dependabot[bot]
228c31f205
build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.61.0 to 1.61.1.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.61.0...v1.61.1 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-02 14:11:27 +00:00
William Martin
4ea4ed85ec
Merge pull request #8903 from cli/dependabot/go_modules/github.com/docker/docker-24.0.9incompatible
...
build(deps): bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible
2024-04-02 15:46:09 +02:00
William Martin
504f73613f
Merge pull request #8902 from cli/dependabot/go_modules/gopkg.in/go-jose/go-jose.v2-2.6.3
...
build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
2024-04-02 15:44:16 +02:00
William Martin
200c95e5b2
Rely on go.mod go version in all workflows ( #8911 )
2024-04-02 13:22:31 +00:00
Naoya Yasuda
5d79a95a32
Upgrade to Go 1.22 ( #8836 )
2024-04-02 14:34:59 +02:00
dependabot[bot]
82254f7d49
build(deps): bump github.com/docker/docker
...
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from 24.0.7+incompatible to 24.0.9+incompatible.
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v24.0.7...v24.0.9 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 17:15:19 +00:00
dependabot[bot]
acb5b9bd42
build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
...
Bumps gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3.
---
updated-dependencies:
- dependency-name: gopkg.in/go-jose/go-jose.v2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 17:14:59 +00:00
Meredith Lancaster
90b7bf97c5
gh-attestation cmd integration ( #8698 )
...
* add attestation cmd
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add codeowners
Signed-off-by: Meredith Lancaster <malancas@github.com>
* update args passed to the attestation cmd
Signed-off-by: Meredith Lancaster <malancas@github.com>
* rename file
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use gh-attestation branch for passing iostreams from the root
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add package security team entry to codeowners
Signed-off-by: Meredith Lancaster <malancas@github.com>
* start moving over verify cmd and general verification code
Signed-off-by: Meredith Lancaster <malancas@github.com>
* clean up common and verify specific policy code
Signed-off-by: Meredith Lancaster <malancas@github.com>
* move artifact package over
Signed-off-by: Meredith Lancaster <malancas@github.com>
* start pulling in the github api client wrapper
Signed-off-by: Meredith Lancaster <malancas@github.com>
* fix imports
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add logger and test packages
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add additional packages to support verify command
Signed-off-by: Meredith Lancaster <malancas@github.com>
* fix mock api client
Signed-off-by: Meredith Lancaster <malancas@github.com>
* clean up mock api client
Signed-off-by: Meredith Lancaster <malancas@github.com>
* include missing fields
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use correct owner
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add more mock api client options
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add download cmd
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add inspect cmd
Signed-off-by: Meredith Lancaster <malancas@github.com>
* pass factory object to inspect cmd, add inspect sub cmd to attestation cmd
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add verify-tuf-root cmd
Signed-off-by: Meredith Lancaster <malancas@github.com>
* pass iostream struct from command
Signed-off-by: Meredith Lancaster <malancas@github.com>
* rename logger pkg to logger
Signed-off-by: Meredith Lancaster <malancas@github.com>
* fix path in codeowners
Signed-off-by: Meredith Lancaster <malancas@github.com>
* formatter
Signed-off-by: Meredith Lancaster <malancas@github.com>
* go mod tidy
Signed-off-by: Meredith Lancaster <malancas@github.com>
* fix printf linter issue
Signed-off-by: Meredith Lancaster <malancas@github.com>
* fix printf linter issue
Signed-off-by: Meredith Lancaster <malancas@github.com>
* check user's GH host for compatibility
Signed-off-by: Meredith Lancaster <malancas@github.com>
* pass oci client to commands directly
Signed-off-by: Meredith Lancaster <malancas@github.com>
* rename command
Signed-off-by: Meredith Lancaster <malancas@github.com>
* mark tuf-root-verify cmd hidden
Signed-off-by: Meredith Lancaster <malancas@github.com>
* move client initialization back to subcommands
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add more verbose options and logging
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add missing logger
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add testing around OCI and API client
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add integration test
Signed-off-by: Meredith Lancaster <malancas@github.com>
* fix file path
Signed-off-by: Meredith Lancaster <malancas@github.com>
* fix command
Signed-off-by: Meredith Lancaster <malancas@github.com>
* build executable before integration test
Signed-off-by: Meredith Lancaster <malancas@github.com>
* split integration tests
Signed-off-by: Meredith Lancaster <malancas@github.com>
* remove integration test steps
Signed-off-by: Meredith Lancaster <malancas@github.com>
* fix flag value
Signed-off-by: Meredith Lancaster <malancas@github.com>
* run integration tests on ubuntu for now
Signed-off-by: Meredith Lancaster <malancas@github.com>
* pull over doc updates
Signed-off-by: Meredith Lancaster <malancas@github.com>
* delete unused test data
Signed-off-by: Meredith Lancaster <malancas@github.com>
* remove Go patch version
Signed-off-by: Meredith Lancaster <malancas@github.com>
* switch assert to require
Signed-off-by: Meredith Lancaster <malancas@github.com>
* rename file
