Affected by GO-2022-0326 and 2 other vulnerabilities

GO-2022-0326: Improper certificate validation in github.com/sigstore/cosign

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

The highest tagged major version is v2.

sget

package

v1.5.0 Latest Latest Go to latest Published: Jan 21, 2022 License: Apache-2.0 Imports: 12 Imported by: 3

Details

This section is empty.

This section is empty.

This section is empty.

type SecureGet struct {
	ImageRef string
	KeyRef   string
	Out      io.Writer
}

func New(image, key string, out io.Writer) *SecureGet

func (sg *SecureGet) Do(ctx context.Context) error