-
Notifications
You must be signed in to change notification settings - Fork 667
Pull requests: sigstore/cosign
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Add staging flag to initialize with staging TUF metadata
#4561
opened Dec 4, 2025 by
aaronlew02
Loading…
chore(deps): bump the gomod group across 1 directory with 2 updates
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4558
opened Dec 2, 2025 by
dependabot
bot
Loading…
4554: Closes 4554 - Add warning when --output* is used
#4556
opened Dec 1, 2025 by
sherine-k
Loading…
chore(deps): bump actions/checkout from 5.0.0 to 6.0.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#4546
opened Nov 24, 2025 by
dependabot
bot
Loading…
chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#4545
opened Nov 24, 2025 by
dependabot
bot
Loading…
chore(deps): bump the actions group with 4 updates
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#4544
opened Nov 24, 2025 by
dependabot
bot
Loading…
chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login from 0.10.1 to 0.11.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4543
opened Nov 24, 2025 by
dependabot
bot
Loading…
chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4542
opened Nov 24, 2025 by
dependabot
bot
Loading…
Add org.opencontainers.image.title annotation to attestation layers
#4498
opened Oct 24, 2025 by
ralphbean
Loading…
feat(ISV-6377): let cosign use HashedRekord for TLOG verification of attestations
#4490
opened Oct 22, 2025 by
BorekZnovustvoritel
Loading…
Fix signing and verification with ed25519 keys with bundles and Rekor
#4414
opened Sep 16, 2025 by
haydentherapper
•
Draft
feat(cli): add
--payload-media-type to sign (fixes #4300)
#4304
opened Jul 23, 2025 by
arubegonsan
Loading…
feat(sign): support loading --cert/--cert-chain from URL and env variable
#4260
opened Jun 24, 2025 by
ummetcivi
Loading…
Return Public key in sign-blob when no certificate can be extracted.
#4224
opened Jun 6, 2025 by
tommyd450
Loading…
Enable signing and verifying image without registry access
#4014
opened Jan 16, 2025 by
bkabrda
Loading…
ProTip!
no:milestone will show everything without a milestone.