Signed-off-by: Meredith Lancaster <malancas@github.com>
* move integration tests to prexisting test workflow
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use platform matrix for integration tests
Signed-off-by: Meredith Lancaster <malancas@github.com>
* simplify build step
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use StringEnumFlag handling
Signed-off-by: Meredith Lancaster <malancas@github.com>
* typo
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use the iostreams.Test helper func
Signed-off-by: Meredith Lancaster <malancas@github.com>
* create interface for oci client
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add tests for oci client
Signed-off-by: Meredith Lancaster <malancas@github.com>
* rename files
Signed-off-by: Meredith Lancaster <malancas@github.com>
* format file
Signed-off-by: Meredith Lancaster <malancas@github.com>
* fix shellcheck issues
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use testing TempDir method
Signed-off-by: Meredith Lancaster <malancas@github.com>
* cleanup unused tempdir handling
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use table driven tests
Signed-off-by: Meredith Lancaster <malancas@github.com>
* check correct cmd
Signed-off-by: Meredith Lancaster <malancas@github.com>
* support repo option in download sub cmd
Signed-off-by: Meredith Lancaster <malancas@github.com>
* switch over to using RunE
Signed-off-by: Meredith Lancaster <malancas@github.com>
* unexport top level subcommand funcs
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add comment around keychain option
Signed-off-by: Meredith Lancaster <malancas@github.com>
* update comments
Signed-off-by: Meredith Lancaster <malancas@github.com>
* fix inconsistent naming
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add tests for CLI commands
Signed-off-by: Meredith Lancaster <malancas@github.com>
* check for noattestationsfound err
Signed-off-by: Meredith Lancaster <malancas@github.com>
* try out metadata abstraction instead
Signed-off-by: Meredith Lancaster <malancas@github.com>
* switch to using MetadataStore abstraction
Signed-off-by: Meredith Lancaster <malancas@github.com>
* include test case with failing metadata store
Signed-off-by: Meredith Lancaster <malancas@github.com>
* look for err specific to file write
Signed-off-by: Meredith Lancaster <malancas@github.com>
* unexport fields
Signed-off-by: Meredith Lancaster <malancas@github.com>
* return err when an unsupported hash alg is provided
Signed-off-by: Meredith Lancaster <malancas@github.com>
* PrintTableToStdOut returns err when rendering fails
Signed-off-by: Meredith Lancaster <malancas@github.com>
* start adding sigstore verifier unit tests
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add more sigstore verifier specific tests
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use cli table printer
Signed-off-by: Meredith Lancaster <malancas@github.com>
* return JSON results in slice instead of table
Signed-off-by: Meredith Lancaster <malancas@github.com>
* move mock client to test file
Signed-off-by: Meredith Lancaster <malancas@github.com>
* remove unneeded table printer method
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add initial tests for tufrootverify cmd
Signed-off-by: Meredith Lancaster <malancas@github.com>
* formatting
Signed-off-by: Meredith Lancaster <malancas@github.com>
* cleanup method
Signed-off-by: Meredith Lancaster <malancas@github.com>
* close file in error handling branch
Signed-off-by: Meredith Lancaster <malancas@github.com>
* normalize artifact path
Signed-off-by: Meredith Lancaster <malancas@github.com>
* remove unneeded embedded file system
Signed-off-by: Meredith Lancaster <malancas@github.com>
* include image name reference err
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use GH_DEBUG value for io handling
Signed-off-by: Meredith Lancaster <malancas@github.com>
* remove quiet and verbose flags
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add more tufrootveriify tests
Signed-off-by: Meredith Lancaster <malancas@github.com>
* GitHubTUFOptions no longer needs to return error
Signed-off-by: Meredith Lancaster <malancas@github.com>
* remove unneeded slice
Signed-off-by: Meredith Lancaster <malancas@github.com>
* normalize all relative paths
Signed-off-by: Meredith Lancaster <malancas@github.com>
* clean up nil client checks
Signed-off-by: Meredith Lancaster <malancas@github.com>
* set api server based on host
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add comment about http client
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use format flag to handle json output in verify cmd
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use format flag to handle json output
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use normalized path for cli test arg
Signed-off-by: Meredith Lancaster <malancas@github.com>
* add tests for json output
Signed-off-by: Meredith Lancaster <malancas@github.com>
* cleanup error wrapping
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use test fixtures correctly by normalizing path
Signed-off-by: Meredith Lancaster <malancas@github.com>
* dont clean
Signed-off-by: Meredith Lancaster <malancas@github.com>
* escape backwards slash for windows files with replace
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use strings.Split func
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use strings.Replace for all command tests
Signed-off-by: Meredith Lancaster <malancas@github.com>
* use CLI cache dir to store tuf metadata
Signed-off-by: Meredith Lancaster <malancas@github.com>
* Tweaked docstrings for gh attestation download
* Tweaked docstrings for gh attestation verify
* Fix for bug in gh attestation where the wrong hostname was being passed to the API client.
