feat(terraform-linters/tflint): GitHub artifact attestations config #34220
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
Thank you always! |
| algorithm: sha256 | ||
| cosign: | ||
| opts: | ||
| - --certificate-identity-regexp |
There was a problem hiding this comment.
Can we use --certificate-identity?
There was a problem hiding this comment.
Oh, sure, I was just keeping the PR in scope, i.e. only adding the attestations config.
…with --certificate-identity
tmeijn
pushed a commit
to tmeijn/dotfiles
that referenced
this pull request
Apr 20, 2025
This MR contains the following updates: | Package | Update | Change | |---|---|---| | [aquaproj/aqua-registry](https://github.com/aquaproj/aqua-registry) | minor | `v4.333.3` -> `v4.346.1` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>aquaproj/aqua-registry (aquaproj/aqua-registry)</summary> ### [`v4.346.1`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.346.1) [Compare Source](aquaproj/aqua-registry@v4.346.0...v4.346.1) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.346.1) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.346.1) | aquaproj/aqua-registry@v4.346.0...v4.346.1 #### Fixes [#​34521](aquaproj/aqua-registry#34521) jesseduffield/lazydocker: Re-scaffold [@​wancup](https://github.com/wancup) [#​34484](aquaproj/aqua-registry#34484) kubewarden/kwctl: Re-scaffold [@​scop](https://github.com/scop) [#​34491](aquaproj/aqua-registry#34491) suzuki-shunsuke/tfcmt: Re-scaffold #### Security GitHub Artifact Attestations: [#​34486](aquaproj/aqua-registry#34486) Zxilly/go-size-analyzer [@​scop](https://github.com/scop) [#​34485](aquaproj/aqua-registry#34485) cli/cli [@​scop](https://github.com/scop) [#​34516](aquaproj/aqua-registry#34516) github/github-mcp-server [#​34483](aquaproj/aqua-registry#34483) lima-vm/lima [@​scop](https://github.com/scop) [#​34492](aquaproj/aqua-registry#34492) suzuki-shunsuke/pinact Cosign: [#​34478](aquaproj/aqua-registry#34478) anchore/grype [@​scop](https://github.com/scop) [#​34493](aquaproj/aqua-registry#34493) caarlos0/svu [@​scop](https://github.com/scop) ### [`v4.346.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.346.0) [Compare Source](aquaproj/aqua-registry@v4.345.0...v4.346.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.346.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.346.0) | aquaproj/aqua-registry@v4.345.0...v4.346.0 #### 🎉 New Packages [#​34379](aquaproj/aqua-registry#34379) [mackee/go-readability](https://github.com/mackee/go-readability): Extract readable content from web pages - Mozilla’s and Mizchi Readability ported to Go [@​takumin](https://github.com/takumin) [#​34373](aquaproj/aqua-registry#34373) [open-policy-agent/gatekeeper](https://github.com/open-policy-agent/gatekeeper): Gatekeeper - Policy Controller for Kubernetes [@​ponkio-o](https://github.com/ponkio-o) #### Fixes [#​34413](aquaproj/aqua-registry#34413) flux-iac/tofu-controller/tfctl: Cosign Config [@​scop](https://github.com/scop) #### Security [#​34416](aquaproj/aqua-registry#34416) anchore/syft: Cosign config [@​scop](https://github.com/scop) [#​34414](aquaproj/aqua-registry#34414) caarlos0/svu: GitHub artifact attestations config [@​scop](https://github.com/scop) ### [`v4.345.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.345.0) [Compare Source](aquaproj/aqua-registry@v4.344.0...v4.345.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.345.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.345.0) | aquaproj/aqua-registry@v4.344.0...v4.345.0 #### 🎉 New Packages [#​34280](aquaproj/aqua-registry#34280) [tailwindlabs/tailwindcss](https://github.com/tailwindlabs/tailwindcss) - A utility-first CSS framework for rapid UI development [@​Igonato](https://github.com/Igonato) #### Improvement [#​34291](aquaproj/aqua-registry#34291) rootless-containers/rootlesskit: GitHub artifact attestations config [@​scop](https://github.com/scop) ### [`v4.344.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.344.0) [Compare Source](aquaproj/aqua-registry@v4.343.0...v4.344.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.344.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.344.0) | aquaproj/aqua-registry@v4.343.0...v4.344.0 #### 🎉 New Packages [#​34279](aquaproj/aqua-registry#34279) [kubernetes-sigs/cloud-provider-kind](https://github.com/kubernetes-sigs/cloud-provider-kind) - Cloud provider for KIND clusters [@​zoetrope](https://github.com/zoetrope) [#​34276](aquaproj/aqua-registry#34276) [kubernetes-sigs/gwctl](https://github.com/kubernetes-sigs/gwctl): gwctl is a command-line tool for managing and understanding Gateway API resources in your Kubernetes cluster [@​ponkio-o](https://github.com/ponkio-o) [#​34278](aquaproj/aqua-registry#34278) [uutils/coreutils](https://github.com/uutils/coreutils): Cross-platform Rust rewrite of the GNU coreutils [@​takumin](https://github.com/takumin) ### [`v4.343.