v1.7.2

What's Changed

• Bump codecov/codecov-action from 2.1.0 to 3 by @dependabot in #1714
• Bump github/codeql-action from 2.1.6 to 2.1.7 by @dependabot in #1713
• Bump google-github-actions/auth from 0.6.0 to 0.7.0 by @dependabot in #1712
• Bump github.com/xanzy/go-gitlab from 0.61.0 to 0.62.0 by @dependabot in #1711
• Makefile: fix directory not found error by @hectorj2f in #1718
• Update release job by @cpanato in #1720
• [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
• fix: add permissions to patch events by @hectorj2f in #1722
• Bump sigstore/cosign-installer from 2.1.0 to 2.2.0 by @dependabot in #1723
• Bump cloud.google.com/go/storage from 1.21.0 to 1.22.0 by @dependabot in #1721
• Bump github/codeql-action from 2.1.7 to 2.1.8 by @dependabot in #1725
• Make public all types required to use ValidatePolicy by @jdolitsky in #1727
• Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
• Bump github.com/hashicorp/go-uuid from 1.0.2 to 1.0.3 by @dependabot in #1724
• Remove newline from download sbom output by @ribbybibby in #1732
• Fix packages name and binary in the packages by @cpanato in #1734
• Fix fulcioroots test and linter error by @haydentherapper in #1741
• Support non-ECDSA public keys in certificates by @haydentherapper in #1740
• bug: remove old fulcio root and fix fallback target code by @asraa in #1738
• Bump actions/cache from 3.0.1 to 3.0.2 by @dependabot in #1737
• add changelog for v1.7.2 by @cpanato in #1735

Full Changelog: v1.7.1...v1.7.2

Thanks to all contributors!