Breaking Change:
- #596 cel.AppendEventPCR and cel.AppendEvent stop taking in []crypto.Hash, instead they will get all available PCR banks from the TPM capability.
- #585 this may be a breaking change to users that don't populate AKPub within the attestation proto. This was never optional, and it was always populated by the go-tpm-tools client code.
What's Changed
- Remove VerifyAttestation dependency on SNP/TDX by @alexmwu in #523
- Update the LICENSE to accurately describe the simulator by @chrisfenner in #537
- Update the comment in simulator.go by @jkl73 in #538
- [launcher] Clean up cloudbuild config by @jkl73 in #539
- Add pk and kek to the SecureBootState proto message and populate them. by @eytankidron in #534
- Fix a grub eventlog parsing issue with null terminator by @jkl73 in #540
- merge tdx_rtmr to main by @jkl73 in #543
- Update releaser actions. by @deeglaze in #546
- Update releaser.yaml to allow manual triggers by @alexmwu in #547
- Update releaser.yaml to allow for specifying ref by @alexmwu in #548
- Support manual triggers of goreleaser by @alexmwu in #550
- Allow releaser workflow to modify Releases by @alexmwu in #551
- Update go-sev-guest to v0.13.0 by @deeglaze in #552
- Add ITA Verifier Client by @jessieqliu in #530
- Add ITA Attest to teeserver by @jessieqliu in #532
- Add privileged cs experiment flag by @JoshuaKrstic in #558
- [launcher] Add privileged launch policy options by @alexmwu in #526
- Add event parsing logic for GPU device specific event (#561) by @meetrajvala in #562
- Clean up tmpfs and privileged experiments by @alexmwu in #563
- Add cloudbuild tests for NPD health monitoring by @jessieqliu in #508
- Add back support for SNP and TDX attestation only for the gotpm CLI by @alexmwu in #555
- [launcher] Disable konlet in CS debug image by @jkl73 in #570
- [launcher] Update cs host directory permission by @jkl73 in #571
- Add option to skip Calling EFI Application check by @alexmwu in #573
- Add alias to proto buffer and remove extra imports by @yawangwang in #576
- Update releaser config so it won't run on a PR by @jkl73 in #579
- [launcher] del launcher unit test TestWithAgent by @jkl73 in #583
- Fix comment in TEE server by @JoshuaKrstic in #584
- TEE Server Error code Translation by @Sibcgh in #587
- Add testutils package to make select test helpers publicly available by @jessieqliu in #589
- Add VerifyCS experiment flag by @jessieqliu in #588
- Attest now will pass in a default audience instead of passing an error by @Sibcgh in #580
- Remove duplicated code in rest verifier by @jkl73 in #590
- Add VerifyConfidentialSpace to verifier.Client by @jessieqliu in #593
- cel.AppendEventPCR extends to all PCR banks by @jkl73 in #596
- Remove Attested COS specific CEL parsing logic by @meetrajvala in #597
- Add HashNonce flag to Attest and VerifyAttestation by @alexmwu in #585
New Contributors
- @eytankidron made their first contribution in #534
- @Sibcgh made their first contribution in #587
Full Changelog: v0.4.5...v0.4.6