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.343.0) [Compare Source](aquaproj/aqua-registry@v4.342.0...v4.343.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.343.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.343.0) | aquaproj/aqua-registry@v4.342.0...v4.343.0 #### 🎉 New Packages [#​34262](aquaproj/aqua-registry#34262) [ekristen/aws-nuke](https://github.com/ekristen/aws-nuke): Remove all the resources from an AWS account #### Improvement Configure GitHub Artifact attestations by [@​scop](https://github.com/scop) > \[!WARNING] > [aqua v2.45.0](https://github.com/aquaproj/aqua/releases/tag/v2.45.0) or later is required. [#​34224](aquaproj/aqua-registry#34224) bytecodealliance/wasmtime [#​34223](aquaproj/aqua-registry#34223) goreleaser/goreleaser [#​34222](aquaproj/aqua-registry#34222) containerd/containerd [#​34221](aquaproj/aqua-registry#34221) bomctl/bomctl [#​34220](aquaproj/aqua-registry#34220) terraform-linters/tflint ### [`v4.342.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.342.0) [Compare Source](aquaproj/aqua-registry@v4.341.0...v4.342.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.342.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.342.0) | aquaproj/aqua-registry@v4.341.0...v4.342.0 #### 🎉 New Packages [#​34184](aquaproj/aqua-registry#34184) [github/copilot-language-server-release](https://github.com/github/copilot-language-server-release): The Copilot Language Server enables any editor or IDE to integrate with GitHub Copilot via the language server protocol [@​takumin](https://github.com/takumin) [#​34218](aquaproj/aqua-registry#34218) [reteps/dockerfmt](https://github.com/reteps/dockerfmt): Dockerfile format and parser. a modern dockfmt ### [`v4.341.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.341.0) [Compare Source](aquaproj/aqua-registry@v4.340.1...v4.341.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.341.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.341.0) | aquaproj/aqua-registry@v4.340.0...v4.341.0 #### 🎉 New Packages [#​34172](aquaproj/aqua-registry#34172) [github/github-mcp-server](https://github.com/github/github-mcp-server): GitHub's official MCP Server [@​takumin](https://github.com/takumin) ### [`v4.340.1`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.340.1) [Compare Source](aquaproj/aqua-registry@v4.340.0...v4.340.1) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.340.1) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.340.1) | aquaproj/aqua-registry@v4.340.0...v4.340.1 #### Fixes [#​34169](aquaproj/aqua-registry#34169) Re-scaffold miku/zek [#​34167](aquaproj/aqua-registry#34167) Re-scaffold babarot/changed-objects > \[!WARNING] > Require aqua v2.45.0 or later GitHub Artifact Attestations by [@​scop](https://github.com/scop): [#​34161](aquaproj/aqua-registry#34161) ClementTsang/bottom [#​34156](aquaproj/aqua-registry#34156) sass/dart-sass [#​32939](aquaproj/aqua-registry#32939) quarylabs/sqruff [#​32870](aquaproj/aqua-registry#32870) UpCloudLtd/upcloud-cli [#​32470](aquaproj/aqua-registry#32470) getzola/zola ### [`v4.340.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.340.0) [Compare Source](aquaproj/aqua-registry@v4.339.0...v4.340.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.340.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.340.0) | aquaproj/aqua-registry@v4.339.0...v4.340.0 #### 🎉 New Packages [#​34126](aquaproj/aqua-registry#34126) [kyverno/chainsaw](https://github.com/kyverno/chainsaw) - Declarative K8s e2e testing [@​nielsvz](https://github.com/nielsvz) ### [`v4.339.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.339.0) [Compare Source](aquaproj/aqua-registry@v4.338.0...v4.339.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.339.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.339.0) | aquaproj/aqua-registry@v4.338.0...v4.339.0 #### 🎉 New Packages [#​34106](aquaproj/aqua-registry#34106) [santhosh-tekuri/jsonschema](https://github.com/santhosh-tekuri/jsonschema) - JSONSchema (draft 2020-12, draft 2019-09, draft-7, draft-6, draft-4) Validation using Go [@​takumin](https://github.com/takumin) [#​34078](aquaproj/aqua-registry#34078) [suzuki-shunsuke/rgo](https://github.com/suzuki-shunsuke/rgo): rgo is a tiny script to release a Homebrew-tap recipe, Scoop App Manifest, and a winget manifest built with GoReleaser #### Fixes [#​34096](aquaproj/aqua-registry#34096) sigstore/cosign: Configure Cosign [@​scop](https://github.com/scop) ### [`v4.338.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.338.0) [Compare Source](aquaproj/aqua-registry@v4.337.0...v4.338.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.338.