Skip to content

v2.0.2
Compare
Choose a tag to compare
@sigstore-bot sigstore-bot released this 24 Apr 19:42
· 652 commits to main since this release
v2.0.2
This tag was signed with the committer’s verified signature.
haydentherapper Hayden B
SSH Key Fingerprint: jzX0b3tCjduspDDUI0+hECHgZQGwB+Mmm4vFFsg3mDY Learn about vigilant mode.
8714480
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

Installation

go install github.com/sigstore/cosign/v2/cmd/[email protected]

Enhancements

  • Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  • feat: Make cosign copy faster (#2901)
  • remove sget (#2885)
  • Require a payload to be provided with a signature (#2785)

Bug Fixes

  • cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  • Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)

Documentation

  • Remove experimental warning from Fulcio flags (#2923)
  • add missing oidc provider (#2922)
  • Add zot as a supported registry (#2920)
  • deprecates kms_support docs (#2900)
  • chore(docs) deprecate note for usage docs (#2906)
  • adds note of deprecation for examples.md docs (#2899)

Contributors

  • Carlos Tadeu Panato Junior
  • Chris Burns
  • Dmitry Savintsev
  • eiffel-fl
  • Hayden B
  • Hector Fernandez
  • Jon Johnson
  • Miloslav Trmač
  • priyawadhwa
  • Ramkumar Chinchani

Full Changelog: v2.0.1...v2.0.2

Assets 115
Loading