v1.7.0

Imports sylabs/sif 1.7.0

Version 2.0.0

• Imports sylabs/sif 2.0.0

Version 1.2.3

• bump golang.org/x/crypto to e9a32991a82e
• bump module language version to 1.15
• minor code styling fixes

Version 1.2.2

• Package renaming: #89
• Security fix for uuid dependency: #90
• Cobra update: #91

Version 1.2.1

This patch version fixes an output consistency issue, which was causing unit tests to fail on some systems (#85).

Version 1.2.0

This release introduces the integrity package, which implements functions to add, examine, and verify digital signatures in a SIF image.

Previously, the Singularity code base implemented its own digital signature format in its signing package. Starting with version 3.6, Singularity will utilize the SIF integrity package. Developers are encouraged to use the integrity package when developing tools that deal with SIF digital signatures. See the Compatibility section below for considerations when dealing with SIF images created with versions of Singularity prior to 3.6.0.

Compatibility

The SIF integrity package implements a digital signature format that differs from that of the legacy digital signature format implemented by the Singularity signing package. When adding digital signatures, the integrity package uses the new digital signature format. When examining and/or verifying digital signatures, the integrity package includes functionality to deal with legacy digital signatures, in particular:

• The OptVerifyLegacy option enables verification of legacy signatures when creating a new Verifier.
• The OptVerifyLegacyAll option enables verification of legacy signatures, and adds verification tasks for all non-signature objects that are part of a group when creating a new Verifier.

Regardless of whether legacy signature verification is enabled, the returned Verifier can be used to examine the signing entities and/or cryptographically verify the selected object(s). See the documentation for more information.

Version 1.1.0

• Add (*Descriptor).GetReadSeeker()
• Fix bug in (*Descriptor)GetData()

Version 1.0.10

• Ratchet Go requirements to 1.13-1.14
• Remove vendor usage
• Increase linter coverage
• Bump github.com/spf13/cobra to 1.0.0

Version 1.0.9

• Fix SIF header output format
• Fix wrong image size with SIF image as block device

Version 1.0.8

• Introduce new descriptor for cryptographic messages