Skip to content

Choose a tag to compare

@jku jku released this 21 Oct 07:27
· 19 commits to main since this release
f832326

gh-action-sigstore-python is now compatible with Rekor v2
transparency log (but produced signature bundles still contain Rekor v1 entries by default).

Changed

  • The action now uses sigstore-python 4.1. All other dependencies are also updated
    (#220)

Fixed

  • Fixed incompatibility with Python 3.14 by upgrading dependencies
    (#225)

Added

  • rekor-version argument was added to control the Rekor transparency log
    version when signing. The default version in the gh-action-sigstore-python
    3.x series will remain 1 (except when using staging: true).
    (#228)