aboutsummaryrefslogtreecommitdiffhomepage
Commit message (Collapse)AuthorAgeFilesLines
...
| * chore(deps): bump torch from 2.1.1 to 2.2.0 in /requirementsdependabot[bot]2024-07-252-2/+2
|/ | | | | | | | | | | | | | Bumps [torch](https://github.com/pytorch/pytorch) from 2.1.1 to 2.2.0. - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](https://github.com/pytorch/pytorch/compare/v2.1.1...v2.2.0) --- updated-dependencies: - dependency-name: torch dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge pull request #424 from crocs-muni/fix/new-dgstsJán Jančár2024-07-2122-202/+1053
|\ | | | | New digests
| * Fix USA scheme parsing on Python < 3.11.J08nY2024-07-211-1/+2
| | | | | | | | Datetime.fromisoformat changed behavior then.
| * Fix USA scheme download.J08nY2024-07-194-134/+89
| |
| * Fix scheme dataset test.J08nY2024-07-192-1/+857
| |
| * Fix Spain CC scheme download.J08nY2024-07-191-1/+1
| |
| * Move to new dgst algorithm for CC.J08nY2024-07-1918-68/+106
| |
| * Temporarily disable broken CC USA scheme test.J08nY2024-07-191-0/+1
|/
* Merge pull request #423 from crocs-muni/dependabot/pip/requirements/zipp-3.19.1adamjanovsky2024-07-103-3/+3
|\ | | | | chore(deps): bump zipp from 3.17.0 to 3.19.1 in /requirements
| * chore(deps): bump zipp from 3.17.0 to 3.19.1 in /requirementsdependabot[bot]2024-07-093-3/+3
|/ | | | | | | | | | | | | | Bumps [zipp](https://github.com/jaraco/zipp) from 3.17.0 to 3.19.1. - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](https://github.com/jaraco/zipp/compare/v3.17.0...v3.19.1) --- updated-dependencies: - dependency-name: zipp dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge pull request #422 from ↵Ján Jančár2024-07-095-5/+5
|\ | | | | | | | | crocs-muni/dependabot/pip/requirements/certifi-2024.7.4 chore(deps): bump certifi from 2023.11.17 to 2024.7.4 in /requirements
| * chore(deps): bump certifi from 2023.11.17 to 2024.7.4 in /requirementsdependabot[bot]2024-07-055-5/+5
|/ | | | | | | | | | | | Bumps [certifi](https://github.com/certifi/python-certifi) from 2023.11.17 to 2024.7.4. - [Commits](https://github.com/certifi/python-certifi/compare/2023.11.17...2024.07.04) --- updated-dependencies: - dependency-name: certifi dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge pull request #421 from crocs-muni/fix/fips-search-properJán Jančár2024-07-042-1/+6
|\ | | | | Fix FIPS aplgo download column parse.
| * Fix FIPS aplgo download column parse.J08nY2024-07-042-1/+6
|/ | | | | | Fixes #419. Also has an impact on #409.
* Merge pull request #418 from crocs-muni/fix/fips-alg-searchJán Jančár2024-06-211-1/+1
|\ | | | | Try to fix FIPS alg search.
| * Try to fix FIPS alg search.J08nY2024-06-211-1/+1
|/ | | | | | | | | | | The link: https://csrc.nist.gov/projects/Cryptographic-Algorithm-Validation-Program/validation-search?searchMode=implementation&page=1&ipp=250 does not work, gives 408. Their search on the site which queries this also does not work. However, when one searches by "validation" it does work. There is no difference to us, as we do not have any queries and simply want all the data.
* Merge pull request #417 from crocs-muni/fix/fips-alg-numsJán Jančár2024-06-207-15/+13
|\ | | | | Fix FIPS pipeline for new certs.
| * Use pre-commit action in CI.J08nY2024-06-201-11/+3
| | | | | | | | Uses caching, should be better.
| * Bump setup-python action in CI, use caching.J08nY2024-06-204-4/+10
| |
| * Fix typing issue.J08nY2024-06-202-2/+2
| |
| * Fix FIPS pipeline for new certs.J08nY2024-06-201-1/+1
|/ | | | Fixes #SECCERTS-1GT.
* Merge pull request #416 from ↵Ján Jančár2024-06-195-5/+5
|\ | | | | | | | | crocs-muni/dependabot/pip/requirements/scikit-learn-1.5.0 chore(deps): bump scikit-learn from 1.3.2 to 1.5.0 in /requirements
| * chore(deps): bump scikit-learn from 1.3.2 to 1.5.0 in /requirementsdependabot[bot]2024-06-185-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [scikit-learn](https://github.com/scikit-learn/scikit-learn) from 1.3.2 to 1.5.0. - [Release notes](https://github.com/scikit-learn/scikit-learn/releases) - [Commits](https://github.com/scikit-learn/scikit-learn/compare/1.3.2...1.5.0) --- updated-dependencies: - dependency-name: scikit-learn dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* | Merge pull request #415 from ↵Ján Jančár2024-06-195-5/+5
|\ \ | |/ |/| | | | | crocs-muni/dependabot/pip/requirements/urllib3-2.2.2 chore(deps): bump urllib3 from 2.1.0 to 2.2.2 in /requirements
| * chore(deps): bump urllib3 from 2.1.0 to 2.2.2 in /requirementsdependabot[bot]2024-06-175-5/+5
|/ | | | | | | | | | | | | | Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.1.0 to 2.2.2. - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](https://github.com/urllib3/urllib3/compare/2.1.0...2.2.2) --- updated-dependencies: - dependency-name: urllib3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge pull request #414 from crocs-muni/fix/ci-nvdJán Jančár2024-06-113-6/+9
|\ | | | | Fix NVD tests.
