Commits

History for

Commits on Mar 2, 2023

add --yes flag when signing the test cosign images (sigstore#2761 )
cpanato
committedMar 2, 2023

Commits on Feb 24, 2023

Merge 2.0-docs branch into main (sigstore#2741 )
priyawadhwa
committedFeb 24, 2023

Commits on Feb 17, 2023

Added support for attaching cert and cert chain in attach command Git… (sigstore#2602 )

Mukuls77
and
MukulSharma77
committedFeb 17, 2023

Commits on Feb 16, 2023

Support non-Sigstore TSA requests (sigstore#2708 )
haydentherapper
committedFeb 16, 2023

Commits on Feb 14, 2023

Fix: Add missing schemes to cosign predicate types. (sigstore#2717 )
mattmoor
committedFeb 14, 2023
Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (sigstore#2684 )
jdolitsky
committedFeb 14, 2023

Commits on Feb 13, 2023

Fix: Drop the CosignPredicate wrapper around SBOM attestations. (sigstore#2718 )
mattmoor
committedFeb 13, 2023
attach signature and attach sbom must use STDIN to upload raw string (sigstore#2637 )
mozillazg
committedFeb 13, 2023

Commits on Feb 8, 2023

Support for fetching Fulcio certs with self-managed key (sigstore#2532 )

AnishShah
and
haydentherapper
committedFeb 8, 2023
2476 predicate type download (sigstore#2484 )
chaospuppy
committedFeb 8, 2023

Commits on Jan 12, 2023

insecure-skip-tlog-verify: rename and adapt the cert expiration check (sigstore#2620 )
hectorj2f
committedJan 12, 2023

Commits on Jan 9, 2023

Export COSIGN_YES=true var in insecure registry test (sigstore#2605 )
priyawadhwa
committedJan 9, 2023

Commits on Jan 5, 2023

feat: support keyless verification for verify-blob-attestation (sigstore#2525 )
asraa
committedJan 5, 2023

Commits on Jan 4, 2023

fix: fix github oidc post submit test (sigstore#2594 )
asraa
committedJan 4, 2023
attest-blob: add functionality for keyless signing (sigstore#2515 )
asraa
committedJan 4, 2023

Commits on Jan 3, 2023

Only print warning about uploading to tlog if we're uploading to the tlog (sigstore#2580 )
priyawadhwa
committedJan 3, 2023

Commits on Dec 21, 2022

Deprecate --certificate-email flag. Make --certificate-identity and -… (sigstore#2411 )
kpk47
committedDec 21, 2022

Commits on Dec 15, 2022

Add in missing v2 to go paths (sigstore#2549 )
priyawadhwa
committedDec 15, 2022

Commits on Dec 14, 2022

Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (sigstore#2544 )
priyawadhwa
committedDec 14, 2022

Commits on Dec 13, 2022

Update e2e tests (sigstore#2535 )
cpanato
committedDec 13, 2022

Commits on Dec 10, 2022

Fix timestamp verification, add verify-blob tests (sigstore#2527 )
haydentherapper
committedDec 10, 2022

Commits on Dec 7, 2022

* fix(verify): Consolidate certificate expiry logic (sigstore#2504 )

mtrmac
and
haydentherapper
committedDec 7, 2022
Updates to Timestamp signing and verification (sigstore#2499 )
haydentherapper
committedDec 7, 2022

Commits on Dec 6, 2022

Breaking change: Respect tlog-upload=false, default to true (sigstore#2505 )
haydentherapper
committedDec 6, 2022
sign: remove reg opts from sign blob (sigstore#2512 )
asraa
committedDec 6, 2022

Commits on Nov 23, 2022

Attestation/Blob signing and verification using a RFC3161 time-stamping server (sigstore#2464 )
hectorj2f
committedNov 23, 2022

Commits on Nov 18, 2022

rename tsa bundle to rfc3161timestamp (sigstore#2469 )
hectorj2f
committedNov 18, 2022

Commits on Nov 16, 2022

Support TSA and Rekor verifications (sigstore#2463 )
hectorj2f
committedNov 16, 2022

Commits on Nov 15, 2022

add support for tsa signing and verification of images (sigstore#2460 )
hectorj2f
committedNov 15, 2022

Commits on Nov 14, 2022

Commits on Nov 3, 2022

Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (sigstore#2399 )
priyawadhwa
committedNov 3, 2022

Commits on Nov 2, 2022

Refactor verify-blob command (sigstore#2409 )
priyawadhwa
committedNov 2, 2022
Refactor attest command to make it easier to set args (sigstore#2401 )
priyawadhwa
committedNov 2, 2022