Affected by GO-2024-2718 and 1 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

The highest tagged major version is v2.

pkg/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/sigstore/cosign

Links

Open Source Insights

Directories ¶

Path	Synopsis
apis
cosigned
cosigned/v1alpha1 +k8s:deepcopy-gen=package +groupName=cosigned.sigstore.dev	+k8s:deepcopy-gen=package +groupName=cosigned.sigstore.dev
blob
client
clientset/versioned This package has the automatically generated clientset.	This package has the automatically generated clientset.
clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
clientset/versioned/typed/cosigned/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/cosigned/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
informers/externalversions
informers/externalversions/cosigned
informers/externalversions/cosigned/v1alpha1
informers/externalversions/internalinterfaces
injection/client
injection/client/fake
injection/informers/cosigned/v1alpha1/clusterimagepolicy
injection/informers/cosigned/v1alpha1/clusterimagepolicy/fake
injection/informers/cosigned/v1alpha1/clusterimagepolicy/filtered
injection/informers/cosigned/v1alpha1/clusterimagepolicy/filtered/fake
injection/informers/factory
injection/informers/factory/fake
injection/informers/factory/filtered
injection/informers/factory/filtered/fake
injection/reconciler/cosigned/v1alpha1/clusterimagepolicy
listers/cosigned/v1alpha1
cosign
attestation
bundle
cue
git
git/github
git/gitlab
kubernetes
kubernetes/webhook
pivkey
pkcs11key
rego
remote
tuf
oci Package oci holds functions and types intended to align and compose with github.com/google/go-containerregistry.	Package oci holds functions and types intended to align and compose with github.com/google/go-containerregistry.
empty
internal/signature
layout
mutate
remote
signed
static
walk
providers Package providers defines the APIs for providers to detect their relevance and register themselves to furnish OIDC tokens within a given environment.	Package providers defines the APIs for providers to detect their relevance and register themselves to furnish OIDC tokens within a given environment.
all
filesystem Package filesystem defines an implementation of the providers.Interface that reads identity tokens from a well-known filesystem location.	Package filesystem defines an implementation of the providers.Interface that reads identity tokens from a well-known filesystem location.
github Package github defines a github implementation of the providers.Interface.	Package github defines a github implementation of the providers.Interface.
google Package google defines a google implementation of the providers.Interface.	Package google defines a google implementation of the providers.Interface.
spiffe Package spiffe defines a SPIFFE/SPIRE implementation of the providers.Interface.	Package spiffe defines a SPIFFE/SPIRE implementation of the providers.Interface.
reconciler
clusterimagepolicy
sget
signature
types

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL