-
Notifications
You must be signed in to change notification settings - Fork 797
Pull requests: sigstore/cosign
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix: restrict bundle signing and attestation to one artifact
#5081
opened Aug 28, 2026 by
aaronlew02
Contributor
Loading…
fix(verify): support image indexes in local bundle discovery
#5080
opened Aug 27, 2026 by
aaronlew02
Contributor
Loading…
fix: pass missing OIDC flags to KeyOpts
#5079
opened Aug 27, 2026 by
aaronlew02
Contributor
Loading…
Align privacy statement prompt behavior
#5076
opened Aug 27, 2026 by
aaronlew02
Contributor
Loading…
Backport: Automatically require signed timestamp with Rekor v2 entries
#5075
opened Aug 26, 2026 by
codysoyland
Member
Loading…
fix: make Ed25519 keys usable again for sign-blob, attest-blob and verify --key
#5074
opened Aug 26, 2026 by
hamodywe
Loading…
fix: clarify COSIGN_REPOSITORY error when repository path is missing
#5073
opened Aug 26, 2026 by
bejaratommy
Contributor
Loading…
refactor: extract signing flag validation
#5070
opened Aug 24, 2026 by
aaronlew02
Contributor
Loading…
chore(deps): bump the actions group across 1 directory with 8 updates
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#5069
opened Aug 24, 2026 by
dependabot
Bot
Loading…
chore(deps): bump the gomod group across 1 directory with 15 updates
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#5068
opened Aug 24, 2026 by
dependabot
Bot
Loading…
chore(deps): bump the all group across 1 directory with 2 updates
dependencies
Pull requests that update a dependency file
docker
Pull requests that update docker code
#5067
opened Aug 24, 2026 by
dependabot
Bot
Loading…
fix: strip trailing whitespace from attached signature files/stdin
#5058
opened Aug 14, 2026 by
pujitha24
Contributor
Loading…
Cap the bundle layer read in ociremote.Bundle
#5052
opened Aug 10, 2026 by
arpitjain099
Contributor
Loading…
verify: fetch bundles once and reuse them for verification
#5051
opened Aug 10, 2026 by
codysoyland
Member
Loading…
fix: include annotations in implied payload for offline verify
#5048
opened Aug 7, 2026 by
pujitha24
Contributor
Loading…
fix(oci): Honor target COSIGN_REPOSITORY for legacy-bundle OCI 1.1 signatures
#5034
opened Aug 2, 2026 by
reneleonhardt
Loading…
fix(load): upload bundle layer blobs before manifest PUT
#5031
opened Jul 30, 2026 by
phene
Loading…
fix(sign): pass digest hash algorithm to underlying signer in SignData
#5029
opened Jul 28, 2026 by
pujitha24
Contributor
Loading…
fix(verify): detect local sigstore bundles for saved image indexes
#5023
opened Jul 21, 2026 by
pujitha24
Contributor
Loading…
chore(deps): bump actions/cache from 5.0.5 to 6.1.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#5011
opened Jul 13, 2026 by
dependabot
Bot
Loading…
chore(deps): bump actions/checkout from 6.0.3 to 7.0.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#5010
opened Jul 13, 2026 by
dependabot
Bot
Loading…
Previous Next
ProTip!
Exclude everything labeled
bug with -label:bug.