Affected by GO-2025-3615 and 2 other vulnerabilities

GO-2025-3615: Kyverno vulnerable to SSRF via Service Calls in github.com/kyverno/kyverno

GO-2026-4381: Kyverno Cross-Namespace Privilege Escalation via Policy apiCall in github.com/kyverno/kyverno

GO-2026-4382: Kyverno Denial of Service via Context Variable Amplification in Policy Engine in github.com/kyverno/kyverno

cosign

package

v1.15.2-rc.1 Latest Latest Go to latest Published: Sep 17, 2025 License: Apache-2.0 Imports: 42 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kyverno/kyverno

Links

Documentation ¶

Index ¶

func ClearMock()
func NewVerifier() images.ImageVerifier
func SetMock(image string, data [][]byte) error
type Bundle
type Cosign
type VerificationResult

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ClearMock ¶ added in v1.7.0

func ClearMock()

func NewVerifier ¶ added in v1.10.0

func NewVerifier() images.ImageVerifier

func SetMock ¶ added in v1.5.0

func SetMock(image string, data [][]byte) error

Types ¶

type Bundle ¶ added in v1.13.0

type Bundle struct {
	ProtoBundle   *bundle.Bundle
	DSSE_Envelope *in_toto.Statement //nolint:staticcheck
}

type Cosign ¶ added in v1.5.0

type Cosign interface {
	VerifyImageSignatures(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) ([]oci.Signature, bool, error)
	VerifyImageAttestations(ctx context.Context, signedImgRef name.Reference, co *cosign.CheckOpts) (checkedAttestations []oci.Signature, bundleVerified bool, err error)
}

type VerificationResult ¶ added in v1.13.0

type VerificationResult struct {
	Bundle *Bundle
	Result *verify.VerificationResult
	Desc   *v1.Descriptor
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL