v0.2.0

Changelog

First release since moving to in-toto org.

⚠️ Warning ⚠️

go modules have been renamed from github.com/testifysec/go-witness => github.com/in-toto/go-witness

What's Changed

• Add support for controller-gen deepcopy by @jkjell in #53
• chore(deps): bump github.com/cloudflare/circl from 1.3.2 to 1.3.3 by @dependabot in #44
• chore(deps): bump golang.org/x/net from 0.7.0 to 0.17.0 by @dependabot in #54
• chore(deps): bump google.golang.org/grpc from 1.53.0 to 1.56.3 by @dependabot in #60
• Add maintainers file by @jkjell in #64
• Add dependabot config, reusable witness workflow, and update pipeline by @jkjell in #67
• Changed to pointer receiver when both were mixed by @naveensrinivasan in #58
• chore: bump actions/checkout from 2 to 4 by @dependabot in #68
• chore: bump actions/setup-go from 2 to 4 by @dependabot in #69
• chore: bump github.com/aws/aws-sdk-go from 1.44.207 to 1.44.334 by @dependabot in #70
• chore: bump github.com/spiffe/go-spiffe/v2 from 2.1.2 to 2.1.6 by @dependabot in #71
• chore: bump go.step.sm/crypto from 0.25.0 to 0.25.2 by @dependabot in #72
• chore: bump k8s.io/apimachinery from 0.26.1 to 0.26.10 by @dependabot in #73
• chore: bump github.com/sigstore/sigstore from 1.5.1 to 1.5.2 by @dependabot in #74
• chore: bump github.com/stretchr/testify from 1.8.2 to 1.8.4 by @dependabot in #80
• chore: bump k8s.io/apimachinery from 0.26.10 to 0.26.11 by @dependabot in #79
• chore: bump github.com/mattn/go-isatty from 0.0.17 to 0.0.20 by @dependabot in #77
• chore: bump github.com/open-policy-agent/opa from 0.49.1 to 0.49.2 by @dependabot in #78
• chore: bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by @dependabot in #81
• Update link to attestor examples by @noqcks in #84
• Refactoring error messages to use %w formatting directive and fix logging issue by @ChaosInTheCRD in #85
• [StepSecurity] Apply security best practices by @step-security-bot in #86
• Fix pre-commit violations by @jkjell in #87
• Changes to improve CLOMonitor Score by @jkjell in #88
• Don't run FOSSA Scan on PR from fork by @jkjell in #95
• chore: bump ossf/scorecard-action from 2.0.6 to 2.3.1 by @dependabot in #89
• chore: bump actions/setup-go from 4.1.0 to 5.0.0 by @dependabot in #93
• chore: bump actions/checkout from 3.6.0 to 4.1.1 by @dependabot in #92
• chore: bump actions/dependency-review-action from 2.5.1 to 3.1.4 by @dependabot in #91
• chore: bump github/codeql-action from 2.22.8 to 2.22.9 by @dependabot in #90
• Improving --signer-fulcio-token flag to accept both path and raw token string by @ChaosInTheCRD in #82
• Updating README by @ChaosInTheCRD in #97
• Adding go test command to Makefile by @ChaosInTheCRD in #96
• WIP: Migrating Go module to in-toto by @ChaosInTheCRD in #101
• Fixing bug introduced in logs - warning and debug logs not printing by @ChaosInTheCRD in #103
• Point to v0.2.0 of archivista by @jkjell in #105

New Contributors

• @jkjell made their first contribution in #53
• @naveensrinivasan made their first contribution in #58
• @noqcks made their first contribution in #84
• @ChaosInTheCRD made their first contribution in #85
• @step-security-bot made their first contribution in #86

Full Changelog: v0.1.17...v0.2.0