verify

May 13, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Apr 2, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Apr 2, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Apr 2, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Mar 5, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Feb 5, 2024 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Nov 9, 2023 GO-2024-3252

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

May 22, 2023 GO-2023-2332 +1 more

  GO-2023-2332: Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. in github.com/sigstore/gitsign

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

May 22, 2023

retracted

GO-2023-2332 +1 more

  GO-2023-2332: Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. in github.com/sigstore/gitsign

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Apr 10, 2023 GO-2023-2332 +1 more

  GO-2023-2332: Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. in github.com/sigstore/gitsign

  GO-2024-3252: gitsign may use incorrect Rekor entries during verification in github.com/sigstore/gitsign

Changes in this version

+ func New(cfg *config.Config) *cobra.Command

+ func PrintSummary(w io.Writer, summary *git.VerificationSummary)