What's Changed
- Bump codecov/codecov-action from 2.1.0 to 3 by @dependabot in #1714
- Bump github/codeql-action from 2.1.6 to 2.1.7 by @dependabot in #1713
- Bump google-github-actions/auth from 0.6.0 to 0.7.0 by @dependabot in #1712
- Bump github.com/xanzy/go-gitlab from 0.61.0 to 0.62.0 by @dependabot in #1711
- Makefile: fix directory not found error by @hectorj2f in #1718
- Update release job by @cpanato in #1720
- [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
- fix: add permissions to patch events by @hectorj2f in #1722
- Bump sigstore/cosign-installer from 2.1.0 to 2.2.0 by @dependabot in #1723
- Bump cloud.google.com/go/storage from 1.21.0 to 1.22.0 by @dependabot in #1721
- Bump github/codeql-action from 2.1.7 to 2.1.8 by @dependabot in #1725
- Make public all types required to use ValidatePolicy by @jdolitsky in #1727
- Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
- Bump github.com/hashicorp/go-uuid from 1.0.2 to 1.0.3 by @dependabot in #1724
- Remove newline from
download sbomoutput by @ribbybibby in #1732 - Fix packages name and binary in the packages by @cpanato in #1734
- Fix fulcioroots test and linter error by @haydentherapper in #1741
- Support non-ECDSA public keys in certificates by @haydentherapper in #1740
- bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- Bump actions/cache from 3.0.1 to 3.0.2 by @dependabot in #1737
- add changelog for v1.7.2 by @cpanato in #1735
Full Changelog: v1.7.1...v1.7.2