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.338.0) | aquaproj/aqua-registry@v4.337.0...v4.338.0 #### 🎉 New Packages [#​34027](aquaproj/aqua-registry#34027) [nadoo/glider](https://github.com/nadoo/glider) - glider is a forward proxy with multiple protocols support, and also a dns/dhcp server with ipset management features(like dnsmasq) [@​takumin](https://github.com/takumin) #### Fixes [#​34058](aquaproj/aqua-registry#34058) fastfetch-cli/fastfetch: Fix for fastfetch 2.40.1 or later ### [`v4.337.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.337.0) [Compare Source](aquaproj/aqua-registry@v4.336.1...v4.337.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.337.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.337.0) | aquaproj/aqua-registry@v4.336.0...v4.337.0 #### 🎉 New Packages [#​34020](aquaproj/aqua-registry#34020) [bazelbuild/buildtools/buildozer](https://github.com/bazelbuild/buildtools) - Buildozer is a command line tool to rewrite multiple Bazel BUILD files using standard commands [@​andreabedini](https://github.com/andreabedini) [#​34019](aquaproj/aqua-registry#34019) [bazelbuild/buildtools/buildifier](https://github.com/bazelbuild/buildtools) - Format BUILD, BUILD.bazel and BUCK files in a standard way [@​andreabedini](https://github.com/andreabedini) [#​34022](aquaproj/aqua-registry#34022) [jkfran/killport](https://github.com/jkfran/killport) - A command-line tool to easily kill processes running on a specified port [@​takumin](https://github.com/takumin) [#​34021](aquaproj/aqua-registry#34021) [tweag/nickel](https://github.com/tweag/nickel) - Better configuration for less [@​andreabedini](https://github.com/andreabedini) ### [`v4.336.1`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.336.1) [Compare Source](aquaproj/aqua-registry@v4.336.0...v4.336.1) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.336.1) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.336.1) | aquaproj/aqua-registry@v4.336.0...v4.336.1 #### Fixes [#​33990](aquaproj/aqua-registry#33990) ninja-build/ninja: Support arm64 on Linux and Windows [@​KevSlashNull](https://github.com/KevSlashNull) ### [`v4.336.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.336.0) [Compare Source](aquaproj/aqua-registry@v4.335.0...v4.336.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.336.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.336.0) | aquaproj/aqua-registry@v4.335.0...v4.336.0 #### 🎉 New Packages [#​33971](aquaproj/aqua-registry#33971) [neondatabase/neonctl](https://github.com/neondatabase/neonctl): Neon CLI tool. The Neon CLI is a command-line interface that lets you manage Neon Serverless Postgres directly from the terminal [@​ka2n](https://github.com/ka2n) #### Fixes [#​33933](aquaproj/aqua-registry#33933) rs/curlie: Configure Cosign [@​scop](https://github.com/scop) ### [`v4.335.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.335.0) [Compare Source](aquaproj/aqua-registry@v4.334.0...v4.335.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.335.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.335.0) | aquaproj/aqua-registry@v4.334.0...v4.335.0 #### 🎉 New Packages [#​33930](aquaproj/aqua-registry#33930) [k1LoW/tbls-driver-tailordb](https://github.com/k1LoW/tbls-driver-tailordb): [tbls](https://github.com/k1LoW/tbls) driver for [TailorDB](https://docs.tailor.tech/guides/tailordb/overview) [@​toiroakr](https://github.com/toiroakr) ### [`v4.334.0`](https://github.com/aquaproj/aqua-registry/releases/tag/v4.334.0) [Compare Source](aquaproj/aqua-registry@v4.333.3...v4.334.0) [Issues](https://github.com/aquaproj/aqua-registry/issues?q=is%3Aissue+milestone%3Av4.334.0) | [Merge Requests](https://github.com/aquaproj/aqua-registry/pulls?q=is%3Apr+milestone%3Av4.334.0) | aquaproj/aqua-registry@v4.333.3...v4.334.0 #### 🎉 New Packages [#​33901](aquaproj/aqua-registry#33901) [saucelabs/forwarder](https://github.com/saucelabs/forwarder) - Forwarder is a production-ready, fast MITM proxy with PAC support. It's suitable for debugging, intercepting and manipulating HTTP traffic. It's used as a core component of Sauce Labs Sauce Connect Proxy [@​takumin](https://github.com/takumin) [#​33924](aquaproj/aqua-registry#33924) [suzuki-shunsuke/migrate-urfave-cli-v3](https://github.com/suzuki-shunsuke/migrate-urfave-cli-v3): Migrate github.com/urfave/cli/v2 to v3. This tool doesn't aim to the complete migration. Probably you need to fix code manually after running this tool, but this tool makes the migration easy </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMjguMCIsInVwZGF0ZWRJblZlciI6IjM5LjI0OC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiXX0=-->
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
aquaproj/aqua#3118 (comment)
Check List
Require signed commits, so all commits must be signedcmdx sto scaffold code