9 Commits

Author SHA256 Message Date
6cd8068acd Accepting request 1315539 from devel:languages:go
- Update to version 0.4.1:
  * Reverse platform+os naming scheme (forwarded request 1315537 from jfkw)

OBS-URL: https://build.opensuse.org/request/show/1315539
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vexctl?expand=0&rev=5
2025-11-05 15:18:42 +00:00
54e19d8ab0 - Update to version 0.4.1:
* Reverse platform+os naming scheme

OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/vexctl?expand=0&rev=10
2025-11-04 18:33:12 +00:00
91ce4f4357 - Update to version 0.4.1:
* Reverse platform+os naming cheme

OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/vexctl?expand=0&rev=9
2025-11-04 14:42:58 +00:00
5afb9a59d3 Accepting request 1307935 from devel:languages:go
- Update to version 0.4.0:
  * update go, goreleaser and update/clean ci
  * Bump kubernetes-sigs/release-actions in the all group
  * Bump sigs.k8s.io/release-utils from 0.12.1 to 0.12.2 in the all group
- Packaging improvements:
  * Update to BuildRequires: golang(API) >= 1.25 matching go.mod (forwarded request 1307934 from jfkw)

OBS-URL: https://build.opensuse.org/request/show/1307935
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vexctl?expand=0&rev=4
2025-09-30 15:40:56 +00:00
b781c8af03 - Update to version 0.4.0:
* update go, goreleaser and update/clean ci
  * Bump kubernetes-sigs/release-actions in the all group
  * Bump sigs.k8s.io/release-utils from 0.12.1 to 0.12.2 in the all group
- Packaging improvements:
  * Update to BuildRequires: golang(API) >= 1.25 matching go.mod

OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/vexctl?expand=0&rev=7
2025-09-29 16:20:48 +00:00
3c598ac62d Accepting request 1306381 from devel:languages:go
- Update to version 0.3.0+git181.33bac59:
  * Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 in the all group
  * Fix break w/cosign 2.6.0
  * Bump cosign & go-vex
  * Bump the all group across 1 directory with 2 updates
  * Fix 2.4 linter nits
  * Bump softprops/action-gh-release from 2.3.2 to 2.3.3 in the all group
  * Bump github.com/spf13/cobra from 1.9.1 to 1.10.1
  * Bump actions/setup-go from 5.5.0 to 6.0.0
  * Bump github.com/stretchr/testify from 1.11.0 to 1.11.1 in the all group
  * Bump github.com/stretchr/testify from 1.10.0 to 1.11.0
  * Bump github.com/go-viper/mapstructure/v2 in the go_modules group
  * Bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 in the all group
  * update release-utils and fix pkg name
  * Bump actions/checkout from 4.2.2 to 5.0.0
  * Bump github.com/secure-systems-lab/go-securesystemslib in the all group
  * Bump github.com/sigstore/rekor from 1.3.10 to 1.4.0
  * Bump sigs.k8s.io/release-utils from 0.11.1 to 0.12.0
  * Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 in the all group
  * Bump github.com/sigstore/cosign/v2 from 2.5.2 to 2.5.3 in the all group
  * Bump github.com/go-viper/mapstructure/v2 in the go_modules group
  * Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 in the all group
  * Bump github.com/sigstore/cosign/v2 from 2.5.1 to 2.5.2 in the all group
  * Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 in the all group
  * Bump the all group with 2 updates
  * migrate config to v2
  * Bump golangci/golangci-lint-action from 6.5.2 to 8.0.0
- Packaging improvements:
  * _service tar_scm versionrewrite-pattern v(.*?)(\+git0\.?.*?)?$
    which includes git offset only if offset exists. Useful for (forwarded request 1306380 from jfkw)

