Commits

Branch selector

 main

User selector

All users

All time

Commit History

Commits on May 19, 2026

• chore: bump github.com/in-toto/in-toto-golang from 0.10.0 to 0.11.0 (#1600)

  Show description for bffc5a7
  

  dependabot[bot]

  and

  sozercan

  authored
  bffc5a7

  Copy full SHA for bffc5a7

• chore: bump github.com/moby/moby/api from 1.54.1 to 1.54.2 (#1584)

  Show description for 12a0836
  

  dependabot[bot]

  and

  sozercan

  authored
  12a0836

  Copy full SHA for 12a0836

• docs: add FAQ for GPG key expiry (#1610)

  Show description for 4a1e60f
  

  omercnet

  and

  sozercan

  authored
  4a1e60f

  Copy full SHA for 4a1e60f

Commits on May 18, 2026

• build: add -coverpkg=./pkg/... to unit test target (#1575)

  Show description for 1f2bfc0
  omercnet

  authored
  1f2bfc0

  Copy full SHA for 1f2bfc0

Commits on May 14, 2026

• chore: bump the all group across 1 directory with 12 updates (#1606)

  Show description for 1ba3a82
  

  dependabot[bot]

  and

  ashnamehrotra

  authored
  1ba3a82

  Copy full SHA for 1ba3a82

• fix: capture original manifest annotations before patching to prevent tag overwrite (#1605)

  Show description for ad69ae9
  

  3 peopleauthored
  ad69ae9

  Copy full SHA for ad69ae9

• fix: govuln fix - update go version to 1.25.10 (#1608)

  Show description for 88248b9
  ashnamehrotra

  authored
  88248b9

  Copy full SHA for 88248b9

Commits on May 13, 2026

• ci(integration): pin Trivy DB digest to make CI reproducible (#1592)

  Show description for 46882ed
  

  3 peopleauthored
  46882ed

  Copy full SHA for 46882ed

Commits on May 8, 2026

• fix(frontend): restore /tmp on scratch image, switch to distroless, build real Dockerfile in e2e (#1597)

  Show description for 78d7412
  

  3 peopleauthored
  78d7412

  Copy full SHA for 78d7412

Commits on May 6, 2026

• docs: document private registry app patching limitation (#1595)

  Show description for a077ddf
  robert-cronin

  authored
  a077ddf

  Copy full SHA for a077ddf

• chore: bump the all group in /website with 3 updates (#1585)

  Show description for 1934ba8
  

  dependabot[bot]

  and

  ashnamehrotra

  authored
  1934ba8

  Copy full SHA for 1934ba8

• chore: Generate v0.14.x docs (#1590)

  Show description for 14a42e1
  

  github-actions[bot]

  and

  robert-cronin

  authored
  14a42e1

  Copy full SHA for 14a42e1

Commits on May 5, 2026

• fix: reject whitespace/control chars in Go binary path validation (#1586)

  Show description for 5017a8a
  

  sozercan

  and

  robert-cronin

  authored
  5017a8a

  Copy full SHA for 5017a8a

Commits on May 4, 2026

• docs(adopters): add Verity to Copa CLI adopters (#1583)

  Show description for 79ea3a1
  robert-cronin

  authored
  79ea3a1

  Copy full SHA for 79ea3a1

• fix(release): keep frontend.Dockerfile Go version aligned with go.mod and harden release pipeline (#1571)

  Show description for ae878ee
  

  robert-cronin

  and

  Copilot

  authored
  ae878ee

  Copy full SHA for ae878ee

Commits on May 1, 2026

• feat: add patch summary output showing total/patched/skipped vulnerabilities (#1517)

  Show description for 5696b64
  

  5 peopleauthored
  5696b64

  Copy full SHA for 5696b64

• ci: replace label-gated trusted-fork workflow with native fork PR approval (#1582)

  Show description for a898cd7
  robert-cronin

  authored
  a898cd7

  Copy full SHA for a898cd7

Commits on Apr 30, 2026

• ci: fix trusted-fork-tests temp branch creation for fork PR SHAs (#1573)

