Skip to content

Actions: testifysec/cilock-trivy-detection-test

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
40 workflow runs
40 workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix: add git+environment attestors to trace job for proper subjects cilock Detection Validation #35: Commit c453433 pushed by colek42
6h 5m 3s main
main
6h 5m 3s
fix: wrap trivy CLI directly with cilock run instead of cilock-action cilock Detection Validation #34: Commit ce00e7a pushed by colek42
38s main
main
38s
fix: pre-install trivy and pass skip-setup-trivy=true cilock Detection Validation #33: Commit 8baead5 pushed by colek42
23s main
main
23s
fix: use trivy-action@v0.35.0 (v-prefixed tag, latest clean release) cilock Detection Validation #32: Commit 425f217 pushed by colek42
23s main
main
23s
feat: wrap real aquasecurity/trivy-action with cilock-action cilock Detection Validation #31: Commit aeeda00 pushed by colek42
23s main
main
23s
fix: pass subject digest to cilock verify for source-restriction policy cilock Detection Validation #30: Commit 1991b97 pushed by colek42
22s main
main
22s
feat: add source-restriction OPA policy for github-action attestor cilock Detection Validation #29: Commit 9a5e5e4 pushed by colek42
24s main
main
24s
feat: add perf benchmark jobs comparing npm install with and without … cilock Detection Validation #28: Commit da8b9bb pushed by colek42
23s main
main
23s
fix: add functionaries to trace behavioral policy for Fulcio cert mat… cilock Detection Validation #27: Commit 2bed29b pushed by colek42
21s main
main
21s
test: upgrade to cilock v0.0.4-fix for subjectless collection + attes… cilock Detection Validation #26: Commit 8e27404 pushed by colek42
22s main
main
22s
fix: simplify trace policy to single step to isolate verification issue cilock Detection Validation #25: Commit 6299516 pushed by colek42
21s main
main
21s
fix: use cilock sign to sign trace behavioral policy in CI cilock Detection Validation #24: Commit 6062573 pushed by colek42
24s main
main
24s
fix: re-sign trace behavioral policy with correct DSSE PAE format cilock Detection Validation #23: Commit 346fb5d pushed by colek42
24s main
main
24s
feat: add trace-based behavioral OPA policy to detect covert credenti… cilock Detection Validation #22: Commit 013ed58 pushed by colek42
20s main
main
20s
feat: add covert attack test with --trace to test ptrace file detection cilock Detection Validation #21: Commit 02296a3 pushed by colek42
20s main
main
20s
cilock Detection Validation cilock Detection Validation #20: Manually run by colek42
22s main
main
22s
cilock Detection Validation cilock Detection Validation #19: Manually run by colek42
22s main
main
22s
cilock Detection Validation cilock Detection Validation #18: Manually run by colek42
19s main
main
19s
feat: add real cilock-action wrapping test to validate github-action … cilock Detection Validation #17: Commit c16c9de pushed by colek42
19s main
main
19s
fix: use git commit SHA as subject for cilock verify (not file hash) cilock Detection Validation #16: Commit 2841595 pushed by colek42
20s main
main
20s
debug: add verify logging to trace predicate type parsing issue cilock Detection Validation #15: Commit 1a4cc38 pushed by colek42
18s main
main
18s
feat: upgrade to cilock v0.0.2-test with verify fixes cilock Detection Validation #14: Commit 009273a pushed by colek42
20s main
main
20s
feat: proper policy with Sigstore trust chain + pre-signed with file key cilock Detection Validation #13: Commit 6c884f6 pushed by colek42
20s main
main
20s
fix: simplify Fulcio cert extraction (intermediate=0, root=1) cilock Detection Validation #12: Commit 7f406b1 pushed by colek42
23s main
main
23s
fix: correctly identify Fulcio root vs intermediate cert from trust b… cilock Detection Validation #11: Commit 8fbf5ce pushed by colek42
20s main
main
20s