* lets hide tuf-root-verify eh?
* Forgot verify's short str.
* add remote verification test
Signed-off-by: Meredith Lancaster <malancas@github.com>
* Revert "add remote verification test"
This reverts commit c0ceb99ca8
2024-04-01 11:13:47 -06:00
William Martin
ec812a16f7
Merge pull request #8884 from cli/wm/bump-go-gh-2.7.0
...
Bump go-gh to 2.7.0
2024-03-28 22:24:25 +01:00
William Martin
fc2dabac6e
Bump go-gh to 2.7.0
...
Brings across a better CacheDir
2024-03-28 21:48:08 +01:00
William Martin
1a102edb52
Merge pull request #8870 from ihommani/auth-switch-doc-typo
...
Fix typo in auth switch help example
2024-03-24 07:54:47 +01:00
ihommani
1cac2280aa
Fix typo in auth switch help example
2024-03-23 20:56:09 +00:00
yasunori
b54f7a3bde
Include draft ID in project item list JSON ( #8754 )
2024-03-20 12:58:51 +01:00
William Martin
a14ecfda62
Merge pull request #8844 from cli/dependabot/go_modules/github.com/cpuguy83/go-md2man/v2-2.0.4
...
build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
2024-03-19 21:12:18 +01:00
dependabot[bot]
911d966880
build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4
...
Bumps [github.com/cpuguy83/go-md2man/v2](https://github.com/cpuguy83/go-md2man ) from 2.0.3 to 2.0.4.
- [Release notes](https://github.com/cpuguy83/go-md2man/releases )
- [Commits](https://github.com/cpuguy83/go-md2man/compare/v2.0.3...v2.0.4 )
---
updated-dependencies:
- dependency-name: github.com/cpuguy83/go-md2man/v2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-19 14:13:27 +00:00
William Martin
83f0b5b810
Merge pull request #8843 from cli/wm/doc-run-view-and-watch
...
Document run watch and view not supporting fine grained PATs
2024-03-19 15:03:04 +01:00
William Martin
90fc403813
Document run watch and view not supporting fine grained PATs
2024-03-19 14:52:43 +01:00
William Martin
b85083c98a
Merge pull request #8839 from cli/wm/auth-switch-more-docs
...
Document auth switch behaviour for two or more accounts
2024-03-18 17:49:49 +01:00
William Martin
0f5d2aed0a
Document auth switch behaviour for two or more accounts
2024-03-18 17:24:38 +01:00
William Martin
96f1074c63
Merge pull request #8838 from jsoref/gh-docs-multiple-accounts
...
Gh docs multiple accounts
2024-03-18 17:22:07 +01:00
Josh Soref
6ff355049c
Improve discovery of gh auth status
2024-03-18 12:09:27 -04:00
Josh Soref
304ce82fa7
grammar: avoid e.g.+etc. together
...
https://meryl.net/ie-etc-and-eg/
2024-03-18 11:21:25 -04:00
William Martin
ab24653770
Merge pull request #8833 from cli/wm/bump-go-keyring
...
Bump go-keyring to fix race condition
2024-03-18 15:50:33 +01:00
William Martin
2eeac4175f
Merge pull request #8834 from malor/fix-doc
...
Fix the description of `gh release upload`
2024-03-18 12:41:39 +01:00
Roman Podoliaka
0d84970bbb
Fix the description of gh release upload
...
The formatting verb is used incorrectly and produces a misleading
help text for this command:
```
To define a display label for an asset, append text starting with %#% after the file name.
