-
Notifications
You must be signed in to change notification settings - Fork 658
Pull requests: sigstore/cosign
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Add org.opencontainers.image.title annotation to attestation layers
#4498
opened Oct 24, 2025 by
ralphbean
Loading…
feat(ISV-6377): let cosign use HashedRekord for TLOG verification of attestations
#4490
opened Oct 22, 2025 by
BorekZnovustvoritel
Loading…
Fix signing and verification with ed25519 keys with bundles and Rekor
#4414
opened Sep 16, 2025 by
haydentherapper
•
Draft
feat(cli): add
--payload-media-type to sign (fixes #4300)
#4304
opened Jul 23, 2025 by
arubegonsan
Loading…
feat(sign): support loading --cert/--cert-chain from URL and env variable
#4260
opened Jun 24, 2025 by
ummetcivi
Loading…
Return Public key in sign-blob when no certificate can be extracted.
#4224
opened Jun 6, 2025 by
tommyd450
Loading…
Enable signing and verifying image without registry access
#4014
opened Jan 16, 2025 by
bkabrda
Loading…
ProTip!
Exclude everything labeled
bug with -label:bug.