Affected by GO-2024-2718 and 1 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

The highest tagged major version is v2.

sget

package

v1.11.1 Latest Latest Go to latest Published: Aug 24, 2022 License: Apache-2.0 Imports: 13 Imported by: 3

Details

This section is empty.

This section is empty.

This section is empty.

type SecureGet struct {
	ImageRef string
	KeyRef   string
	Out      io.Writer
}

func New(image, key string, out io.Writer) *SecureGet

func (sg *SecureGet) Do(ctx context.Context) error