Matt Moore 5787600e92

Normalize the package hash to hex. (#512) ...

We were emitting package checksum hashes as `h1:{base64}`.  `h1:` is a prefix that indicates "Hash 1", which is a SHA-256 based hash of the files, which is then base64 encoded as the suffix.

This change detects/strips the `h1:` prefix and re-encodes the base64 data as hex.

2021-11-23 09:34:43 -05:00

..

build

Connect SBOMs with SPDX support. (#511)

2021-11-22 17:19:43 -05:00

commands

Normalize the package hash to hex. (#512)

2021-11-23 09:34:43 -05:00

internal/testing

Do not require docker installed for tests (#438)

2021-09-20 07:07:56 -04:00

publish

Add support for writing SBOMs when the build.Result is oci.Signed*. (#506)

2021-11-22 10:57:13 -08:00

resolve

Enforce more lint checks, fix findings (#492)

2021-11-05 10:26:09 -07:00

doc.go

Initial commit

2019-03-14 14:23:47 -04:00