Repository navigation

fix(webhook): verify OCI 1.1 attestation signatures before trusting them - #1971

Open

evilgensec wants to merge 2 commits into

sigstore:mainfrom

evilgensec:fix/oci11-attestation-bypass

Open

fix(webhook): verify OCI 1.1 attestation signatures before trusting them#1971
evilgensec wants to merge 2 commits into
sigstore:mainfrom
evilgensec:fix/oci11-attestation-bypass

Commits on Jun 2, 2026
- fix(webhook): verify OCI 1.1 attestation signatures before trusting them
  evilgensec
  committed
  92f3fe4
- test(webhook): stub legacy attestation path in OCI 1.1 regression test
  evilgensec
  committed
  afade29