policy

Jul 22, 2024

Changes in this version

+ type PayloadProvider interface

+ Payload func() ([]byte, error)

Jan 31, 2024 GO-2024-2718 +1 more

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Dec 5, 2023 GO-2024-2718 +1 more

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Nov 7, 2023 GO-2024-2718 +1 more

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Aug 31, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jun 27, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jun 23, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Changes in this version

+ type EvaluationFailure struct

+ func (e *EvaluationFailure) Error() string

+ func (e *EvaluationFailure) Unwrap() error

Apr 24, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Apr 6, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Feb 23, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Changes in this version

+ func AttestationToPayloadJSON(ctx context.Context, predicateType string, verifiedAttestation oci.Signature) ([]byte, string, error)

+ func EvaluatePolicyAgainstJSON(ctx context.Context, name, policyType string, policyBody string, ...) (warnings error, errors error)

Feb 16, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Feb 10, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jan 26, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Dec 14, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign