[v0.11] cherry-picks#3463

Merged

tonistiigi merged 39 commits intomoby:v0.11from

tonistiigi:v0.11-picks

Jan 6, 2023

Commits on Jan 6, 2023

fix indentation for in-toto and traces
tonistiigi
committed
add possibility to override filename for provenance
tonistiigi
committed
provenance: move hermetic field into a correct struct
tonistiigi
committed
provenance: fix the order of the build steps
tonistiigi
committed
sshforward: skip conn close on stream CloseSend.

sipsma
authored and
tonistiigi
committed
containerdexecutor: add network namespace callback

corhere
authored and
tonistiigi
committed
frontend: fix testMultiStageImplicitFrom to account for busybox changes

thaJeztah
authored and
tonistiigi
committed
feat: allow ignoring remote cache-export error if failing

JordanGoasdoue
authored and
tonistiigi
committed
add cache stats to the build history API
tonistiigi
committed
Solve panic due to concurrent access to ExportSpans

gsaraf
authored and
tonistiigi
committed
gateway: add addition check to prevent content func from being forwarded

jedevc
authored and
tonistiigi
committed
attestations: propogate metadata through unbundling

jedevc
authored and
tonistiigi
committed
attestations: ignore spdx parse errors

jedevc
authored and
tonistiigi
committed
result: change reason types to strings

jedevc
authored and
tonistiigi
committed
exporter: make attestation validation public

jedevc
authored and
tonistiigi
committed
attestation: validate attestations before unbundling as well

jedevc
authored and
tonistiigi
committed
attestation: forbid provenance attestations from frontend

jedevc
authored and
tonistiigi
committed
vendor: update spdx/tools-golang to d6f58551be3f

jedevc
authored and
tonistiigi
committed
docs: add slsa provenance documentation

jedevc
authored and
tonistiigi
committed
docs: update provenance docs
tonistiigi
committed
docs: update hermetic field after it was moved in implementation
tonistiigi
committed
docs: add filename to provenance attestation
tonistiigi
committed
docs: slsa editorial fixes

dvdksn
authored and
tonistiigi
committed
docs: moved slsa definitions to a separate page

dvdksn
authored and
tonistiigi
committed
docs: slsa review updates

dvdksn
authored and
tonistiigi
committed
docs: add cross-linking between slsa pages

jedevc
authored and
tonistiigi
committed
docs: tidy up json examples for slsa definitions

jedevc
authored and
tonistiigi
committed
docs: rename slsa.md to slsa-provenance.md

jedevc
authored and
tonistiigi
committed
docs: move attestation docs to dedicated directory

jedevc
authored and
tonistiigi
committed
docs: add index page for attestations

jedevc
authored and
tonistiigi
committed
attestation: only supplement file data for the core scan

jedevc
authored and
tonistiigi
committed
ociindex: refactor to hide implementation internally

jedevc
authored and
tonistiigi
committed
ociindex: add utility method for getting a single manifest from the index

jedevc
authored and
tonistiigi
committed
progress: fix clean context cancelling
tonistiigi
committed
vendor: update fsutil to fb43384
tonistiigi
committed
llbsolver: fix panic when requesting provenance on nil result
tonistiigi
committed
exporter: force enabling inline attestations for image export

jedevc
authored and
tonistiigi
committed
exporter: allow configuring inline attestations for image exporters

jedevc
authored and
tonistiigi
committed
testutil: pin busybox and alpine used in releases
tonistiigi
committed