Chip Zoller

Suppress provenance non-fully-rendered fields in github_event_payload

3

I'm noticing in both the generic provenance generator and the Go generator that certain fields in the `environment` object are included even if they have portions of the templated values...

Provide output containing hash of the provenance file

10

Since the provenance file (in attested format) gets uploaded, users may need to download that in another job to attach it as an attestation to an image. Making sure the...

Running `kind-setup.sh` with no arguments fails to locate image

6

**Describe the bug** When following the instructions given [here](https://antrea.io/docs/v1.6.1/docs/kind/#create-a-kind-cluster-and-deploy-antrea-in-a-few-seconds) and running `kind-setup.sh` with no arguments (on KinD v0.14), the script is unable to locate and therefore load the image named...

updates with case insensitivity guarantee

3

Signed-off-by: Chip Zoller ## Explanation This PR adds case insensitivity guarantees to a policy as raised in [this issue](https://github.com/kyverno/policies/issues/413). ## Related issue ## Milestone of this PR /milestone 1.8.0 ##...

[Bug] Variables beginning with `image` should be allowed

4

### Kyverno Version 1.7.2 ### Kubernetes Version 1.24.x ### Kubernetes Platform K3d ### Kyverno Rule Type verifyImages ### Description When using a `verifyImages` rule, the internal variable named `{{image}}` (singular)...

[Bug] SBOM is not associated with digest corresponding to released tag

18

### Kyverno Version 1.7.0 ### Description In looking at the releaser CI action, the SBOM that is uploaded is not referencing the same digest as that of the tagged image....

[enhancement] Using `{{@}}` variable in `foreach` mutate rule doesn't resolve correct path

8

### Kyverno Version 1.7.0 ### Kubernetes Version 1.23.x ### Kubernetes Platform K3d ### Kyverno Rule Type Mutate ### Description When using `{{ @ }}` in a `foreach` mutate rule, patchStrategicMerge,...

[Bug] `multiply()` JMESPath filter tweaks

3

### Kyverno Version 1.6.x ### Description The `multiply()` custom JMESPath filter allows multiplication operations that violate the laws of mathematics ([here](https://github.com/kyverno/kyverno/blob/7a55d26d89a485302286e310d1196d825656f5e4/pkg/engine/jmespath/functions_test.go#L737) and [here](https://github.com/kyverno/kyverno/blob/7a55d26d89a485302286e310d1196d825656f5e4/pkg/engine/jmespath/functions_test.go#L749)). Multiplication should only allow any one non-integer...

[Bug] `modulo()` JMESPath filter tweaks

12

### Kyverno Version 1.6.x ### Description The `modulo()` filter needs to be updated in accordance with the `divide()` operator and intended outcomes. In looking at the [test cases](https://github.com/kyverno/kyverno/blob/7a55d26d89a485302286e310d1196d825656f5e4/pkg/engine/jmespath/functions_test.go#L910), many of...

[Bug] Attestation verification fails if signatures differ

6

### Kyverno Version 1.8.0-rc6 ### Kubernetes Version 1.24.x ### Kubernetes Platform K3d ### Kyverno Rule Type verifyImages ### Description Kyverno assumes that the subject in the (keyless) signature of the...