{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":433629451,"defaultBranch":"main","name":"cosign","ownerLogin":"haydentherapper","currentUserCanPush":false,"isFork":true,"isEmpty":false,"createdAt":"2021-12-01T00:20:32.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/8418760?v=4","public":true,"private":false,"isOrgOwned":false},"refInfo":{"name":"","listCacheKey":"v0:1712785102.0","currentOid":""},"activityList":{"items":[{"before":"78629dd243384e707fec3d332af80921d626202b","after":null,"ref":"refs/heads/ghsa-fixes","pushedAt":"2024-04-10T21:38:22.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"}},{"before":null,"after":"78629dd243384e707fec3d332af80921d626202b","ref":"refs/heads/ghsa-fixes","pushedAt":"2024-04-10T21:37:49.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"add missing licenses\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"add missing licenses"}},{"before":null,"after":"7e3feda02807913284e353ebd1651eef517ec6f3","ref":"refs/heads/changelog-c224","pushedAt":"2024-04-10T21:35:03.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Add v2.2.4 changelog\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Add v2.2.4 changelog"}},{"before":"5a477000f636e31065e538183672ee6b994b27f5","after":null,"ref":"refs/heads/bump-ss-v182","pushedAt":"2024-02-28T06:40:02.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"}},{"before":null,"after":"5a477000f636e31065e538183672ee6b994b27f5","ref":"refs/heads/bump-ss-v182","pushedAt":"2024-02-28T05:39:58.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Bump sigstore/sigstore to v1.8.2\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Bump sigstore/sigstore to v1.8.2"}},{"before":"32e481a9d387132b1b7ed131850d35956872ba5b","after":null,"ref":"refs/heads/changelog-2.2.3","pushedAt":"2024-01-31T17:54:59.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"}},{"before":null,"after":"32e481a9d387132b1b7ed131850d35956872ba5b","ref":"refs/heads/changelog-2.2.3","pushedAt":"2024-01-31T00:12:21.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Add changelog for v2.2.3\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Add changelog for v2.2.3"}},{"before":null,"after":"04dc85bfe4606b48372fa8a91e56db3375f950e8","ref":"refs/heads/remove-dup-code","pushedAt":"2024-01-03T00:08:20.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Remove CertSubject function\n\nThere is an existing function that handles more certificate subject\ntypes.\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Remove CertSubject function"}},{"before":null,"after":"52a88ff795a2326516446257d4f63276b3ef41e0","ref":"refs/heads/changelog-2.2.2","pushedAt":"2023-12-05T18:41:15.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Add changelog for v2.2.2\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Add changelog for v2.2.2"}},{"before":null,"after":"46605fa919fc8e5b06d02740a1eba0a6bb490d74","ref":"refs/heads/fix-skip-ct-check","pushedAt":"2023-12-05T18:34:18.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Don't require CT log keys if using a key/sk\n\nFixes #3386. The logic was inverted for this check.\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Don't require CT log keys if using a key/sk"}},{"before":"997aed5a8e2933136bd8860bc8a7816a4b6cda06","after":null,"ref":"refs/heads/fix-only","pushedAt":"2023-12-05T00:35:23.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"}},{"before":null,"after":"997aed5a8e2933136bd8860bc8a7816a4b6cda06","ref":"refs/heads/fix-only","pushedAt":"2023-12-04T22:33:27.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Fix copy without any flag set\n\nPR #3247 added an --only flag which when set copies only a subset of\nmetadata. By default the flag is set to an empty string, meaning that by\ndefault copy would copy nothing. This PR fixes this bug so that if only\nis unset, copy defaults to the same behavior as before copying\neverything.\n\nAlso update the tag name to be sig rather than sign for the flag.\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Fix copy without any flag set"}},{"before":"e7dd4337c269a96686889c0bb03e26aac658de35","after":null,"ref":"refs/heads/fix-shard-id-comp","pushedAt":"2023-11-18T04:01:29.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"}},{"before":null,"after":"e7dd4337c269a96686889c0bb03e26aac658de35","ref":"refs/heads/fix-shard-id-comp","pushedAt":"2023-11-17T21:37:53.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Fix idempotency error with signing\n\nThe expected behavior is to fetch an existing entry from the log when\nsigning generates the same signature, so that signing is idempotent.\n\nThe bug was that the prepended shard ID was compared to the log ID. The\nlog ID is a sha256 hash of the log's public key, which is not the same\nas the shard ID. Now we compare the prepended shard IDs from both the\nrequest and response entry UUID when present.\n\nThis was not caught in tests since we used a valid shard ID as input\nrather than the log ID.\n\nVerified by generating an RSA key (which will generate the same\nsignature given the same input) and signing a container.\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Fix idempotency error with signing"}},{"before":null,"after":"77830d113a7d04fe120ed03a204ab54e71c1145d","ref":"refs/heads/remove-slow","pushedAt":"2023-11-10T22:07:59.