Merge branch 'main' into ossf-lazy

wolfi-dev · Dec 31, 2024 · 289c164 · 289c164
2 parents 37771ab + 9fd64cf
commit 289c164
Show file tree

Hide file tree

Showing 1,860 changed files with 28,200 additions and 8,883 deletions.
diff --git a/.github/actions/docker-run/action.yaml b/.github/actions/docker-run/action.yaml
@@ -6,7 +6,7 @@ inputs:
     required: true
   image:
     description: "The image to use"
-    default: "ghcr.io/wolfi-dev/sdk:latest@sha256:98d8669d2eb9c8d23984fa2f55a272b67a04b4bfd132c714682c4fd716a3d7be"
+    default: "ghcr.io/wolfi-dev/sdk:latest@sha256:6d49f779092c0bfacb2296654376aac5607dd946a5cd077f06e05e89a2341495"
     required: false
   workdir:
     description: "The images working directory"

diff --git a/.github/chainguard/epoch-bot.sts.yaml b/.github/chainguard/epoch-bot.sts.yaml
@@ -1,8 +1,8 @@
 issuer: https://accounts.google.com
 
-# staging: [email protected]
-# prod: TODO
-subject_pattern: "(101928776192101947682|TODO)"
+# staging: [email protected] (101928776192101947682)
+# prod: [email protected] (109129704552956512299)
+subject_pattern: "(101928776192101947682|109129704552956512299)"
 
 permissions:
   contents: read

diff --git a/.github/chainguard/lifecycle-cve-dashboard.sts.yaml b/.github/chainguard/lifecycle-cve-dashboard.sts.yaml
@@ -0,0 +1,8 @@
+issuer: https://accounts.google.com
+
+# have more than one service account
+# lc-cve-dashboard-bot@staging-enforce-cd1e.iam.gserviceaccount.com
+subject_pattern: "(107513915972546566458)"
+
+permissions:
+  contents: read