Affected by GO-2024-2718 and 1 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

The highest tagged major version is v2.

payload

package

v1.4.0 Latest Latest Go to latest Published: Dec 6, 2021 License: Apache-2.0 Imports: 10 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/sigstore/cosign

Links

Open Source Insights

Documentation ¶

Index ¶

func NewSigner(s signature.Signer, sOpts []signature.SignOption, ...) cosign.Signer

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func NewSigner ¶

func NewSigner(s signature.Signer,
	sOpts []signature.SignOption,
	pkOpts []signature.PublicKeyOption) cosign.Signer

NewSigner returns a `cosign.Signer` uses the given `signature.Signer` to sign the requested payload, then returns the signature, the public key associated with it, the signed payload

Types ¶

This section is empty.

Source Files ¶

View all Source files

payload.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL