-
Notifications
You must be signed in to change notification settings - Fork 785
Pull requests: sigstore/cosign
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Cap the bundle layer read in ociremote.Bundle
#5052
opened Aug 10, 2026 by
arpitjain099
Contributor
Loading…
verify: fetch bundles once and reuse them for verification
#5051
opened Aug 10, 2026 by
codysoyland
Member
Loading…
fix: include annotations in implied payload for offline verify
#5048
opened Aug 7, 2026 by
pujitha24
Contributor
Loading…
chore(deps): bump the gomod group across 1 directory with 10 updates
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#5047
opened Aug 7, 2026 by
dependabot
Bot
Loading…
fix(oci): Honor target COSIGN_REPOSITORY for legacy-bundle OCI 1.1 signatures
#5034
opened Aug 2, 2026 by
reneleonhardt
Loading…
fix(load): upload bundle layer blobs before manifest PUT
#5031
opened Jul 30, 2026 by
phene
Loading…
fix(sign): pass digest hash algorithm to underlying signer in SignData
#5029
opened Jul 28, 2026 by
pujitha24
Contributor
Loading…
chore(deps): bump the actions group across 1 directory with 7 updates
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#5027
opened Jul 27, 2026 by
dependabot
Bot
Loading…
fix(verify): detect local sigstore bundles for saved image indexes
#5023
opened Jul 21, 2026 by
pujitha24
Contributor
Loading…
chore(deps): bump actions/cache from 5.0.5 to 6.1.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#5011
opened Jul 13, 2026 by
dependabot
Bot
Loading…
chore(deps): bump actions/checkout from 6.0.3 to 7.0.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#5010
opened Jul 13, 2026 by
dependabot
Bot
Loading…
chore(deps): bump github.com/buildkite/agent/v3 from 3.130.0 to 3.136.2
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#5008
opened Jul 13, 2026 by
dependabot
Bot
Loading…
chore(deps): bump cuelang.org/go from 0.16.1 to 0.17.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4989
opened Jul 6, 2026 by
dependabot
Bot
Loading…
chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.7.0 to 2.8.1
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4987
opened Jul 6, 2026 by
dependabot
Bot
Loading…
chore(deps): bump github.com/open-policy-agent/opa from 1.17.1 to 1.18.2
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4986
opened Jul 6, 2026 by
dependabot
Bot
Loading…
Require new bundle format for signing and verification
#4959
opened Jun 18, 2026 by
aaronlew02
Contributor
Loading…
chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#4955
opened Jun 15, 2026 by
dependabot
Bot
Loading…
check bundle layer size before reading in remote.Bundle
#4947
opened Jun 14, 2026 by
alhudz
Loading…
providers/filesystem: honor SIGSTORE_OIDC_TOKEN_FILE env var
#4934
opened Jun 9, 2026 by
dustinkirkland
Loading…
fix: report certificate and timestamp verification checks
#4904
opened May 28, 2026 by
bmendonca3
Loading…
fix: wire insecure-skip-verify to bundle generation
#4902
opened May 28, 2026 by
agustinushanssen
Loading…
Previous Next
ProTip!
Type g i on any issue or pull request to go back to the issue listing page.