-
Notifications
You must be signed in to change notification settings - Fork 765
Pull requests: sigstore/cosign
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix(download): Validate predicate type for new bundle format
#5001
opened Jul 10, 2026 by
aaronlew02
Contributor
Loading…
Fix Makefile: fall back to "unknown" version info when built outside a git repo
#5000
opened Jul 9, 2026 by
jtslear
Loading…
Guard against empty certificate PEM in mutate.Signature (attach path)
#4998
opened Jul 9, 2026 by
arpitjain099
Loading…
chore(deps): bump cuelang.org/go from 0.16.1 to 0.17.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4989
opened Jul 6, 2026 by
dependabot
Bot
Loading…
chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.7.0 to 2.8.1
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4987
opened Jul 6, 2026 by
dependabot
Bot
Loading…
chore(deps): bump github.com/open-policy-agent/opa from 1.17.1 to 1.18.2
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4986
opened Jul 6, 2026 by
dependabot
Bot
Loading…
chore(deps): bump google.golang.org/api from 0.284.0 to 0.287.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4984
opened Jul 6, 2026 by
dependabot
Bot
Loading…
fix: don't warn about tag usage for cosign-generated references
#4967
opened Jun 29, 2026 by
ricardbejarano
Contributor
Loading…
Require new bundle format for signing and verification
#4959
opened Jun 18, 2026 by
aaronlew02
Contributor
•
Draft
chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#4955
opened Jun 15, 2026 by
dependabot
Bot
Loading…
chore(deps): bump golang from 1.26.3 to 1.26.4 in the all group across 1 directory
dependencies
Pull requests that update a dependency file
docker
Pull requests that update docker code
#4950
opened Jun 15, 2026 by
dependabot
Bot
Loading…
check bundle layer size before reading in remote.Bundle
#4947
opened Jun 14, 2026 by
alhudz
Loading…
providers/filesystem: honor SIGSTORE_OIDC_TOKEN_FILE env var
#4934
opened Jun 9, 2026 by
dustinkirkland
Loading…
fix: report certificate and timestamp verification checks
#4904
opened May 28, 2026 by
bmendonca3
Loading…
fix: wire insecure-skip-verify to bundle generation
#4902
opened May 28, 2026 by
agustinushanssen
Loading…
Fix unsafe DefaultTransport type assertions
#4883
opened May 23, 2026 by
SebTardif
Contributor
Loading…
fix(layout): preserve manifest artifactType in index.json when saving
#4821
opened Apr 15, 2026 by
alliasgher
Contributor
Loading…
fix: update dependencies to use new azure sdk components
#4809
opened Apr 13, 2026 by
gaganhr94
Loading…
Previous Next
ProTip!
Mix and match filters to narrow down what you’re looking for.