-
Notifications
You must be signed in to change notification settings - Fork 647
Pull requests: sigstore/cosign
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#4502
opened Oct 27, 2025 by
dependabot
bot
Loading…
chore(deps): bump google.golang.org/api from 0.252.0 to 0.253.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4501
opened Oct 27, 2025 by
dependabot
bot
Loading…
Add org.opencontainers.image.title annotation to attestation layers
#4498
opened Oct 24, 2025 by
ralphbean
Loading…
feat(ISV-6377): let cosign use HashedRekord for TLOG verification of attestations
#4490
opened Oct 22, 2025 by
BorekZnovustvoritel
Loading…
chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#4478
opened Oct 20, 2025 by
dependabot
bot
Loading…
Add support to download and attach for protobuf bundles
#4477
opened Oct 20, 2025 by
steiza
Loading…
Deprecate tlog-upload flag, but still respect with signing config
#4458
opened Oct 10, 2025 by
haydentherapper
Loading…
Fix signing and verification with ed25519 keys with bundles and Rekor
#4414
opened Sep 16, 2025 by
haydentherapper
•
Draft
feat(cli): add
--payload-media-type to sign (fixes #4300)
#4304
opened Jul 23, 2025 by
arubegonsan
Loading…
feat(sign): support loading --cert/--cert-chain from URL and env variable
#4260
opened Jun 24, 2025 by
ummetcivi
Loading…
Return Public key in sign-blob when no certificate can be extracted.
#4224
opened Jun 6, 2025 by
tommyd450
Loading…
Enable signing and verifying image without registry access
#4014
opened Jan 16, 2025 by
bkabrda
Loading…
ProTip!
no:milestone will show everything without a milestone.