Skip to content

Pull requests: sigstore/cosign

New pull request New
22 Open 3,539 Closed
22 Open 3,539 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add --ignore-pkcs11-certificate sign option
#4787 opened Apr 1, 2026 by kholmanskikh Loading…
fix(load): pass NameOptions to name.ParseReference
#4786 opened Apr 1, 2026 by ricardbejarano Loading…
1
Require bundle output when registry upload is disabled
#4785 opened Mar 30, 2026 by aaronlew02 • Draft
1
1
Initialize PKCS11 slots before getting token info
#4770 opened Mar 14, 2026 by utafrali Loading…
1
7
chore(deps): bump github.com/buildkite/agent/v3 from 3.118.0 to 3.119.1 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#4753 opened Mar 9, 2026 by dependabot bot Loading…
fix(verify): Attach provided certificate and chain to loaded signature
#4737 opened Mar 4, 2026 by aaronlew02 Loading…
9
feat: add command update-key-pair (solves #3168)
#4730 opened Feb 28, 2026 by Aex12 Loading…
1
Add cosign-specific user-agent to all HTTP requests
#4705 opened Feb 17, 2026 by cpanato Loading…
1
2
chore(deps): bump golang from 1.25.6 to 1.25.7 in the all group dependencies Pull requests that update a dependency file docker Pull requests that update docker code
#4690 opened Feb 9, 2026 by dependabot bot Loading…
chore: make oci11 referrer selection deterministic
#4656 opened Jan 20, 2026 by 1seal Loading…
2
Sign exclusively via sigstore-go
#4618 opened Jan 5, 2026 by aaronlew02 Loading…
1
84
Supporting OCI Signing with X.509 Certificate Chain
#4614 opened Jan 5, 2026 by yangkenneth • Draft
2
fixes sigstore/cosign/issues/4591
#4593 opened Dec 20, 2025 by rhuddleston Loading…
1
1
Add org.opencontainers.image.title annotation to attestation layers
#4498 opened Oct 24, 2025 by ralphbean Loading…
1
1
Support stdout output for attest-blob bundles
#4495 opened Oct 24, 2025 by ralphbean Loading…
1
4
feat(ISV-6377): let cosign use HashedRekord for TLOG verification of attestations
#4490 opened Oct 22, 2025 by BorekZnovustvoritel Loading…
3
Fix signing and verification with ed25519 keys with bundles and Rekor
#4414 opened Sep 16, 2025 by Hayden-IO • Draft
8
feat(cli): add --payload-media-type to sign (fixes #4300)
#4304 opened Jul 23, 2025 by arubegonsan Loading…
1
2
feat(sign): support loading --cert/--cert-chain from URL and env variable
#4260 opened Jun 24, 2025 by ummetcivi Loading…
1
add sha256:... as alternative way to specify a blob
#4016 opened Jan 17, 2025 by wolfv Loading…
13
Enable signing and verifying image without registry access
#4014 opened Jan 16, 2025 by bkabrda Loading…
1
2
remove previously deprecated attach/download sbom commands
#3891 opened Sep 27, 2024 by hectorj2f • Draft
@hectorj2f
4
ProTip! Adding no:label will show everything without a label.