OBS-URL: https://build.opensuse.org/request/show/1306381
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vexctl?expand=0&rev=3
2025-09-22 14:40:34 +00:00
a01763b9db - Update to version 0.3.0+git181.33bac59:
* Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 in the all group
  * Fix break w/cosign 2.6.0
  * Bump cosign & go-vex
  * Bump the all group across 1 directory with 2 updates
  * Fix 2.4 linter nits
  * Bump softprops/action-gh-release from 2.3.2 to 2.3.3 in the all group
  * Bump github.com/spf13/cobra from 1.9.1 to 1.10.1
  * Bump actions/setup-go from 5.5.0 to 6.0.0
  * Bump github.com/stretchr/testify from 1.11.0 to 1.11.1 in the all group
  * Bump github.com/stretchr/testify from 1.10.0 to 1.11.0
  * Bump github.com/go-viper/mapstructure/v2 in the go_modules group
  * Bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 in the all group
  * update release-utils and fix pkg name
  * Bump actions/checkout from 4.2.2 to 5.0.0
  * Bump github.com/secure-systems-lab/go-securesystemslib in the all group
  * Bump github.com/sigstore/rekor from 1.3.10 to 1.4.0
  * Bump sigs.k8s.io/release-utils from 0.11.1 to 0.12.0
  * Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 in the all group
  * Bump github.com/sigstore/cosign/v2 from 2.5.2 to 2.5.3 in the all group
  * Bump github.com/go-viper/mapstructure/v2 in the go_modules group
  * Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 in the all group
  * Bump github.com/sigstore/cosign/v2 from 2.5.1 to 2.5.2 in the all group
  * Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 in the all group
  * Bump the all group with 2 updates
  * migrate config to v2
  * Bump golangci/golangci-lint-action from 6.5.2 to 8.0.0
- Packaging improvements:
  * _service tar_scm versionrewrite-pattern v(.*?)(\+git0\.?.*?)?$
    which includes git offset only if offset exists. Useful for

OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/vexctl?expand=0&rev=5
2025-09-22 02:09:25 +00:00
fede56176a Accepting request 1286234 from devel:languages:go
- Update to version 0.3.0+git133.ff97560:
  * Upstream has not had a recent tagged release to pick up
    dependency updates committed to main branch.
- Packaging improvements:
  * _service tar_scm set revision to branch main until upstream
    next has a tagged release
  * _service tar_scm when revision is a branch name e.g. master
    use versionformat @PARENT_TAG@+git@TAG_OFFSET@.%h to represent
    git commit history included beyond last tagged release. Archive
    name will be: name-X.Y.Z+gitN.shortsha.tar.gz. When upstream
    project resumes tagged releases drop the param versionformat
    and restore revision to tag name e.g. vX.Y.Z.
  * Update to BuildRequires: golang(API) >= 1.24 matching go.mod
  * %install remove extraneous comment and dest path quoting (forwarded request 1286233 from jfkw)

OBS-URL: https://build.opensuse.org/request/show/1286234
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vexctl?expand=0&rev=2
2025-06-17 16:24:38 +00:00
96aaac1add Accepting request 1286233 from home:jfkw:branches:devel:languages:go
- Update to version 0.3.0+git133.ff97560:
  * Upstream has not had a recent tagged release to pick up
    dependency updates committed to main branch.
- Packaging improvements:
  * _service tar_scm set revision to branch main until upstream
    next has a tagged release
  * _service tar_scm when revision is a branch name e.g. master
    use versionformat @PARENT_TAG@+git@TAG_OFFSET@.%h to represent
    git commit history included beyond last tagged release. Archive
    name will be: name-X.Y.Z+gitN.shortsha.tar.gz. When upstream
    project resumes tagged releases drop the param versionformat
    and restore revision to tag name e.g. vX.Y.Z.
  * Update to BuildRequires: golang(API) >= 1.24 matching go.mod
  * %install remove extraneous comment and dest path quoting

OBS-URL: https://build.opensuse.org/request/show/1286233
OBS-URL: https://build.opensuse.org/package/show/devel:languages:go/vexctl?expand=0&rev=3
2025-06-17 04:46:59 +00:00
7 changed files with 150 additions and 15 deletions

View File

@@ -3,10 +3,10 @@
<param name="url">https://github.com/openvex/vexctl.git</param>
<param name="scm">git</param>
<param name="exclude">.git</param>
<param name="revision">v0.3.0</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="revision">v0.4.1</param>
<param name="versionformat">@PARENT_TAG@+git@TAG_OFFSET@.%h</param>
<param name="changesgenerate">enable</param>
<param name="versionrewrite-pattern">v(.*)</param>
<param name="versionrewrite-pattern">v(.*?)(\+git0\.?.*?)?$</param>
</service>
<service name="set_version" mode="manual">
</service>

View File

@@ -1,4 +1,4 @@
<servicedata>
<service name="tar_scm">
<param name="url">https://github.com/openvex/vexctl.git</param>
<param name="changesrevision">c613023a69ce990a54c25c2f5e69d5d78285927f</param></service></servicedata>
<param name="changesrevision">54a0fded018ab0e49928d35240c09c6264b0aa75</param></service></servicedata>

BIN
vendor.tar.gz LFS

Binary file not shown.

Binary file not shown.

