verify

package

Go to main page

Versions in this module

v1

v1.13.6

Mar 21, 2024 GO-2023-2181

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.13.5

Mar 21, 2024 GO-2023-2181

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.13.4

Mar 21, 2024 GO-2023-2181

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.13.3

Mar 21, 2024 GO-2023-2181

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.13.2

Nov 15, 2023 GO-2023-2181

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

Changes in this version

type VerifyAttestationCommand

+ NameOptions []name.Option

type VerifyCommand

+ NameOptions []name.Option

v1.13.1

Oct 17, 2022 GO-2023-2181

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

Changes in this version

type VerifyAttestationCommand

+ CertIdentity string

+ type VerifyBlobAttestationCommand struct

+ CheckClaims bool

+ KeyRef string

+ PredicateType string

+ SignaturePath string

+ func (c *VerifyBlobAttestationCommand) Exec(ctx context.Context, artifactPath string) error

type VerifyCommand

+ CertIdentity string

+ CertOidcProvider string

v1.13.0

Oct 7, 2022 GO-2023-2181

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.12.1

Sep 20, 2022 GO-2023-2181

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.12.0

Sep 14, 2022 GO-2023-2181

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.11.1

Aug 24, 2022 GO-2022-0998GO-2023-2181

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.11.0

Aug 18, 2022 GO-2022-0998GO-2023-2181

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.10.1

Aug 4, 2022 GO-2022-0998GO-2023-2181

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.10.0

Jul 22, 2022 GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

Changes in this version

type VerifyAttestationCommand

+ CertGithubWorkflowName string

+ CertGithubWorkflowRef string

+ CertGithubWorkflowRepository string

+ CertGithubWorkflowSha string

+ CertGithubWorkflowTrigger string

type VerifyCommand

+ CertGithubWorkflowName string

+ CertGithubWorkflowRef string

+ CertGithubWorkflowRepository string

+ CertGithubWorkflowSha string

+ CertGithubWorkflowTrigger string

v1.10.0-rc.1

Jul 22, 2022 GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.9.0

Jun 3, 2022 GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.8.0

Apr 27, 2022 GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

Changes in this version

type VerifyAttestationCommand

+ EnforceSCT bool

type VerifyCommand

+ EnforceSCT bool

v1.7.2

Apr 12, 2022 GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.7.1

Apr 5, 2022 GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.7.0

Apr 4, 2022 GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

Changes in this version

type VerifyAttestationCommand

+ CertChain string

type VerifyCommand

+ CertChain string

v1.6.0

Mar 3, 2022 GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.5.2

Feb 18, 2022 GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.5.1

Jan 30, 2022 GO-2022-0326GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.5.0

Jan 21, 2022 GO-2022-0326GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

Changes in this version

type VerifyAttestationCommand

+ CertEmail string

+ CertOidcIssuer string

+ CertRef string

type VerifyCommand

+ CertOidcIssuer string

v1.4.1

Dec 10, 2021 GO-2022-0326GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

Changes in this version

type VerifyAttestationCommand

+ LocalImage bool

type VerifyCommand

+ LocalImage bool

v1.4.0

Dec 6, 2021 GO-2022-0326GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

Changes in this version

type VerifyCommand

+ CertRef string

+ HashAlgorithm crypto.Hash

+ SignatureRef string

v1.3.1

Nov 11, 2021 GO-2022-0326GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

v1.3.0

Nov 3, 2021 GO-2022-0326GO-2022-0758GO-2022-0998GO-2023-2181

GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

Changes in this version

+ func PrintVerification(imgRef string, verified []oci.Signature, output string)

+ func PrintVerificationHeader(imgRef string, co *cosign.CheckOpts, bundleVerified bool)

+ func VerifyBlobCmd(ctx context.Context, ko sign.KeyOpts, certRef, sigRef, blobRef string) error

+ type VerifyAttestationCommand struct

+ CheckClaims bool

+ FulcioURL string

+ KeyRef string

+ Output string

+ Policies []string

+ PredicateType string

+ RekorURL string

+ Sk bool

+ Slot string

+ func (c *VerifyAttestationCommand) Exec(ctx context.Context, images []string) (err error)

+ type VerifyCommand struct

+ Annotations sigs.AnnotationsMap

+ Attachment string

+ CertEmail string

+ CheckClaims bool

+ KeyRef string

+ Output string

+ RekorURL string

+ Sk bool

+ Slot string

+ func (c *VerifyCommand) Exec(ctx context.Context, images []string) (err error)

Other modules containing this package

github.com/sigstore/cosign/v2

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL