cosign
https://github.com/sigstore/cosign
Go
Container Signing
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Go not yet supported2 Subscribers
Add a CodeTriage badge to cosign
Help out
- Issues
- Make bundle input required for signing and attestation
- Custom metadata not configured properly for target tsa certs, skipping target
- cosign triangulate command generate a .sig tag even for referrers signatures
- sigstore-bundle manifest should include an annotation pointing to the actual nested predicateType
- Restructuring signing code for shared implementation
- cosign v3 verify ignores COSIGN_REPOSITORY envvar
- cosign does not generate signed timestamp anymore
- chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0
- chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0
- chore(deps): bump github.com/secure-systems-lab/go-securesystemslib from 0.9.1 to 0.10.0
- Docs
- Go not yet supported