Shubham Hibare 17b104771a feat(signature): Checksum signature verification (#1670) ... * feat(signature): Checksum signature verification Signed-off-by: Shubham Hibare <shubham@hibare.in> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * Update message Signed-off-by: Shubham Hibare <shubham@hibare.in> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * address comments Signed-off-by: Shubham Hibare <shubham@hibare.in> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * consider -v flag across supported releases Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add tests for install.sh signature verification Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * check that release is run from main Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * summarize install.sh flags and recommendations Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * remove regex use on cosign verify-blob Co-authored-by: Dominique Martinet <asmadeus@codewreck.org> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * simplify the compare_semver install function Co-authored-by: Dominique Martinet <asmadeus@codewreck.org> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * add more tests to compare_semver Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * nit copy change for install help Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * keep original compare_semver implementation Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * update copy to include default install path Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Shubham Hibare <shubham@hibare.in> Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Alex Goodman <wagoodman@users.noreply.github.com> Co-authored-by: Dominique Martinet <asmadeus@codewreck.org>		2024-06-06 21:23:04 +00:00
..
cli	chore: update syft source providers (#1727)	2024-02-27 20:47:51 -05:00
install	feat(signature): Checksum signature verification (#1670)	2024-06-06 21:23:04 +00:00
integration	add skopeo to managed utilities (#1915)	2024-06-06 18:58:34 +00:00
quality	fix: adds ignore rules for kernel-headers indirect matches (#1787)	2024-04-15 13:29:19 -07:00
grype-test-config.yaml	feat: disable CPE-based matching for GHSA ecosystems by default (#1412)	2023-10-12 09:07:33 -04:00
ignore-att-signature.yaml	chore: prune cosign dependency for grype builds (#1100)	2023-01-31 11:42:40 -05:00
validate-grype-db-schema.py	Port grype-db to grype (#587)	2022-01-12 10:03:22 -05:00