Skip to content

Pull requests: sigstore/cosign

New pull request New
28 Open 3,655 Closed
28 Open 3,655 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add ociremote.WithSubjectDescriptor option
#4940 opened Jun 10, 2026 by codysoyland Member • Draft
1
Remove xfail from nightly conformance workflow
#4939 opened Jun 10, 2026 by aaronlew02 Contributor Loading…
1
Remove unused ephemeral signer
#4938 opened Jun 10, 2026 by aaronlew02 Contributor Loading…
7
Remove unused policy evaluation code
#4936 opened Jun 10, 2026 by aaronlew02 Contributor Loading…
2
Remove unused OCI code
#4935 opened Jun 9, 2026 by aaronlew02 Contributor Loading…
1
providers/filesystem: honor SIGSTORE_OIDC_TOKEN_FILE env var
#4934 opened Jun 9, 2026 by dustinkirkland Loading…
Remove unused signing code
#4918 opened Jun 5, 2026 by aaronlew02 Contributor Loading…
4
clean: update inaccurate warning
#4909 opened Jun 2, 2026 by swivelmargarita • Draft
1
fix: report certificate and timestamp verification checks
#4904 opened May 28, 2026 by bmendonca3 Loading…
2
fix: wire insecure-skip-verify to bundle generation
#4902 opened May 28, 2026 by agustinushanssen Loading…
1
2
Fix unsafe DefaultTransport type assertions
#4883 opened May 23, 2026 by SebTardif Contributor Loading…
1
docs: add digest-based verification example for verify-blob-attestation
#4835 opened Apr 23, 2026 by joy7758 • Draft
fix(layout): preserve manifest artifactType in index.json when saving
#4821 opened Apr 15, 2026 by alliasgher Contributor Loading…
1
1
fix: update dependencies to use new azure sdk components
#4809 opened Apr 13, 2026 by gaganhr94 Loading…
1
4
Add --ignore-pkcs11-certificate sign option
#4787 opened Apr 1, 2026 by kholmanskikh Loading…
feat: add command update-key-pair (solves #3168)
#4730 opened Feb 28, 2026 by Aex12 Loading…
1
Add cosign-specific user-agent to all HTTP requests
#4705 opened Feb 17, 2026 by cpanato Member Loading…
1
2
chore: make oci11 referrer selection deterministic
#4656 opened Jan 20, 2026 by 1seal Contributor Loading…
3
Supporting OCI Signing with X.509 Certificate Chain
#4614 opened Jan 5, 2026 by yangkenneth • Draft
2
fixes sigstore/cosign/issues/4591
#4593 opened Dec 20, 2025 by rhuddleston Loading…
1
1
Add org.opencontainers.image.title annotation to attestation layers
#4498 opened Oct 24, 2025 by ralphbean Contributor Loading…
1
1
Support stdout output for attest-blob bundles
#4495 opened Oct 24, 2025 by ralphbean Contributor Loading…
1
4
Fix signing and verification with ed25519 keys with bundles and Rekor
#4414 opened Sep 16, 2025 by Hayden-IO Contributor • Draft
10
feat(cli): add --payload-media-type to sign (fixes #4300)
#4304 opened Jul 23, 2025 by arubegonsan Loading…
1
2
feat(sign): support loading --cert/--cert-chain from URL and env variable
#4260 opened Jun 24, 2025 by ummetcivi Loading…
1
ProTip! no:milestone will show everything without a milestone.