v0.3.2

Changelog

• 3d51947: Add Provenance and SBOM generation (Brend Smits (@Brend-Smits))
• 7181605: Apply suggestions from code review (Brend Smits (@Brend-Smits))
• b9a7ccb: Remove matrix repo and add is as a env variable (Brend Smits (@Brend-Smits))
• b08a1f6: Use cosign-attach sbom command (Brend Smits (@Brend-Smits))

Full Changelog: v0.3.1...v0.3.2

v0.3.1

Changelog

• 4df5c3b: Fix install-dir when using the default (Marco Franssen (@marcofranssen))

Full Changelog: v0.3.0...v0.3.1

v0.3.0

Changelog

• b7d29d7: ⬆️ Bump actions/cache from 2.1.7 to 3 (Dependabot (@dependabot)[bot])
• 69d2e7f: Add documentation for the installer action (Marco Franssen (@marcofranssen))
• 6f2a987: Add installer-action (Marco Franssen (@marcofranssen))
• a8302cf: Add tag prefix that allows you to store attestations in a single registry (Brend Smits (@Brend-Smits))
• b110f9c: Add tests for Publish and BuildOciRef methods (Brend Smits (@Brend-Smits))
• 02967a9: Bump Go from 1.17 to 1.18 (Marco Franssen (@marcofranssen))
• e86ddb1: Bump fatt default version installer-action (Marco Franssen (@marcofranssen))
• 1d093e0: Finish up publish to work without signed blobs (Marco Franssen (@marcofranssen))
• d9f05ae: Fix filters #21 (Marco Franssen (@marcofranssen))
• 453afe4: Fix windows install and Linux permissions (Brend Smits (@Brend-Smits))
• 87095d4: Implement attestation publishing (Marco Franssen (@marcofranssen))
• 9e30ff0: Implement blob upload for attestation (Marco Franssen (@marcofranssen))
• a72e488: Implement logic to create Package URLs (Marco Franssen (@marcofranssen))
• 8d662f5: Implement ociRef to publish towards by hardcoded convention (Marco Franssen (@marcofranssen))
• 1368dfe: Implement publishing discovery file (Marco Franssen (@marcofranssen))
• 4c81aec: Improve README.md a bit further. (Marco Franssen (@marcofranssen))
• 5873566: Improve documentation in README.md (Marco Franssen (@marcofranssen))
• 672619e: Improve error messages (Marco Franssen (@marcofranssen))
• 37b1c09: Improve readability of README (Brend Smits (@Brend-Smits))
• 26f1d0f: Pin cache action on patch release version (Marco Franssen (@marcofranssen))
• 4e654e2: Refactor purl parsing + add more tests (Marco Franssen (@marcofranssen))
• a89dfe6: Remove whiteline (Marco Franssen (@marcofranssen))
• f932aaa: Tidy go modules (Marco Franssen (@marcofranssen))

Full Changelog: v0.1.0...v0.3.0

v0.2.0

Changelog

• b7d29d7: ⬆️ Bump actions/cache from 2.1.7 to 3 (Dependabot (@dependabot)[bot])
• bab10d1: Add documentation for the installer action (Marco Franssen (@marcofranssen))
• 96ef07e: Add installer-action (Marco Franssen (@marcofranssen))
• 841e2c3: Bump Go from 1.17 to 1.18 (Marco Franssen (@marcofranssen))
• 4c66e29: Fix filters #21 (Marco Franssen (@marcofranssen))
• a21b5dc: Improve README.md a bit further. (Marco Franssen (@marcofranssen))
• 22addaa: Improve documentation in README.md (Marco Franssen (@marcofranssen))
• dd2c0f8: Improve readability of README (Brend Smits (@Brend-Smits))
• 26f1d0f: Pin cache action on patch release version (Marco Franssen (@marcofranssen))
• aaf0208: Tidy go modules (Marco Franssen (@marcofranssen))

Full Changelog: v0.2.0-rc...v0.2.0

v0.2.0-rc2

Changelog

• bab10d1: Add documentation for the installer action (Marco Franssen (@marcofranssen))
• 96ef07e: Add installer-action (Marco Franssen (@marcofranssen))
• 841e2c3: Bump Go from 1.17 to 1.18 (Marco Franssen (@marcofranssen))
• 4c66e29: Fix filters #21 (Marco Franssen (@marcofranssen))
• a21b5dc: Improve README.md a bit further. (Marco Franssen (@marcofranssen))
• 22addaa: Improve documentation in README.md (Marco Franssen (@marcofranssen))
• dd2c0f8: Improve readability of README (Brend Smits (@Brend-Smits))
• aaf0208: Tidy go modules (Marco Franssen (@marcofranssen))

Full Changelog: v0.2.0-rc...v0.2.0-rc2

v0.2.0-rc

Changelog

• e007356: Finish up publish to work without signed blobs (Marco Franssen (@marcofranssen))
• 1b35963: Implement attestation publishing (Marco Franssen (@marcofranssen))
• e4e4c8f: Implement blob upload for attestation (Marco Franssen (@marcofranssen))
• 3c89192: Implement logic to create Package URLs (Marco Franssen (@marcofranssen))
• 6ad5429: Implement ociRef to publish towards by hardcoded convention (Marco Franssen (@marcofranssen))
• f7928a0: Implement publishing discovery file (Marco Franssen (@marcofranssen))
• 9aa6f16: Refactor purl parsing + add more tests (Marco Franssen (@marcofranssen))

