https://github.com/chains-project/ghasum - Release v0.6.0

Enhancements

• Expand the program output on success.
• Add the ghasum list subcommand to get a nested list of GitHub Actions dependencies for the target.
• Include archived status in the ghasum list output.
• Request a bug report when a panic occurs.

Security

• Upgrade Go to v1.24.4.

- Go
Published by ericcornelissen 6 months ago

https://github.com/chains-project/ghasum - Release v0.5.2

Bugs

• Fix verifying a non-job target identified by the absolute path on Windows.
• Fix various cases where files or directories could not found on Windows.

- Go
Published by ericcornelissen 9 months ago

https://github.com/chains-project/ghasum - Release v0.5.1

Enhancements

• Report redundant checksums on verification of an entire repository.

Bugs

• Fix errors for actions with a Dockerfile manifest.
• Fix unexpected error due to Windows-style newlines in the sumfile.

- Go
Published by ericcornelissen 9 months ago

https://github.com/chains-project/ghasum - Release v0.5.0

Enhancements

• Correct typo in the ghasum help verify output.
• Correct typo in the ghasum verify output.
• Enable cache eviction on ghasum init.
• Ensure ghasum verify outcome is linked to gha.sum content.
• Include reusable workflows in gha.sum, including transitive actions used in reusable workflows.

- Go
Published by ericcornelissen 10 months ago

https://github.com/chains-project/ghasum - Release v0.4.0

Enhancements

• Include transitive actions in gha.sum (opt-out available).
• Improve performance of cloning repositories at a commit.

Bugs

• Fix errors for uses: values with local actions.
• Fix errors for uses: values with Docker Hub actions.

Security

• Upgrade Go to v1.24.2.

Miscellaneous

• Improve reproducibility by using -trimpath.

- Go
Published by ericcornelissen 10 months ago

https://github.com/chains-project/ghasum - Release v0.3.0

Enhancements

• Improve behavior for sumfiles with duplicate entries.
• Add -offline verification support
• Add cache eviction support.
• Make ghasum update preserve existing checksums by default.

Bugs

• Fix behavior for sumfiles with duplicate entries.

Security

• Bump Go to v1.23.5

Miscellaneous

• Improve reproducibility by using -trimpath.

- Go
Published by ericcornelissen about 1 year ago

https://github.com/chains-project/ghasum - Release v0.2.0

Enhancements

• Support validating a single workflow.
• Support validating a single job in a workflow.
• Make ghasum update error if the gha.sum file is corrupted.

Bugs

• Unlock gha.sum if an error occurs during updating.
• Correct parsing uses values with multiple @ characters.

Security

• Upgrade from Go 1.22.0 to Go 1.22.1

- Go
Published by github-actions[bot] almost 2 years ago

https://github.com/chains-project/ghasum - Release v0.1.0

v0.1.0

- Go
Published by github-actions[bot] about 2 years ago