Cosign

Chargement du README

1. v3.1.32026-08-06This release resolves GHSA-fx35-mq7g-6g98, a verification bypass using an unexpected public key in a legacy bundle.
2. v2.6.52026-08-06This release backports GHSA-fx35-mq7g-6g98 (Verification bypass via public key in legacy bundle) to Cosign v2.6.x.
3. v3.1.22026-07-17This may be the last Cosign v3.1 release, as we finish deprecations and removing unused functionality. Soon we'll start…
4. v2.6.42026-07-17This release is a backport of OCI manifest fixes, and better support for cosign attestation download when you are using…
5. v3.1.12026-06-09_Note: v3.1.0 was skipped due to a bug in our release pipeline. v3.1.1 is identical to v3.1.0_