8000 Fix bug when fetching bundles from OCI registry by malancas · Pull Request #10019 · cli/cli · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Fix bug when fetching bundles from OCI registry #10019

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Dec 5, 2024

Conversation

malancas
Copy link
Contributor
@malancas malancas commented Dec 5, 2024

Fixes #10017

The algorithm should be included along with the digest when attempting to fetch bundles from an OCI registry. The algorithm was accidentally removed during a refactor, see the old code here: https://github.com/cli/cli/pull/9892/files#diff-84cf161d364effa25914785d22d193f33133a448d02e5f1559cd41ef6b48eff4L228

Signed-off-by: Meredith Lancaster <malancas@github.com>
@malancas malancas requested a review from a team as a code owner December 5, 2024 16:28
@cliAutomation cliAutomation added the external pull request originating outside of the CLI core team label Dec 5, 2024
@cliAutomation
Copy link
Collaborator

Hi! Thanks for the pull request. Please ensure that this change is linked to an issue by mentioning an issue number in the description of the pull request. If this pull request would close the issue, please put the word 'Fixes' before the issue number somewhere in the pull request body. If this is a tiny change like fixing a typo, feel free to ignore this message.

@malancas malancas merged commit 90dfefb into cli:trunk Dec 5, 2024
12 checks passed
@malancas malancas deleted the gh-attestation-oci-attestations-bug branch December 5, 2024 16:42
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Dec 6, 2024
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cli/cli](https://github.com/cli/cli) | patch | `v2.63.1` -> `v2.63.2` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>cli/cli (cli/cli)</summary>

### [`v2.63.2`](https://github.com/cli/cli/releases/tag/v2.63.2): GitHub CLI 2.63.2

[Compare Source](cli/cli@v2.63.1...v2.63.2)

#### What's Changed

-   Use consistent slice ordering in run download tests by [@&#8203;williammartin](https://github.com/williammartin) in cli/cli#10006
-   Fix bug when fetching bundles from OCI registry by [@&#8203;malancas](https://github.com/malancas) in cli/cli#10019
-   Use safepaths for run download by [@&#8203;williammartin](https://github.com/williammartin) in cli/cli#10009
-   Error for mutually exclusive json and watch flags by [@&#8203;andyfeller](https://github.com/andyfeller) in cli/cli#10016

**Full Changelog**: cli/cli@v2.63.1...v2.63.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiXX0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
external pull request originating outside of the CLI core team
Projects
None yet
Development

Successfully merging this pull request may close these issues.

v2.63.0 seems to have broken attestation verify --bundle-from-oci flag
3 participants
0