GO-2026-4529 : Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped in github.com/sigstore/cosign
Discover Packages
github.com/sigstore/cosign/v3
internal
pkg
now
package
Version:
v3.0.4
Opens a new window with list of versions in this module.
Published: Jan 9, 2026
License: Apache-2.0
Opens a new window with license information.
Imports: 4
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
Documentation
¶
Now returns SOURCE_DATE_EPOCH or time.Now().
Source Files
¶
Click to show internal directories.
Click to hide internal directories.