build: update buildkit vendor

Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
This commit is contained in:
David Karlsson 2023-08-31 15:39:35 +02:00
parent e36fb92fd1
commit 5cfda7ed14
4 changed files with 40 additions and 14 deletions

View File

@ -9,7 +9,9 @@ The provenance format generated by BuildKit is defined by the
This page describes how BuildKit populate each field, and whether the field gets This page describes how BuildKit populate each field, and whether the field gets
included when you generate attestations `mode=min` and `mode=max`. included when you generate attestations `mode=min` and `mode=max`.
## `builder.id` [(SLSA)](https://slsa.dev/provenance/v0.2#builder.id) ## `builder.id`
Corresponds to [SLSA `builder.id`](https://slsa.dev/provenance/v0.2#builder.id).
Included with `mode=min` and `mode=max`. Included with `mode=min` and `mode=max`.
@ -23,7 +25,9 @@ The `builder.id` field is set to the URL of the build, if available.
This value can be set using the `builder-id` attestation parameter. This value can be set using the `builder-id` attestation parameter.
## `buildType` [(SLSA)](https://slsa.dev/provenance/v0.2#buildType) ## `buildType`
Corresponds to [SLSA `buildType`](https://slsa.dev/provenance/v0.2#buildType).
Included with `mode=min` and `mode=max`. Included with `mode=min` and `mode=max`.
@ -34,7 +38,9 @@ used to determine the structure of the provenance content.
"buildType": "https://mobyproject.org/buildkit@v1", "buildType": "https://mobyproject.org/buildkit@v1",
``` ```
## `invocation.configSource` [(SLSA)](https://slsa.dev/provenance/v0.2#invocation.configSource) ## `invocation.configSource`
Corresponds to [SLSA `invocation.configSource`](https://slsa.dev/provenance/v0.2#invocation.configSource).
Included with `mode=min` and `mode=max`. Included with `mode=min` and `mode=max`.
@ -58,7 +64,9 @@ object defines the context URL and its immutable digest in the `uri` and `digest
For builds using a local frontend, such as a Dockerfile, the `entryPoint` field defines the path For builds using a local frontend, such as a Dockerfile, the `entryPoint` field defines the path
for the frontend file that initialized the build (`filename` frontend option). for the frontend file that initialized the build (`filename` frontend option).
## `invocation.parameters` [(SLSA)](https://slsa.dev/provenance/v0.2#invocation.parameters) ## `invocation.parameters`
Corresponds to [SLSA `invocation.parameters`](https://slsa.dev/provenance/v0.2#invocation.parameters).
Partially included with `mode=min`. Partially included with `mode=min`.
@ -108,7 +116,9 @@ The following fields are only included with `mode=max`:
values are not included. values are not included.
- `ssh` defines the ssh forwards used during the build. - `ssh` defines the ssh forwards used during the build.
## `invocation.environment` [(SLSA)](https://slsa.dev/provenance/v0.2#invocation.environment) ## `invocation.environment`
Corresponds to [SLSA `invocation.environment`](https://slsa.dev/provenance/v0.2#invocation.environment).
Included with `mode=min` and `mode=max`. Included with `mode=min` and `mode=max`.
@ -125,7 +135,9 @@ The only value BuildKit currently sets is the `platform` of the current build
machine. Note that this is not necessarily the platform of the build result that machine. Note that this is not necessarily the platform of the build result that
can be determined from the `in-toto` subject field. can be determined from the `in-toto` subject field.
## `materials` [(SLSA)](https://slsa.dev/provenance/v0.2#materials) ## `materials`
Corresponds to [SLSA `materials`](https://slsa.dev/provenance/v0.2#materials).
Included with `mode=min` and `mode=max`. Included with `mode=min` and `mode=max`.
@ -162,7 +174,9 @@ determine if the artifact has been updated compared to when the build ran.
], ],
``` ```
## `buildConfig` [(SLSA)](https://slsa.dev/provenance/v0.2#buildConfig) ## `buildConfig`
Corresponds to [SLSA `buildConfig`](https://slsa.dev/provenance/v0.2#buildConfig).
Only included with `mode=max`. Only included with `mode=max`.
@ -212,7 +226,9 @@ field for every step.
}, },
``` ```
## `metadata.buildInvocationId` [(SLSA)](https://slsa.dev/provenance/v0.2#metadata.buildIncocationId) ## `metadata.buildInvocationId`
Corresponds to [SLSA `metadata.buildInvocationId`](https://slsa.dev/provenance/v0.2#metadata.buildIncocationId).
Included with `mode=min` and `mode=max`. Included with `mode=min` and `mode=max`.
@ -227,7 +243,9 @@ versions of the image.
}, },
``` ```
