Skip to content

fix(webhook): verify OCI 1.1 attestation signatures before trusting them - #1971

Open
evilgensec wants to merge 2 commits into
sigstore:mainfrom
evilgensec:fix/oci11-attestation-bypass
Open

fix(webhook): verify OCI 1.1 attestation signatures before trusting them#1971
evilgensec wants to merge 2 commits into
sigstore:mainfrom
evilgensec:fix/oci11-attestation-bypass

test(webhook): stub legacy attestation path in OCI 1.1 regression test

afade29
Select commit
Loading
Failed to load commit list.
DCO / DCO succeeded Jun 2, 2026 in 1s

DCO

All commits are signed off!

View more details on DCO