oci

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Mar 21, 2024 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Nov 15, 2023 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Oct 17, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Oct 7, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Sep 20, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Sep 14, 2022 GO-2023-2181 +2 more

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Aug 24, 2022 GO-2022-0998 +3 more

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Aug 18, 2022 GO-2022-0998 +3 more

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Aug 4, 2022 GO-2022-0998 +3 more

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jul 22, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jul 22, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jun 3, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Apr 27, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Apr 12, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Apr 5, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Apr 4, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Mar 3, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Feb 18, 2022 GO-2022-0758 +4 more

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jan 30, 2022 GO-2022-0326 +5 more

  GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Jan 21, 2022 GO-2022-0326 +5 more

  GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Changes in this version

type Signature

+ Timestamp func() (*tuf.Timestamp, error)

Dec 10, 2021 GO-2022-0326 +5 more

  GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Dec 6, 2021 GO-2022-0326 +5 more

  GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Nov 11, 2021 GO-2022-0326 +5 more

  GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Nov 3, 2021 GO-2022-0326 +5 more

  GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

  GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign

  GO-2022-0998: Improper blob verification in github.com/sigstore/cosign

  GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign

  GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

  GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

Changes in this version

+ const DockerMediaTypesEnv

+ func DockerMediaTypes() bool

+ type Bundle struct

+ Payload BundlePayload

+ SignedEntryTimestamp strfmt.Base64

+ type BundlePayload struct

+ Body interface{}

+ IntegratedTime int64

+ LogID string

+ LogIndex int64

+ type File interface

+ FileMediaType func() (types.MediaType, error)

+ Payload func() ([]byte, error)

+ type Signature interface

+ Annotations func() (map[string]string, error)

+ Base64Signature func() (string, error)

+ Bundle func() (*Bundle, error)

+ Cert func() (*x509.Certificate, error)

+ Chain func() ([]*x509.Certificate, error)

+ Payload func() ([]byte, error)

+ type Signatures interface

+ Get func() ([]Signature, error)

+ type SignedEntity interface

+ Attachment func(name string) (File, error)

+ Attestations func() (Signatures, error)

+ Signatures func() (Signatures, error)

+ type SignedImage interface

+ type SignedImageIndex interface

+ SignedImage func(v1.Hash) (SignedImage, error)

+ SignedImageIndex func(v1.Hash) (SignedImageIndex, error)