## `metadata.buildStartedOn` [(SLSA)](https://slsa.dev/provenance/v0.2#metadata.buildStartedOn) ## `metadata.buildStartedOn`
Corresponds to [SLSA `metadata.buildStartedOn`](https://slsa.dev/provenance/v0.2#metadata.buildStartedOn).
Included with `mode=min` and `mode=max`. Included with `mode=min` and `mode=max`.
@ -240,7 +258,9 @@ Timestamp when the build started.
}, },
``` ```
## `metadata.buildFinishedOn` [(SLSA)](https://slsa.dev/provenance/v0.2#metadata.buildFinishedOn) ## `metadata.buildFinishedOn`
Corresponds to [SLSA `metadata.buildFinishedOn`](https://slsa.dev/provenance/v0.2#metadata.buildFinishedOn).
Included with `mode=min` and `mode=max`. Included with `mode=min` and `mode=max`.
@ -253,7 +273,9 @@ Timestamp when the build finished.
}, },
``` ```
## `metadata.completeness` [(SLSA)](https://slsa.dev/provenance/v0.2#metadata.completeness) ## `metadata.completeness`
Corresponds to [SLSA `metadata.completeness`](https://slsa.dev/provenance/v0.2#metadata.completeness).
Included with `mode=min` and `mode=max`. Included with `mode=min` and `mode=max`.
@ -284,7 +306,9 @@ is true.
}, },
``` ```
## `metadata.reproducible` [(SLSA)](https://slsa.dev/provenance/v0.2#metadata.reproducible) ## `metadata.reproducible`
Corresponds to [SLSA `metadata.reproducible`](https://slsa.dev/provenance/v0.2#metadata.reproducible).
Defines if the build result is supposed to be byte-by-byte reproducible. This Defines if the build result is supposed to be byte-by-byte reproducible. This
value can be set by the user with the `reproducible=true` attestation parameter. value can be set by the user with the `reproducible=true` attestation parameter.

View File

@ -1,5 +1,5 @@
# github.com/moby/moby v24.0.5+incompatible # github.com/moby/moby v24.0.5+incompatible
# github.com/moby/buildkit v0.12.1-0.20230824004934-4376f3861b05 # github.com/moby/buildkit v0.12.1-0.20230830200556-05eb7287534b
# github.com/docker/buildx v0.11.2 # github.com/docker/buildx v0.11.2
# github.com/docker/scout-cli v0.20.0 # github.com/docker/scout-cli v0.20.0
# github.com/docker/cli v24.0.5+incompatible # github.com/docker/cli v24.0.5+incompatible

2
go.mod
View File

@ -10,7 +10,7 @@ require (
github.com/docker/compose-cli v1.0.35 // indirect github.com/docker/compose-cli v1.0.35 // indirect
github.com/docker/distribution v2.8.2+incompatible // indirect github.com/docker/distribution v2.8.2+incompatible // indirect
github.com/docker/scout-cli v0.20.0 // indirect github.com/docker/scout-cli v0.20.0 // indirect
github.com/moby/buildkit v0.12.1-0.20230824004934-4376f3861b05 // indirect github.com/moby/buildkit v0.12.1-0.20230830200556-05eb7287534b // indirect
github.com/moby/moby v24.0.5+incompatible // indirect github.com/moby/moby v24.0.5+incompatible // indirect
github.com/opencontainers/go-digest v1.0.0 // indirect github.com/opencontainers/go-digest v1.0.0 // indirect
github.com/opencontainers/image-spec v1.1.0-rc4 // indirect github.com/opencontainers/image-spec v1.1.0-rc4 // indirect

2
go.sum
View File

@ -99,6 +99,8 @@ github.com/moby/buildkit v0.12.1-0.20230717122532-faa0cc7da353 h1:/ZIwqvOF3QKObJ
github.com/moby/buildkit v0.12.1-0.20230717122532-faa0cc7da353/go.mod h1:+n9GmkxwBCjVz4u7wmiyh+oqvjIjQM+1zk3iJrWfdos= github.com/moby/buildkit v0.12.1-0.20230717122532-faa0cc7da353/go.mod h1:+n9GmkxwBCjVz4u7wmiyh+oqvjIjQM+1zk3iJrWfdos=
github.com/moby/buildkit v0.12.1-0.20230824004934-4376f3861b05 h1:oXcA1w1cswNzFW5TH5QoaAJ2zskZlFNsL8IHo28G3Os= github.com/moby/buildkit v0.12.1-0.20230824004934-4376f3861b05 h1:oXcA1w1cswNzFW5TH5QoaAJ2zskZlFNsL8IHo28G3Os=
github.com/moby/buildkit v0.12.1-0.20230824004934-4376f3861b05/go.mod h1:BIvNtlrvok2xTC734ZNhQVGayvMB1Dz8bFuArWTLnnM= github.com/moby/buildkit v0.12.1-0.20230824004934-4376f3861b05/go.mod h1:BIvNtlrvok2xTC734ZNhQVGayvMB1Dz8bFuArWTLnnM=
github.com/moby/buildkit v0.12.1-0.20230830200556-05eb7287534b h1:VzIGQGWGnrDbzcQSJ28qTUAbNEtmszzuhUrzoqE/52Q=
github.com/moby/buildkit v0.12.1-0.20230830200556-05eb7287534b/go.mod h1:7/l0VKIyp1hBcGZF2hRpfBgvc0beQ9/hBWw7S+1JM0s=
github.com/moby/buildkit v0.12.1 h1:vvMG7EZYCiQZpTtXQkvyeyj7HzT1JHhDWj+/aiGIzLM= github.com/moby/buildkit v0.12.1 h1:vvMG7EZYCiQZpTtXQkvyeyj7HzT1JHhDWj+/aiGIzLM=
github.com/moby/buildkit v0.12.1/go.mod h1:adB4y0SxxX8trnrY+oEulb48ODLqPO6pKMF0ppGcCoI= github.com/moby/buildkit v0.12.1/go.mod h1:adB4y0SxxX8trnrY+oEulb48ODLqPO6pKMF0ppGcCoI=
github.com/moby/buildkit v0.12.2 h1:B7guBgY6sfk4dBlv/ORUxyYlp0UojYaYyATgtNwSCXc= github.com/moby/buildkit v0.12.2 h1:B7guBgY6sfk4dBlv/ORUxyYlp0UojYaYyATgtNwSCXc=