```
instead of the expected:
```
To define a display label for an asset, append text starting with `#` after the file name.
```
2024-03-18 11:19:20 +00:00
William Martin
5bd32fc066
Bump go-keyring to fix race condition
2024-03-18 12:17:12 +01:00
Victor Martinez
c0658b7ab4
feat: support dry-run in gh pr create ( #8376 )
2024-03-14 16:28:53 +01:00
William Martin
96d9a0da24
Merge pull request #8811 from cli/dependabot/go_modules/google.golang.org/protobuf-1.33.0
...
build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
2024-03-14 10:58:12 +01:00
dependabot[bot]
358f3d95e9
build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0
...
Bumps google.golang.org/protobuf from 1.30.0 to 1.33.0.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-13 22:44:00 +00:00
Andy Feller
dc804d9287
Merge pull request #8778 from cli/repo_in_merge_prompt
...
feat: consistent issue and PR owner/repo#number in various prompt
2024-03-12 12:16:26 -04:00
William Martin
4601d7ff5e
Merge pull request #8797 from gregsmi/bug/gh-auth-token-docs
...
fixed doc string
2024-03-07 10:58:02 +01:00
Greg Smith
df446b47fc
fixed doc string
2024-03-06 14:08:59 -08:00
William Martin
f4dff56057
Merge pull request #8795 from cuinix/trunk
...
remove repetitive word
2024-03-06 16:57:09 +01:00
cuinix
6091e7ad5b
remove repetitive word
...
Signed-off-by: cuinix <915115094@qq.com>
2024-03-06 23:30:00 +08:00
Andy Feller
3ca179bcde
Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN ( #8787 )
2024-03-04 18:04:13 +01:00
Andy Feller
2b2571eb23
Fix breaking test for PR/issue # change
2024-03-01 16:04:24 -05:00
Andy Feller
bcdc917f08
Enhance 2nd round of issue and PR number output
2024-03-01 15:42:43 -05:00
Andy Feller
3bb5f54073
Apply first round of owner/repo#number consistency
...
This commit expands on @nobe4 initial work by bringing the owner and repository name to the most obvious issue and PR number output use cases before making a second pass for any edge cases.
2024-03-01 14:03:18 -05:00
Harvey Sanders
9dd102ffd0
Support project view --web with TTY ( #8773 )
2024-03-01 17:45:29 +01:00
nobe4
a5b7c6122d
fix: format files
2024-03-01 13:35:09 +01:00
nobe4
db93444ba9
feat(merge): add owner/repo in prompt
...
Various places during the `gh pr merge` flow show the PR number and
title. Those places are updated to also show the owner/repo.
E.g.
Before:
Pull request #123 (title) is ready to be merged
After:
Pull request owner/repo#123 (title) is ready to be merged
There are other places, where only the number is displayed. Those were
intentionally left as is. It made sense to show the owner/repo only when
the extra context of the title was present.
It also fixes the related tests.
cc #8777
2024-03-01 13:26:20 +01:00
William Martin
590208f5d6
Merge pull request #8693 from hongquan/feat/debian-install
...
Simplify install command for Debian & Ubuntu
2024-03-01 12:04:42 +01:00
William Martin
337ae29769
Merge pull request #8738 from stuart-leitch/docs/clarify-archived-repo-beahaviour-when-searching-prs
...
Clarify helptext for search prs regarding archived repos
2024-03-01 10:30:21 +01:00
Nguyễn Hồng Quân
09f09879ca
Merge branch 'trunk' into feat/debian-install
2024-03-01 09:47:55 +07:00
Nguyễn Hồng Quân
e67467cea7
Handle case: some system set 600 mod for new file.
2024-03-01 09:43:35 +07:00
Stuart Leitch
cfd2d645b2
Clarify helptext for gh search issues and gh search repos regarding archived repos
2024-02-29 22:38:55 +00:00
William Martin
0d4bf83a41
Merge pull request #8595 from benebsiny/cli-7849
...
Link Project to Repository or Team Command
2024-02-29 17:02:39 +01:00
William Martin
ee6e5e1f23
Merge pull request #8756 from bartekpacia/config_improve_comments
...
Make comments in the default config file more informative
2024-02-29 14:10:10 +01:00
William Martin
9dc23559c1
Merge pull request #8711 from toshimaru/add-cache-ref-optoion-to-cache-list
...
feat: Add `ref` option to `gh cache list`
2024-02-29 13:30:50 +01:00
William Martin
b7ea025475
Make minor cache list ref flag adjustments
2024-02-29 13:02:49 +01:00
