-
Notifications
You must be signed in to change notification settings - Fork 687
Pull requests: sigstore/cosign
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.11.0 to 1.25.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4680
opened Feb 2, 2026 by
dependabot
bot
Loading…
chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4679
opened Feb 2, 2026 by
dependabot
bot
Loading…
chore(deps): bump github.com/buildkite/agent/v3 from 3.115.4 to 3.116.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4678
opened Feb 2, 2026 by
dependabot
bot
Loading…
chore(deps): bump cuelang.org/go from 0.15.3 to 0.15.4 in the gomod group
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4677
opened Feb 2, 2026 by
dependabot
bot
Loading…
chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4670
opened Jan 26, 2026 by
dependabot
bot
Loading…
chore(deps): bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.10.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4669
opened Jan 26, 2026 by
dependabot
bot
Loading…
disallow key and cert identity being used together during verification
#4636
opened Jan 13, 2026 by
piceri
Loading…
chore(deps): bump chainguard-dev/actions from 1.5.10 to 1.5.11 in the actions group
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#4632
opened Jan 12, 2026 by
dependabot
bot
Loading…
chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4630
opened Jan 12, 2026 by
dependabot
bot
Loading…
chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4628
opened Jan 12, 2026 by
dependabot
bot
Loading…
Add org.opencontainers.image.title annotation to attestation layers
#4498
opened Oct 24, 2025 by
ralphbean
Loading…
feat(ISV-6377): let cosign use HashedRekord for TLOG verification of attestations
#4490
opened Oct 22, 2025 by
BorekZnovustvoritel
Loading…
feat(cli): add
--payload-media-type to sign (fixes #4300)
#4304
opened Jul 23, 2025 by
arubegonsan
Loading…
feat(sign): support loading --cert/--cert-chain from URL and env variable
#4260
opened Jun 24, 2025 by
ummetcivi
Loading…
Return Public key in sign-blob when no certificate can be extracted.
#4224
opened Jun 6, 2025 by
tommyd450
Loading…
Enable signing and verifying image without registry access
#4014
opened Jan 16, 2025 by
bkabrda
Loading…
Previous Next
ProTip!
What’s not been updated in a month: updated:<2026-01-07.