Skip to main content

Looking back at Dec 2022

· 3 min read
Shunsuke Suzuki

Blog posts​

OSS Contribution​

Issue​

created daterepositoryshort description
2022-12-18sigstore/cosignImprove the document for new users to understand quickly that Cosign supports blobs signing
2022-12-01cloudflare/cloudflaredcloudflared-darwin-amd64.tgz of the version 2022.11.1 is empty

Pull Request​

merged daterepositorylangPR's short description
2022-12-29bufbuild/protoc-gen-validatedocumentdocs: fix installation
2022-12-28crazy-max/diundockerfilechore: fix the file extension
2022-12-22x-motemen/blogsyncgochore: build assets for Windows
2022-12-03mercari/github-app-token-generatorgofix: use GITHUB_OUTPUT instead of deprecated set-output command
2022-12-03slsa-framework/slsa-verifiergodocs: fix go install
2022-12-02slsa-framework/slsa-verifiergodocs: refer v2.0.0 in README
2022-12-02slsa-framework/slsa-verifiergofix: fix the Go package version to v2
2022-12-02slsa-framework/slsa-verifiergodocs: add the checksum of v2.0.0

OSS Development​

aqua​

The notable change is Cosign and SLSA Provenance support. You can install aqua and tools securely. And the Improvement of aqua update-checksum command is also important.

Please see Document and Release Notes for the detail.

  • v1.28.0
    • Improved aqua update-checksum command
      • Ignore unrelated files' checksums in checksum files
      • Support pruning unused checksums in aqua-checksums.json
  • v1.27.0
    • Support a new field private for private packages and registries
    • Support template in go_install package's path attribute
  • v1.26.2
    • Install Cosign asset for correct platform even if AQUA_GOOS and AQUA_GOARCH are set
  • v1.26.1
    • Skip installing Cosign and verify with Cosign in windows/arm64
    • Check if Cosign is supported
  • v1.26.0
    • Support package verification by Cosign and slsa-verifier
  • v1.25.2
    • generate: fix a bug of --pin option

aqua-registry​

  • version: v3.100.0 => v3.114.0
  • the number of packages: 961 => 1000 (+39)

Thank you, all contributors!

aqua-installer​

  • v2.0.2
    • Update aqua for bootstrap to v1.26.2
  • v2.0.1
    • Use shasum instead of sha256sum if sha256sum isn't found and skip checksum verification if they aren't found
  • v2.0.0
    • Verify aqua with slsa-verifier
  • v1.2.0
    • GitHub Action: Support Windows PowerShell

aqua-renovate-config​

  • 1.5.0
    • Refactor presets with Jsonnet
  • 1.4.0
    • Support mongodb/mongodb-atlas-cli/atlascli and ipinfo/cli
  • 1.3.0
    • installer-script: Support updating aqua

update-checksum-action​

  • v0.1.1
    • Add an input prune to support aqua update-checksum's -prune option

News​