Documentation
Source Files
Click to show internal directories.
Click to hide internal directories.
Affected by GO-2026-4309
and 1 other vulnerabilities
GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign
GO-2026-4529: Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped in github.com/sigstore/cosign
The highest tagged major version is
v3.
v2.2.4
Go to latest
Published: Apr 10, 2024
License: Apache-2.0
Opens a new window with list of versions in this module.
Latest
Latest
This package is not in the latest version of its module.
Opens a new window with license information.
Imports: 7
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.