BREAKING CHANGE: self-signed certificates must be declared in your GitLab DEFAULT_CA_CERTS or with VAULT_CA_CERTS variable

# [7.0.0](6.4.0...7.0.0) (2025-08-13)

* feat(vault)!: enable certificate verification ([4d1b5699](4d1b5699))

### BREAKING CHANGES

* self-signed certificates must be declared in your GitLab DEFAULT_CA_CERTS or with VAULT_CA_CERTS variable

fix: use preinstalled cosign

Closes #135

See merge request !161

## [7.0.1](7.0.0...7.0.1) (2025-08-13)

### Bug Fixes

* support preinstalled cosign ([9db00147](9db00147))

Simon Weimann authored Aug 13, 2025 and Pierre Smeyers committed Aug 13, 2025

Allow configuration of the build cache location for buildah the same as for kaniko.

/!\ Replaces $KANIKO_SNAPSHOT_IMAGE_CACHE with $DOCKER_BUILD_CACHE_LOCATION
A partial backward compatibility is ensured for projects using the $KANIKO_SNAPSHOT_IMAGE_CACHE variable but not with the 'kaniko-snapshot-image-cache' input that would fail the pipeline.

Signed-off-by: Weimann, Simon <simon.weimann@ruv.de>

feat: configure build cache location for buildah

Closes #133

See merge request !160

# [7.1.0](7.0.1...7.1.0) (2025-08-13)

### Features

* add build cache location support for buildah ([07752a18](07752a18))

chore(deps): update to-be-continuous dependencies

See merge request !158

When snapshot and release registries are different and a single one is logged as configured,
one can think it has misconfigured something.

improve debug

See merge request !162

## [7.1.1](7.1.0...7.1.1) (2025-08-14)

### Bug Fixes

* log all configured registries ([8946da09](8946da09))
* **skopeo:** active debug when TRACE is set ([4cdb0e96](4cdb0e96))

The digest is extracted from the image (instead of retrieved from propagated .env)

closes #129

## [7.1.2](7.1.1...7.1.2) (2025-08-18)

### Bug Fixes

* **sign:** support signing multiple images (parallel:matrix) ([34e96973](34e96973)), closes [#129](#129)

feat: trivy codequality report

Closes #137

See merge request !163

# [7.2.0](7.1.2...7.2.0) (2025-08-18)

### Features

* trivy codequality report ([c450fb9e](c450fb9e))

fix(sign): support sbom attestation with parallel matrix

Closes #138

See merge request !164

## [7.2.1](7.2.0...7.2.1) (2025-08-19)

### Bug Fixes

* **sign:** support sbom attestation with parallel matrix ([821bc66d](821bc66d))

feat: manifest build with buildah allowing multi-platform images

Closes #140

See merge request !168

# [7.3.0](7.2.1...7.3.0) (2025-08-25)

### Features

* multi-platform build with buildah manifest ([25cda525](25cda525))

## [7.3.1](7.3.0...7.3.1) (2025-08-26)

### Bug Fixes

* **vault:** avoid nested variable for id_token ([4ae27ccf](4ae27ccf))

chore(deps): update dependency to-be-continuous/semantic-release to v4

See merge request !166

chore(deps): update to-be-continuous dependencies

See merge request !165

feat: cosign multi arch

Closes #142

See merge request !169

# [7.4.0](7.3.1...7.4.0) (2025-08-31)

### Bug Fixes

* **cosign:** publish all multi-arch attachments ([747635de](747635de))
* **cosign:** sign all images in multi-arch ([22a3d5af](22a3d5af))

### Features

* **cosign:** split sign and attest opts ([69950a9c](69950a9c))

for multi-platform manifest, it puts the attestation on
the actual (amd64) image instead of its manifest

fix(sbom): attest digest instead of tag

Closes #144

See merge request !170

## [7.4.1](7.4.0...7.4.1) (2025-09-02)

### Bug Fixes

* **sbom:** attest digest instead of tag ([390f1f23](390f1f23))
* **sbom:** report native json and convert for digest ([a46225ba](a46225ba))

Update configure_cosign_private_key in gitlab-ci-docker.yml file

Closes #146

See merge request !172

## [7.4.2](7.4.1...7.4.2) (2025-09-08)

### Bug Fixes

* **cosign:** quote COSIGN_PRIVATE_KEY variable to prevent word splitting ([c2db5254](c2db5254))

feat(cosign): add variable for annotations

Closes #143

See merge request !171

# [7.5.0](7.4.2...7.5.0) (2025-09-22)

### Features

* **cosign:** add variable for annotations ([fdfc96cc](fdfc96cc))