-
Notifications
You must be signed in to change notification settings - Fork 681
Pull requests: sigstore/cosign
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
chore(deps): bump the gomod group across 1 directory with 2 updates
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4638
opened Jan 13, 2026 by
dependabot
bot
Loading…
disallow key and cert identity being used together during verification
#4636
opened Jan 13, 2026 by
piceri
Loading…
Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json
#4635
opened Jan 13, 2026 by
dortam888
Loading…
chore(deps): bump chainguard-dev/actions from 1.5.10 to 1.5.11 in the actions group
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#4632
opened Jan 12, 2026 by
dependabot
bot
Loading…
chore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.9.1 to 0.10.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4631
opened Jan 12, 2026 by
dependabot
bot
Loading…
chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4630
opened Jan 12, 2026 by
dependabot
bot
Loading…
chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.11.0 to 1.12.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4629
opened Jan 12, 2026 by
dependabot
bot
Loading…
chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4628
opened Jan 12, 2026 by
dependabot
bot
Loading…
Allow --local-image with --new-bundle-format for v2 signatures
#4626
opened Jan 12, 2026 by
tuminoid
Loading…
Support mTLS for TSA clients when using a signing config
#4620
opened Jan 8, 2026 by
aaronlew02
Loading…
Supporting OCI Signing with X.509 Certificate Chain
#4614
opened Jan 5, 2026 by
yangkenneth
Loading…
Add org.opencontainers.image.title annotation to attestation layers
#4498
opened Oct 24, 2025 by
ralphbean
Loading…
feat(ISV-6377): let cosign use HashedRekord for TLOG verification of attestations
#4490
opened Oct 22, 2025 by
BorekZnovustvoritel
Loading…
feat(cli): add
--payload-media-type to sign (fixes #4300)
#4304
opened Jul 23, 2025 by
arubegonsan
Loading…
feat(sign): support loading --cert/--cert-chain from URL and env variable
#4260
opened Jun 24, 2025 by
ummetcivi
Loading…
Return Public key in sign-blob when no certificate can be extracted.
#4224
opened Jun 6, 2025 by
tommyd450
Loading…
Enable signing and verifying image without registry access
#4014
opened Jan 16, 2025 by
bkabrda
Loading…
ProTip!
no:milestone will show everything without a milestone.