Skip to content

Pull requests: sigstore/cosign

New pull request New
22 Open 3,525 Closed
22 Open 3,525 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

chore(deps): bump the gomod group across 1 directory with 4 updates dependencies Pull requests that update a dependency file go Pull requests that update Go code
#4766 opened Mar 12, 2026 by dependabot bot Loading…
fix(deps): CVE-2026-2303 / CVE-2026-2303 go.mongodb.org/mongo-driver
#4764 opened Mar 10, 2026 by matthiasbruns Loading…
3
chore(deps): bump gitlab.com/gitlab-org/api/client-go from 1.41.0 to 1.46.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#4757 opened Mar 9, 2026 by dependabot bot Loading…
chore(deps): bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#4755 opened Mar 9, 2026 by dependabot bot Loading…
chore(deps): bump github.com/buildkite/agent/v3 from 3.118.0 to 3.119.1 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#4753 opened Mar 9, 2026 by dependabot bot Loading…
fix(verify): Attach provided certificate and chain to loaded signature
#4737 opened Mar 4, 2026 by aaronlew02 Loading…
5
feat: add command update-key-pair (solves #3168)
#4730 opened Feb 28, 2026 by Aex12 Loading…
1
Add cosign-specific user-agent to all HTTP requests
#4705 opened Feb 17, 2026 by cpanato Loading…
1
2
chore(deps): bump golang from 1.25.6 to 1.25.7 in the all group dependencies Pull requests that update a dependency file docker Pull requests that update docker code
#4690 opened Feb 9, 2026 by dependabot bot Loading…
chore: make oci11 referrer selection deterministic
#4656 opened Jan 20, 2026 by 1seal Loading…
2
Sign exclusively via sigstore-go
#4618 opened Jan 5, 2026 by aaronlew02 Loading…
1
75
Supporting OCI Signing with X.509 Certificate Chain
#4614 opened Jan 5, 2026 by yangkenneth • Draft
2
fixes sigstore/cosign/issues/4591
#4593 opened Dec 20, 2025 by rhuddleston Loading…
1
1
Add org.opencontainers.image.title annotation to attestation layers
#4498 opened Oct 24, 2025 by ralphbean Loading…
1
1
Support stdout output for attest-blob bundles
#4495 opened Oct 24, 2025 by ralphbean Loading…
1
4
feat(ISV-6377): let cosign use HashedRekord for TLOG verification of attestations
#4490 opened Oct 22, 2025 by BorekZnovustvoritel Loading…
3
Fix signing and verification with ed25519 keys with bundles and Rekor
#4414 opened Sep 16, 2025 by Hayden-IO • Draft
8
feat(cli): add --payload-media-type to sign (fixes #4300)
#4304 opened Jul 23, 2025 by arubegonsan Loading…
1
2
feat(sign): support loading --cert/--cert-chain from URL and env variable
#4260 opened Jun 24, 2025 by ummetcivi Loading…
1
add sha256:... as alternative way to specify a blob
#4016 opened Jan 17, 2025 by wolfv Loading…
13
Enable signing and verifying image without registry access
#4014 opened Jan 16, 2025 by bkabrda Loading…
1
2
remove previously deprecated attach/download sbom commands
#3891 opened Sep 27, 2024 by hectorj2f • Draft
@hectorj2f
4
ProTip! Type g i on any issue or pull request to go back to the issue listing page.