github

package

Go to main page

Versions in this module

v3

v3.0.6

Apr 6, 2026

v3.0.5

Feb 19, 2026

v3.0.4

Jan 9, 2026 GO-2026-4529

GO-2026-4529: Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped in github.com/sigstore/cosign

v3.0.3

Dec 10, 2025 GO-2026-4309 +1 more

GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign

GO-2026-4529: Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped in github.com/sigstore/cosign

v3.0.2

Oct 10, 2025 GO-2026-4309 +1 more

GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign

GO-2026-4529: Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped in github.com/sigstore/cosign

v3.0.1

Oct 7, 2025 GO-2026-4309 +1 more

GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign

GO-2026-4529: Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped in github.com/sigstore/cosign

v3.0.0

Oct 7, 2025 GO-2026-4309 +1 more

GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign

GO-2026-4529: Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped in github.com/sigstore/cosign

Changes in this version

+ const RequestTokenEnvKey

+ const RequestURLEnvKey

Other modules containing this package

github.com/sigstore/cosign

github.com/sigstore/cosign/v2

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL