Skip to content

v1.3.0
Compare
Choose a tag to compare
@sigstore-bot sigstore-bot released this 01 May 20:50
· 620 commits to main since this release
v1.3.0
This tag was signed with the committer’s verified signature.
haydentherapper Hayden B
SSH Key Fingerprint: jzX0b3tCjduspDDUI0+hECHgZQGwB+Mmm4vFFsg3mDY Learn about vigilant mode.
d8fe6bd
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

v1.3.0

Fulcio 1.3.0 adds support for GitLab CI.

Enhancements

  • Add GitLab.com OIDC to Fulcio (#983)
  • Change ParseDerString to Public Function (#1119)
  • Support enterprise-unique GitHub Actions OIDC issuer URLs (#1088)

Documentation

  • Map GitLab OIDC token claims to Fulcio OIDs (#1097)
  • Mark GitLab JWT claim fields that are still WIP. (#1139)
  • oidc.md: Add section for how to select SANs. (#1127)
  • oid-info: Drop Build Signer Digest requirement from MUST -> SHOULD (#1126)
  • update docs to use CDN-backed TUF endpoint (#1108)

Contributors

  • Alishan Ladhani
  • Billy Lynch
  • Bob Callaway
  • Carlos Tadeu Panato Junior
  • Hayden B
  • James Ma
  • Paul Welch
  • Reed Loden
  • Sandipan Panda

Full Changelog: v1.2.0...v1.3.0

Assets 31
Loading