Affected by GO-2024-2718 and 2 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

GO-2026-4309: Cosign verification accepts any valid Rekor entry under certain conditions in github.com/sigstore/cosign

The highest tagged major version is v3.

dockerfile

package

v1.2.0 Latest Latest Go to latest Published: Sep 14, 2021 License: Apache-2.0 Imports: 10 Imported by: 1

Details

This section is empty.

This section is empty.

func Dockerfile() *ffcli.Command

func VerifyDockerfile() *ffcli.Command

Verify builds and returns an ffcli command

type VerifyDockerfileCommand struct {
	cli.VerifyCommand
	BaseOnly bool
}

VerifyCommand verifies a signature on a supplied container image

func (c *VerifyDockerfileCommand) Exec(ctx context.Context, args []string) error

Exec runs the verification command