3
vexctl-0.4.1.tar.gz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:250bfe6846a63c59301ec12727ac4bfd3011ffcbbf7618f832d0ad8210a74414
size 274064

View File

@@ -1,3 +1,139 @@
-------------------------------------------------------------------
Tue Nov 04 14:35:57 UTC 2025 - Jeff Kowalczyk <jkowalczyk@suse.com>
- Update to version 0.4.1:
* Reverse platform+os naming scheme
-------------------------------------------------------------------
Mon Sep 29 15:58:28 UTC 2025 - Jeff Kowalczyk <jkowalczyk@suse.com>
- Update to version 0.4.0:
* update go, goreleaser and update/clean ci
* Bump kubernetes-sigs/release-actions in the all group
* Bump sigs.k8s.io/release-utils from 0.12.1 to 0.12.2 in the all group
- Packaging improvements:
* Update to BuildRequires: golang(API) >= 1.25 matching go.mod
-------------------------------------------------------------------
Mon Sep 22 01:30:50 UTC 2025 - Jeff Kowalczyk <jkowalczyk@suse.com>
- Update to version 0.3.0+git181.33bac59:
* Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 in the all group
* Fix break w/cosign 2.6.0
* Bump cosign & go-vex
* Bump the all group across 1 directory with 2 updates
* Fix 2.4 linter nits
* Bump softprops/action-gh-release from 2.3.2 to 2.3.3 in the all group
* Bump github.com/spf13/cobra from 1.9.1 to 1.10.1
* Bump actions/setup-go from 5.5.0 to 6.0.0
* Bump github.com/stretchr/testify from 1.11.0 to 1.11.1 in the all group
* Bump github.com/stretchr/testify from 1.10.0 to 1.11.0
* Bump github.com/go-viper/mapstructure/v2 in the go_modules group
* Bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0 in the all group
* update release-utils and fix pkg name
* Bump actions/checkout from 4.2.2 to 5.0.0
* Bump github.com/secure-systems-lab/go-securesystemslib in the all group
* Bump github.com/sigstore/rekor from 1.3.10 to 1.4.0
* Bump sigs.k8s.io/release-utils from 0.11.1 to 0.12.0
* Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 in the all group
* Bump github.com/sigstore/cosign/v2 from 2.5.2 to 2.5.3 in the all group
* Bump github.com/go-viper/mapstructure/v2 in the go_modules group
* Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 in the all group
* Bump github.com/sigstore/cosign/v2 from 2.5.1 to 2.5.2 in the all group
* Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 in the all group
* Bump the all group with 2 updates
* migrate config to v2
* Bump golangci/golangci-lint-action from 6.5.2 to 8.0.0
- Packaging improvements:
* _service tar_scm versionrewrite-pattern v(.*?)(\+git0\.?.*?)?$
which includes git offset only if offset exists. Useful for
packages which frequently need package updates in the interim
between upstream tagged releases.
-------------------------------------------------------------------
Mon Jun 16 21:57:19 UTC 2025 - Jeff Kowalczyk <jkowalczyk@suse.com>
- Update to version 0.3.0+git133.ff97560:
* Bump the all group across 1 directory with 2 updates
* Bump softprops/action-gh-release from 2.3.0 to 2.3.2 in the all group
* Bump github.com/cloudflare/circl in the go_modules group
* Bump softprops/action-gh-release from 2.2.2 to 2.3.0 in the all group
* Bump github.com/google/go-containerregistry in the all group
* Bump actions/setup-go from 5.4.0 to 5.5.0 in the all group
* Bump github.com/sigstore/sigstore from 1.9.3 to 1.9.4 in the all group
* Bump the all group across 1 directory with 2 updates
* Bump sigstore/cosign-installer from 3.8.1 to 3.8.2 in the all group
* Bump softprops/action-gh-release from 2.2.1 to 2.2.2 in the all group
* Bump kubernetes-sigs/release-actions in the all group
* Bump ko-build/setup-ko from 0.8 to 0.9 in the all group
* Bump github.com/sigstore/cosign/v2 from 2.4.3 to 2.5.0
* Bump goreleaser/goreleaser-action from 6.2.1 to 6.3.0 in the all group
* Bump sigs.k8s.io/release-utils from 0.11.0 to 0.11.1 in the all group
* Bump github.com/golang-jwt/jwt/v4 in the go_modules group
* Bump the all group with 2 updates
* Bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 in the all group
* Bump github.com/sigstore/sigstore from 1.8.15 to 1.9.1
* Bump golang.org/x/net from 0.35.0 to 0.36.0 in the go_modules group
* Bump golangci/golangci-lint-action from 6.5.0 to 6.5.1 in the all group
* Bump github.com/go-jose/go-jose/v3 in the go_modules group
* Bump github.com/go-jose/go-jose/v4 in the go_modules group
