Affected by GO-2024-2718 and 1 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

The highest tagged major version is v2.

test

package

v1.13.1 Latest Latest Go to latest Published: Oct 17, 2022 License: Apache-2.0 Imports: 11 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/sigstore/cosign

Links

Open Source Insights

Documentation ¶

Index ¶

func GenerateLeafCert(subject string, oidcIssuer string, parentTemplate *x509.Certificate, ...) (*x509.Certificate, *ecdsa.PrivateKey, error)
func GenerateLeafCertWithExpiration(subject string, oidcIssuer string, expiration time.Time, ...) (*x509.Certificate, error)
func GenerateLeafCertWithGitHubOIDs(subject string, oidcIssuer string, ...) (*x509.Certificate, *ecdsa.PrivateKey, error)
func GenerateLeafCertWithSubjectAlternateNames(dnsNames []string, emailAddresses []string, ipAddresses []net.IP, ...) (*x509.Certificate, *ecdsa.PrivateKey, error)
func GenerateRootCa() (*x509.Certificate, *ecdsa.PrivateKey, error)
func GenerateSubordinateCa(rootTemplate *x509.Certificate, rootPriv crypto.Signer) (*x509.Certificate, *ecdsa.PrivateKey, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func GenerateLeafCert ¶

func GenerateLeafCert(subject string, oidcIssuer string, parentTemplate *x509.Certificate, parentPriv crypto.Signer, exts ...pkix.Extension) (*x509.Certificate, *ecdsa.PrivateKey, error)

func GenerateLeafCertWithExpiration ¶ added in v1.12.0

func GenerateLeafCertWithExpiration(subject string, oidcIssuer string, expiration time.Time,
	priv *ecdsa.PrivateKey,
	parentTemplate *x509.Certificate, parentPriv crypto.Signer) (*x509.Certificate, error)

func GenerateLeafCertWithGitHubOIDs ¶ added in v1.10.0

func GenerateLeafCertWithGitHubOIDs(subject string, oidcIssuer string, githubWorkflowTrigger, githubWorkflowSha, githubWorkflowName,
	githubWorkflowRepository, githubWorkflowRef string, parentTemplate *x509.Certificate, parentPriv crypto.Signer) (*x509.Certificate, *ecdsa.PrivateKey, error)

func GenerateLeafCertWithSubjectAlternateNames ¶ added in v1.8.0

func GenerateLeafCertWithSubjectAlternateNames(dnsNames []string, emailAddresses []string, ipAddresses []net.IP, uris []*url.URL, oidcIssuer string, parentTemplate *x509.Certificate, parentPriv crypto.Signer) (*x509.Certificate, *ecdsa.PrivateKey, error)

func GenerateRootCa ¶

func GenerateRootCa() (*x509.Certificate, *ecdsa.PrivateKey, error)

func GenerateSubordinateCa ¶

func GenerateSubordinateCa(rootTemplate *x509.Certificate, rootPriv crypto.Signer) (*x509.Certificate, *ecdsa.PrivateKey, error)

Types ¶

This section is empty.

Source Files ¶

View all Source files

cert_utils.go

Directories ¶

Path	Synopsis
cmd
getoidctoken
fakeoidc module

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL