Affected by GO-2024-2718
and 3 other vulnerabilities
GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign
GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign
GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign
GO-2026-4529: Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped in github.com/sigstore/cosign
The highest tagged major version is
v3.
This package is not in the latest version of its module.
Documentation
¶
This section is empty.
This section is empty.
SignedEntity calls `fn` on the signed entity and each of its constituent entities (`SignedImageIndex` or `SignedImage`) transitively. Any errors returned by an `fn` are returned by `Walk`.
Source Files