-
Notifications
You must be signed in to change notification settings - Fork 798
Pull requests: sigstore/cosign
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Require new bundle format for image signing and verification
#5093
opened Sep 2, 2026 by
aaronlew02
Contributor
•
Draft
chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#5090
opened Sep 2, 2026 by
dependabot
Bot
Loading…
Verify blob attestations exclusively via sigstore-go
#5089
opened Sep 2, 2026 by
aaronlew02
Contributor
•
Draft
Require new bundle format for attest-blob
#5088
opened Sep 2, 2026 by
aaronlew02
Contributor
•
Draft
feat: add native Syft JSON support in cosign attest
#5085
opened Sep 1, 2026 by
ompushkara
Contributor
Loading…
chore(deps): bump the gomod group across 1 directory with 14 updates
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#5082
opened Aug 31, 2026 by
dependabot
Bot
Loading…
Align privacy statement prompt behavior
#5076
opened Aug 27, 2026 by
aaronlew02
Contributor
Loading…
Backport: Automatically require signed timestamp with Rekor v2 entries
#5075
opened Aug 26, 2026 by
codysoyland
Member
Loading…
fix: make Ed25519 keys usable again for sign-blob, attest-blob and verify --key
#5074
opened Aug 26, 2026 by
hamodywe
Loading…
fix: clarify COSIGN_REPOSITORY error when repository path is missing
#5073
opened Aug 26, 2026 by
bejaratommy
Contributor
Loading…
chore(deps): bump the actions group across 1 directory with 8 updates
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#5069
opened Aug 24, 2026 by
dependabot
Bot
Loading…
chore(deps): bump the all group across 1 directory with 2 updates
dependencies
Pull requests that update a dependency file
docker
Pull requests that update docker code
#5067
opened Aug 24, 2026 by
dependabot
Bot
Loading…
fix: strip trailing whitespace from attached signature files/stdin
#5058
opened Aug 14, 2026 by
pujitha24
Contributor
Loading…
Cap the bundle layer read in ociremote.Bundle
#5052
opened Aug 10, 2026 by
arpitjain099
Contributor
Loading…
verify: fetch bundles once and reuse them for verification
#5051
opened Aug 10, 2026 by
codysoyland
Member
Loading…
fix: include annotations in implied payload for offline verify
#5048
opened Aug 7, 2026 by
pujitha24
Contributor
Loading…
fix(oci): Honor target COSIGN_REPOSITORY for legacy-bundle OCI 1.1 signatures
#5034
opened Aug 2, 2026 by
reneleonhardt
Loading…
fix(load): upload bundle layer blobs before manifest PUT
#5031
opened Jul 30, 2026 by
phene
Loading…
fix(sign): pass digest hash algorithm to underlying signer in SignData
#5029
opened Jul 28, 2026 by
pujitha24
Contributor
Loading…
fix(verify): detect local sigstore bundles for saved image indexes
#5023
opened Jul 21, 2026 by
pujitha24
Contributor
Loading…
Previous Next
ProTip!
Mix and match filters to narrow down what you’re looking for.