  Show description for 8b5fc55
  robert-cronin

  authored
  8b5fc55

  Copy full SHA for 8b5fc55

Commits on Apr 29, 2026

• ci: add trusted fork test workflow with ok-to-test label gate (#1572)

  Show description for 57079fe
  ashnamehrotra

  authored
  57079fe

  Copy full SHA for 57079fe

• docs: Update website footer to LF Projects Series LLC trademark disclaimer (#1566)

  Show description for ac0b85f
  

  3 peopleauthored
  ac0b85f

  Copy full SHA for ac0b85f

• fix(generate): cap buffered patch layer size to mitigate memory DoS (#1543)

  Show description for 814b5d3
  

  sozercan

  and

  robert-cronin

  authored
  814b5d3

  Copy full SHA for 814b5d3

• fix: prevent apt option injection from distroless package names (#1540)

  Show description for c38467e
  

  sozercan

  and

  robert-cronin

  authored
  c38467e

  Copy full SHA for c38467e

• ci: block self-hosted build workflow jobs on forked PRs (#1539)

  Show description for 46fee31
  

  sozercan

  and

  robert-cronin

  authored
  46fee31

  Copy full SHA for 46fee31

• feat: fallback source resolution for Go binary patching on stripped/distroless images (#1546)

  Show description for 6ff879b
  

  omercnet

  and

  robert-cronin

  authored
  6ff879b

  Copy full SHA for 6ff879b

Commits on Apr 28, 2026

• fix(ci): pin BuildKit version and set explicit DNS for podman/container env (#1563)

  Show description for 2f6cc54
  omercnet

  authored
  2f6cc54

  Copy full SHA for 2f6cc54

Commits on Apr 27, 2026

• chore: bump golang.org/x/term from 0.40.0 to 0.41.0 (#1519)

  Show description for 192506d
  

  dependabot[bot]

  and

  ashnamehrotra

  authored
  192506d

  Copy full SHA for 192506d

• chore: bump postcss from 8.4.38 to 8.5.10 in /website (#1565)

  Show description for d792505
  dependabot[bot]

  authored
  d792505

  Copy full SHA for d792505

Commits on Apr 24, 2026

• fix(vex): use installed version in PURLs and add distro qualifier for BOM-VEX correlation (#1552)

  Show description for b2c9dee
  

  omercnet

  and

  robert-cronin

  authored
  b2c9dee

  Copy full SHA for b2c9dee

• fix: avoid masking package manager failures as no-updates (#1530)

  Show description for 1d83dc9
  

  sozercan

  and

  robert-cronin

  authored
  1d83dc9

  Copy full SHA for 1d83dc9

• fix: go patching log levels (#1516)

  Show description for b6677cf
  

  robert-cronin

  and

  Copilot

  authored
  b6677cf

  Copy full SHA for b6677cf

Commits on Apr 23, 2026

• chore: bump lodash from 4.17.23 to 4.18.1 in /website (#1534)

  Show description for 355da58
  

  dependabot[bot]

  and

  ashnamehrotra

  authored
  355da58

  Copy full SHA for 355da58

• chore: bump follow-redirects from 1.15.6 to 1.16.0 in /website (#1551)

  Show description for 1ec0ce3
  dependabot[bot]

  authored
  1ec0ce3

  Copy full SHA for 1ec0ce3

• chore: bump the all group across 1 directory with 7 updates (#1554)

  Show description for d872370
  

  dependabot[bot]

  and

  ashnamehrotra

  authored
  d872370

  Copy full SHA for d872370

• refactor(langmgr): replace rebuildErrors []string with structured rebuildFailure (#1560)

  Show description for 4f3710d
  omercnet

  authored
  4f3710d

  Copy full SHA for 4f3710d

Commits on Apr 22, 2026

• chore: bump github.com/quay/claircore from 1.5.49 to 1.5.52 (#1518)

  Show description for 2104703
  

  dependabot[bot]

  and

  ashnamehrotra

  authored
  2104703

  Copy full SHA for 2104703