sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest
High severity
GitHub Reviewed
Published
Mar 10, 2026
in
sigstore/sigstore-ruby
•
Updated Mar 11, 2026
Give feedback on Dependabot alerts