| * Fix NVD CPE Match API usage.J08nY2024-06-102-4/+3
| | | | | | | | | | | | | | NIST recently lowered the limit on resultsPerPage for the CPE Match API, hence we have to adapt: https://nvd.nist.gov/general/news/cpematch-resultsperpage-update
| * Use NVD api key in testsJ08nY2024-06-101-1/+1
| |
| * Fix NVD tests.J08nY2024-06-101-1/+5
|/
* Merge pull request #413 from J08nY/feat/proxy-artifactsJán Jančár2024-06-104-8/+38
|\ | | | | Allow for download through our caching proxy at sec-certs.org
| * Allow for download through our caching proxy at sec-certs.orgJ08nY2024-06-104-8/+38
|/ | | | | | | | | | | | Recently, CCportal changed infra and enabled a rate limit. Our usual download procedure hits this rate limit and is able to download only a small subset of the artifacts. Thus a proxy is running at sec-certs.org that caches the artifacts. This commit makes it possible to use the proxy in the tool. By querying the proxy on the background, the server makes sure that the rate limit is not hit and the artifacts are available.
* Merge pull request #412 from J08nY/fix/cc-link-compatJán Jančár2024-06-092-6/+16
|\ | | | | Fix/cc link compat
| * Fix security level sanitization.J08nY2024-06-091-1/+1
| |
| * Fix change in CCportal links.J08nY2024-06-092-5/+15
|/
* Merge pull request #408 from ↵Ján Jančár2024-06-075-5/+5
|\ | | | | | | | | crocs-muni/dependabot/pip/requirements/requests-2.32.0 chore(deps): bump requests from 2.31.0 to 2.32.0 in /requirements
| * ---dependabot[bot]2024-05-215-5/+5
| | | | | | | | | | | | | | | | updated-dependencies: - dependency-name: requests dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* | Merge pull request #411 from ↵Ján Jančár2024-06-075-5/+5
|\ \ | | | | | | | | | | | | crocs-muni/dependabot/pip/requirements/tornado-6.4.1 chore(deps): bump tornado from 6.3.3 to 6.4.1 in /requirements
| * | chore(deps): bump tornado from 6.3.3 to 6.4.1 in /requirementsdependabot[bot]2024-06-065-5/+5
|/ / | | | | | | | | | | | | | | | | | | | | | | | | Bumps [tornado](https://github.com/tornadoweb/tornado) from 6.3.3 to 6.4.1. - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](https://github.com/tornadoweb/tornado/compare/v6.3.3...v6.4.1) --- updated-dependencies: - dependency-name: tornado dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* | Merge pull request #410 from crocs-muni/add-final-sec-certs-citationadamjanovsky2024-05-302-8/+13
|\ \ | |/ |/| add final cose citation
| * add final cose citationAdam Janovsky2024-05-302-8/+13
|/
* fix chain of trust paper linkAdam Janovsky2024-05-161-1/+1
|
* Merge pull request #407 from crocs-muni/paper-preprint-linksadamjanovsky2024-05-162-0/+14
|\ | | | | Add paper preprint links to readme and citation file
| * change important admonition to noteAdam Janovsky2024-05-161-1/+1
| |
| * add pre-print infoAdam Janovsky2024-05-162-0/+14
|/
* Merge pull request #406 from crocs-muni/dependabot/pip/requirements/jinja2-3.1.4Ján Jančár2024-05-075-5/+5
|\ | | | | chore(deps): bump jinja2 from 3.1.3 to 3.1.4 in /requirements
| * chore(deps): bump jinja2 from 3.1.3 to 3.1.4 in /requirementsdependabot[bot]2024-05-065-5/+5
|/ | | | | | | | | | | | | | Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.3 to 3.1.4. - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets/jinja/compare/3.1.3...3.1.4) --- updated-dependencies: - dependency-name: jinja2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge pull request #405 from crocs-muni/dependabot/pip/requirements/tqdm-4.66.3Ján Jančár2024-05-045-5/+5
|\ | | | | chore(deps): bump tqdm from 4.66.1 to 4.66.3 in /requirements
| * chore(deps): bump tqdm from 4.66.1 to 4.66.3 in /requirementsdependabot[bot]2024-05-035-5/+5
|/ | | | | | | | | | | | | Bumps [tqdm](https://github.com/tqdm/tqdm) from 4.66.1 to 4.66.3. - [Release notes](https://github.com/tqdm/tqdm/releases) - [Commits](https://github.com/tqdm/tqdm/compare/v4.66.1...v4.66.3) --- updated-dependencies: - dependency-name: tqdm dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge pull request #404 from crocs-muni/chain-of-trust-artifactsadamjanovsky2024-05-0157-428/+60030
|\ | | | | Artifacts for chain-of-trust paper
| * artifacts for chain-of-trust paperAdam Janovsky2024-05-0157-428/+60030
|/