Full Changelog: v0.1.0...v0.2.0-rc

v0.1.0

Changelog

• c67762a: ⬆️ Bump actions/checkout from 2.4.0 to 3 (Dependabot (@dependabot)[bot])
• 11c746f: ⬆️ Bump actions/setup-go from 2.2.0 to 3 (Dependabot (@dependabot)[bot])
• 7d487ed: ⬆️ Bump docker/login-action from 1.14.0 to 1.14.1 (Dependabot (@dependabot)[bot])
• 0635515: ⬆️ Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 (Dependabot (@dependabot)[bot])
• 35eb5c2: ⬆️ Bump github.com/stretchr/testify from 1.7.0 to 1.7.1 (Dependabot (@dependabot)[bot])
• f5143bb: ⬆️ Bump sigstore/cosign-installer from 2.0.0 to 2.1.0 (Dependabot (@dependabot)[bot])
• 7f74f46: Add .editorconfig and .gitignore (Marco Franssen (@marcofranssen))
• 074e6bf: Add CODEOWNERS (Marco Franssen (@marcofranssen))
• 9759663: Add Docker output format in list command (Brend Smits (@Brend-Smits))
• eba95f5: Add MIT license to this repo (Jeroen Knoops (@JeroenKnoops))
• fe6c2b7: Add attestation resolver interface (Marco Franssen (@marcofranssen))
• c5baa6d: Add attestations.txt resolver (Marco Franssen (@marcofranssen))
• 663d3ac: Add basic version command (Brend Smits (@Brend-Smits))
• 8bb3ce5: Add ci workflow (Marco Franssen (@marcofranssen))
• 4be7a41: Add dependabot config (Marco Franssen (@marcofranssen))
• 70e0229: Add filter option to list command (Brend Smits (@Brend-Smits))
• 674ded3: Add filter options (Brend Smits (@Brend-Smits))
• 7eb32bf: Add new resolver that tries to resolve using all resolvers (Marco Franssen (@marcofranssen))
• 95ad19e: Add npm example with sbom (Marco Franssen (@marcofranssen))
• ea7ece7: Add output-format option with tests for version command (Brend Smits (@Brend-Smits))
• 5c3ed11: Add resolver configuration flag to cli (Marco Franssen (@marcofranssen))
• 851af55: Add support for Docker purls (Marco Franssen (@marcofranssen))
• 1fb2510: Add test for resolver and fix implementation (Marco Franssen (@marcofranssen))
• 5322b99: Add tests for filtering attestations (Brend Smits (@Brend-Smits))
• ee5cb90: Add version command to README documentation (Brend Smits (@Brend-Smits))
• b761dd3: Add workflow to created signed releases (Marco Franssen (@marcofranssen))
• 34ba3cf: Allow to specify which file-path to traverse (Marco Franssen (@marcofranssen))
• 3d5a265: Apply suggestions from codereview (Brend Smits (@Brend-Smits))
• 8e82dfd: Bump cosign from v1.5.2 to v1.6.0 (Marco Franssen (@marcofranssen))
• 71a9f5e: Fix release workflow permissions (Marco Franssen (@marcofranssen))
• 7f7dea1: Fix workflow permissions (Marco Franssen (@marcofranssen))
• 6d062cd: Happy Linter (Brend Smits (@Brend-Smits))
• 9b30bec: Implement list command to output PURLs (Marco Franssen (@marcofranssen))
• 70cef26: Implement logic to resolve sbom purl from package.json (Marco Franssen (@marcofranssen))
• 43d324f: Init cli (Marco Franssen (@marcofranssen))
• c5d8a12: Move debug output to stderr (Marco Franssen (@marcofranssen))
• e1e885e: Move packagejson resolver implementation to new package (Marco Franssen (@marcofranssen))
• c778376: Refactor GetPrinter to options (Marco Franssen (@marcofranssen))
• 4f9b1ce: Refactor GetResolver to options (Marco Franssen (@marcofranssen))
• 760f932: Refactor lint task in Makefile (Marco Franssen (@marcofranssen))
• dfd3cc7: Refactor list command to support discovering from fs and oci (Marco Franssen (@marcofranssen))
• d6f2db7: Remove old implementation for listing attestations (Marco Franssen (@marcofranssen))
• 78c478f: Remove the sget specific output on signature verification (Marco Franssen (@marcofranssen))
• 75321df: Simplify by using io.Reader (Marco Franssen (@marcofranssen))
• 4384925: Tidy go modules (Marco Franssen (@marcofranssen))
• 7a73ab5: Update docs in README.md (Marco Franssen (@marcofranssen))
• 8e3805d: Update example to fetch all attestations returned via sget (Marco Franssen (@marcofranssen))
• b69c100: Update implementation for npm to use attestations array (Marco Franssen (@marcofranssen))
• 38656d7: Update readme with fatt usage documentation (Brend Smits (@Brend-Smits))

Full Changelog: ...v0.1.0