Affected by GO-2024-2718 and 2 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign

The highest tagged major version is v3.

attach

package

v1.2.0 Latest Latest Go to latest Published: Sep 14, 2021 License: Apache-2.0 Imports: 16 Imported by: 1

Details

This section is empty.

This section is empty.

func Attach() *ffcli.Command

func SBOM() *ffcli.Command

func SBOMCmd(ctx context.Context, sbomRef, sbomType, imageRef string) error

func Signature() *ffcli.Command

func SignatureCmd(ctx context.Context, sigRef, payloadRef, imageRef string) error

type SignatureArgType uint8

const (
	StdinSignature SignatureArgType = iota
	RawSignature   SignatureArgType = iota
	FileSignature  SignatureArgType = iota
)