GO-2026-4529 : Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped in github.com/sigstore/cosign
The highest tagged major version is
v3 .
Discover Packages
github.com/sigstore/cosign/v2
pkg
providers
google
package
Version:
v2.6.2
Opens a new window with list of versions in this module.
Published: Jan 9, 2026
License: Apache-2.0
Opens a new window with license information.
Imports: 7
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
Documentation
¶
Package google defines a google implementation of the providers.Interface.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.