Cosign
Loading the README
- v3.1.32026-08-06This release resolves GHSA-fx35-mq7g-6g98, a verification bypass using an unexpected public key in a legacy bundle.
- v2.6.52026-08-06This release backports GHSA-fx35-mq7g-6g98 (Verification bypass via public key in legacy bundle) to Cosign v2.6.x.
- v3.1.22026-07-17This may be the last Cosign v3.1 release, as we finish deprecations and removing unused functionality. Soon we'll start…
- v2.6.42026-07-17This release is a backport of OCI manifest fixes, and better support for cosign attestation download when you are using…
- v3.1.12026-06-09_Note: v3.1.0 was skipped due to a bug in our release pipeline. v3.1.1 is identical to v3.1.0_
✓ signed The latest release, v3.1.3, carries a signature GitHub verified.
Loading the security report