@microsoft.com>

chore: Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 (notaryproj…

6344a15

…ect#2096) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore: Bump golangci/golangci-lint-action from 6.2.0 to 6.3.0 (notary…

2ee23a3

…project#2095) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

binbin-li force-pushed the ratify-new-v2 branch from 9dc19a3 to 945890b Compare February 10, 2025 06:26

binbin-li force-pushed the ratify-new-v2 branch 2 times, most recently from 58cce9d to 60f5284 Compare March 14, 2025 05:58

binbin-li force-pushed the ratify-new-v2 branch from 60f5284 to 9e98a56 Compare March 31, 2025 14:54

binbin-li force-pushed the ratify-new-v2 branch 2 times, most recently from f7fc3ad to d8c0279 Compare April 14, 2025 03:17

feat: add ratify v2 server

7c6bec9

Signed-off-by: Binbin Li <libinbin050215@gmail.com> Signed-off-by: Binbin Li <libinbin@microsoft.com>

binbin-li force-pushed the ratify-new-v2 branch from d8c0279 to 7c6bec9 Compare April 14, 2025 07:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Ratify new v2#342

Ratify new v2#342
binbin-li wants to merge 122 commits intov2from
ratify-new-v2

binbin-li commented Feb 10, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

9 participants

Conversation

binbin-li commented Feb 10, 2025

Description

What this PR does / why we need it:

Which issue(s) this PR fixes (optional, using fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when the PR gets merged):

Type of change

How Has This Been Tested?

Checklist:

Post Merge Requirements

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

9 participants

Which issue(s) this PR fixes (optional, using `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close the issue(s) when the PR gets merged):