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Remove slow e2e tests\n\nSplitting these tests into their own package still shows them taking\n>5m. Long-term fix would be supporting a way to attach multiple\nsignatures at once to avoid roundtrips to the registry.\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Remove slow e2e tests"}},{"before":"3ea32558f516b31e87d39ecc174ce820a61e4de7","after":null,"ref":"refs/heads/fix-e2e-test","pushedAt":"2023-11-10T20:18:28.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"}},{"before":null,"after":"3ea32558f516b31e87d39ecc174ce820a61e4de7","ref":"refs/heads/fix-e2e-test","pushedAt":"2023-11-09T23:18:48.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Increase timeout of e2e tests\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Increase timeout of e2e tests"}},{"before":"65843b4a70e992f1495df7754dd3bff6e47956b5","after":null,"ref":"refs/heads/fix-ts-verify","pushedAt":"2023-09-08T20:17:48.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"}},{"before":"142c3e9413cae221ae378f90d09ec7f9a4c9a019","after":"65843b4a70e992f1495df7754dd3bff6e47956b5","ref":"refs/heads/fix-ts-verify","pushedAt":"2023-09-08T00:01:50.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Update e2e_tsa_mtls.sh","shortMessageHtmlLink":"Update e2e_tsa_mtls.sh"}},{"before":"85f1d4bbb67192584e802e7cfb56fb7fd5af1e13","after":"142c3e9413cae221ae378f90d09ec7f9a4c9a019","ref":"refs/heads/fix-ts-verify","pushedAt":"2023-09-06T20:12:51.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Fix e2e test\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Fix e2e test"}},{"before":"d2d395b2c7cc3ef92ca7fcc750c67eef3dd97e72","after":"85f1d4bbb67192584e802e7cfb56fb7fd5af1e13","ref":"refs/heads/fix-ts-verify","pushedAt":"2023-09-06T19:57:02.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Fix e2e test\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Fix e2e test"}},{"before":"0414cb5b326c4954664a768c8a4105921e64a647","after":"d2d395b2c7cc3ef92ca7fcc750c67eef3dd97e72","ref":"refs/heads/fix-ts-verify","pushedAt":"2023-09-06T18:37:31.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Switch to switch\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Switch to switch"}},{"before":null,"after":"0414cb5b326c4954664a768c8a4105921e64a647","ref":"refs/heads/fix-ts-verify","pushedAt":"2023-09-06T18:31:44.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Fail timestamp verification if no root is provided\n\nThe bug was that we would conditionally check a timestamp if a root was\nprovided. If no root was provided even if a timestamp was provided, then\nsignature verification would succeed.\n\nThe good news is this will not show a successful signature if the\ntransparency log does not contain the entry too, for timestamp\nverification.\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Fail timestamp verification if no root is provided"}},{"before":"8e55dc2b0514db9ac49333eb5a743ea4a9c479cf","after":null,"ref":"refs/heads/ref-sans","pushedAt":"2023-08-12T20:42:02.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"}},{"before":null,"after":"8e55dc2b0514db9ac49333eb5a743ea4a9c479cf","ref":"refs/heads/ref-sans","pushedAt":"2023-08-11T22:30:54.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Switch to cryptoutils function for SANS\n\nIt was moved to s/s awhile ago.\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Switch to cryptoutils function for SANS"}},{"before":"74bb17f97f0666070e39effe7345b1527894323a","after":"61fbf5cbac4ed5b7695fbb553eedd945a7ba9368","ref":"refs/heads/changelog-202","pushedAt":"2023-04-24T19:01:13.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Add contributors\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Add contributors"}},{"before":null,"after":"74bb17f97f0666070e39effe7345b1527894323a","ref":"refs/heads/changelog-202","pushedAt":"2023-04-24T18:59:32.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Add CHANGELOG for v2.0.2\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Add CHANGELOG for v2.0.2"}},{"before":"1f23750e73776da0243f9feb3412136b235b5cb3","after":"05c34f981f4828399c44df17f46a9f2dfff8a41e","ref":"refs/heads/update-ss","pushedAt":"2023-04-21T21:32:23.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Bump sigstore/sigstore dependency to 1.6.3\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Bump sigstore/sigstore dependency to 1.6.3"}},{"before":null,"after":"1f23750e73776da0243f9feb3412136b235b5cb3","ref":"refs/heads/update-ss","pushedAt":"2023-04-11T17:28:03.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"},"commit":{"message":"Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change\n\nThe TUF repo is now accessible via a CDN rather than GCS.\n\nSigned-off-by: Hayden Blauzvern <hblauzvern@google.com>","shortMessageHtmlLink":"Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change"}},{"before":"c61862317a2e2280dd9b113e23a6132aaf9911dd","after":null,"ref":"refs/heads/fix-build","pushedAt":"2023-04-06T19:12:39.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"haydentherapper","name":"Hayden B","path":"/haydentherapper","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8418760?s=80&v=4"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAELX9MYAA","startCursor":null,"endCursor":null}},"title":"Activity · haydentherapper/cosign"}