* Bump actions/upload-artifact from 4.6.0 to 4.6.1 in the all group
* Bump sigstore/cosign-installer from 3.8.0 to 3.8.1 in the all group
* Bump the all group with 2 updates
* use go1.24 and update golangci-lint
* Bump golangci/golangci-lint-action from 6.3.3 to 6.5.0 in the all group
* Bump github.com/spf13/cobra from 1.8.1 to 1.9.1
* Bump github.com/sigstore/sigstore from 1.8.12 to 1.8.14 in the all group
* Bump golangci/golangci-lint-action from 6.3.2 to 6.3.3 in the all group
* Bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1 in the all group
* Bump golangci/golangci-lint-action from 6.3.0 to 6.3.2 in the all group
* Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 in the all group
* Bump golangci/golangci-lint-action from 6.2.0 to 6.3.0 in the all group
* Bump the all group with 2 updates
* Bump sigs.k8s.io/release-utils from 0.9.0 to 0.10.0
* Bump github.com/sigstore/rekor from 1.3.8 to 1.3.9 in the all group
* Bump actions/setup-go from 5.2.0 to 5.3.0 in the all group
* Bump golangci/golangci-lint-action from 6.1.1 to 6.2.0 in the all group
* Bump sigs.k8s.io/release-utils from 0.8.5 to 0.9.0
* Bump go dependencies manually
* Bump ko-build/setup-ko from 0.7 to 0.8 in the all group
* Bump actions/upload-artifact from 4.5.0 to 4.6.0 in the all group
* Bump softprops/action-gh-release from 2.2.0 to 2.2.1 in the all group
* Bump actions/upload-artifact from 4.4.3 to 4.5.0 in the all group
* Bump golang.org/x/crypto from 0.28.0 to 0.31.0 in the go_modules group
* Bump the all group with 2 updates
* Bump softprops/action-gh-release from 2.0.9 to 2.1.0 in the all group
* Bump github.com/golang-jwt/jwt/v4 in the go_modules group
* Bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 in the all group
* Bump softprops/action-gh-release from 2.0.8 to 2.0.9 in the all group
* Update verify.yaml
* Update release.yaml
* Update ci-build-test.yaml
* Bump actions/setup-go from 5.0.2 to 5.1.0 in the all group
* Bump actions/checkout from 4.2.1 to 4.2.2 in the all group
* Bump kubernetes-sigs/release-actions in the all group
* Bump github.com/sigstore/sigstore from 1.8.9 to 1.8.10 in the all group
* Bump actions/upload-artifact from 4.4.2 to 4.4.3 in the all group
* Bump actions/upload-artifact from 4.4.1 to 4.4.2 in the all group
* Bump the all group with 2 updates
* Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 in the all group
* Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 in the all group
* Bump github.com/sigstore/cosign/v2 from 2.4.0 to 2.4.1 in the all group
* Bump actions/checkout from 4.1.7 to 4.2.0 in the all group
* Bump sigs.k8s.io/release-utils from 0.8.4 to 0.8.5 in the all group
* upgrade to go1.23
- Packaging improvements:
* _service tar_scm set revision to branch main until upstream
next has a tagged release
* _service tar_scm when revision is a branch name e.g. master
use versionformat @PARENT_TAG@+git@TAG_OFFSET@.%h to represent
git commit history included beyond last tagged release. Archive
name will be: name-X.Y.Z+gitN.shortsha.tar.gz. When upstream
project resumes tagged releases drop the param versionformat
and restore revision to tag name e.g. vX.Y.Z.
* Update to BuildRequires: golang(API) >= 1.24 matching go.mod
* %install remove extraneous comment and dest path quoting
-------------------------------------------------------------------
Tue Sep 10 01:45:26 UTC 2024 - Jeff Kowalczyk <jkowalczyk@suse.com>

View File

@@ -1,7 +1,7 @@
#
# spec file for package vexctl
#
# Copyright (c) 2024 SUSE LLC
# Copyright (c) 2025 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,15 +17,15 @@
Name: vexctl
Version: 0.3.0
Version: 0.4.1
Release: 0
Summary: CLI tool to create, transform and attest VEX metadata
Summary: CLI tool to create, transform and attest VEX metadata
License: Apache-2.0
Group: Productivity/Security
URL: https://github.com/openvex/vexctl
Source: %{name}-%{version}.tar.gz
Source1: vendor.tar.gz
BuildRequires: golang(API) >= 1.23
BuildRequires: golang(API) >= 1.25
%description
vexctl is a CLI tool to create, apply, and attest VEX (Vulnerability
@@ -51,8 +51,7 @@ go build
./%{name} --help
%install
# Install the binary.
install -D -m 0755 %{name} "%{buildroot}/%{_bindir}/%{name}"
install -D -m 0755 %{name} %{buildroot}/%{_bindir}/%{name}
%files
%doc README.md