Affected by GO-2023-1804 and 2 other vulnerabilities

GO-2023-1804: Kyverno vulnerable due to usage of insecure cipher in github.com/kyverno/kyverno

GO-2023-1819: Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno

GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

cosign

package

v1.4.2-rc2 Latest Latest Go to latest Published: Jul 28, 2021 License: Apache-2.0 Imports: 14 Imported by: 2

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

func Initialize(client kubernetes.Interface, namespace, serviceAccount string, imagePullSecrets []string) error

Initialize loads the image pull secrets and initializes the default auth method for container registry API calls

func Verify(imageRef string, key []byte, log logr.Logger) (digest string, err error)

This section is empty.