-
Notifications
You must be signed in to change notification settings - Fork 781
Pull requests: sigstore/cosign
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix: only show public-instance privacy statement for the default Rekor URL
#5042
opened Aug 6, 2026 by
pujitha24
Contributor
Loading…
chore(deps): bump the gomod group across 1 directory with 4 updates
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#5038
opened Aug 3, 2026 by
dependabot
Bot
Loading…
fix(oci): Honor target COSIGN_REPOSITORY for legacy-bundle OCI 1.1 signatures
#5034
opened Aug 2, 2026 by
reneleonhardt
Loading…
fix(load): upload bundle layer blobs before manifest PUT
#5031
opened Jul 30, 2026 by
phene
Loading…
fix(sign): pass digest hash algorithm to underlying signer in SignData
#5029
opened Jul 28, 2026 by
pujitha24
Contributor
Loading…
chore(deps): bump the actions group across 1 directory with 7 updates
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#5027
opened Jul 27, 2026 by
dependabot
Bot
Loading…
chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#5024
opened Jul 24, 2026 by
dependabot
Bot
Loading…
fix(verify): detect local sigstore bundles for saved image indexes
#5023
opened Jul 21, 2026 by
pujitha24
Contributor
Loading…
chore(deps): bump actions/cache from 5.0.5 to 6.1.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#5011
opened Jul 13, 2026 by
dependabot
Bot
Loading…
chore(deps): bump actions/checkout from 6.0.3 to 7.0.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#5010
opened Jul 13, 2026 by
dependabot
Bot
Loading…
chore(deps): bump github.com/buildkite/agent/v3 from 3.130.0 to 3.132.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#5008
opened Jul 13, 2026 by
dependabot
Bot
Loading…
chore(deps): bump google.golang.org/api from 0.284.0 to 0.288.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#5007
opened Jul 13, 2026 by
dependabot
Bot
Loading…
chore(deps): bump cuelang.org/go from 0.16.1 to 0.17.0
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4989
opened Jul 6, 2026 by
dependabot
Bot
Loading…
chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.7.0 to 2.8.1
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4987
opened Jul 6, 2026 by
dependabot
Bot
Loading…
chore(deps): bump github.com/open-policy-agent/opa from 1.17.1 to 1.18.2
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#4986
opened Jul 6, 2026 by
dependabot
Bot
Loading…
Require new bundle format for signing and verification
#4959
opened Jun 18, 2026 by
aaronlew02
Contributor
Loading…
chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#4955
opened Jun 15, 2026 by
dependabot
Bot
Loading…
check bundle layer size before reading in remote.Bundle
#4947
opened Jun 14, 2026 by
alhudz
Loading…
providers/filesystem: honor SIGSTORE_OIDC_TOKEN_FILE env var
#4934
opened Jun 9, 2026 by
dustinkirkland
Loading…
fix: report certificate and timestamp verification checks
#4904
opened May 28, 2026 by
bmendonca3
Loading…
Previous Next
ProTip!
Find all pull requests that aren't related to any open issues with -linked:issue.