GO-2026-4529: Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped in github.com/sigstore/cosign

The highest tagged major version is v3.

cmd/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/sigstore/cosign

Links

Open Source Insights

Directories ¶

Path	Synopsis
conformance
cosign
cli
cli/attach
cli/attest
cli/bundle
cli/copy
cli/debug
cli/dockerfile
cli/download
cli/fulcio
cli/fulcio/fulcioverifier
cli/generate
cli/importkeypair
cli/initialize
cli/manifest
cli/options
cli/publickey
cli/rekor
cli/sign
cli/sign/privacy
cli/signingconfig
cli/templates
cli/templates/term
cli/triangulate
cli/trustedroot
cli/upload
cli/verify
errors
help
sample

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL