Affected by GO-2024-2718 and 1 other vulnerabilities

GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign

GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign

The highest tagged major version is v2.

pkg/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/sigstore/cosign

Links

Open Source Insights

Directories ¶

Path	Synopsis
apis
config Package config holds the typed objects that define the schemas for ConfigMap objects that pertain to our API objects.	Package config holds the typed objects that define the schemas for ConfigMap objects that pertain to our API objects.
cosigned
cosigned/v1alpha1 +k8s:deepcopy-gen=package +groupName=cosigned.sigstore.dev	+k8s:deepcopy-gen=package +groupName=cosigned.sigstore.dev
utils
blob
client
clientset/versioned This package has the automatically generated clientset.	This package has the automatically generated clientset.
clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
clientset/versioned/typed/cosigned/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
clientset/versioned/typed/cosigned/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
informers/externalversions
informers/externalversions/cosigned
informers/externalversions/cosigned/v1alpha1
informers/externalversions/internalinterfaces
injection/client
injection/client/fake
injection/informers/cosigned/v1alpha1/clusterimagepolicy
injection/informers/cosigned/v1alpha1/clusterimagepolicy/fake
injection/informers/cosigned/v1alpha1/clusterimagepolicy/filtered
injection/informers/cosigned/v1alpha1/clusterimagepolicy/filtered/fake
injection/informers/factory
injection/informers/factory/fake
injection/informers/factory/filtered
injection/informers/factory/filtered/fake
injection/reconciler/cosigned/v1alpha1/clusterimagepolicy
listers/cosigned/v1alpha1
cosign
attestation
bundle
cue
git
git/github
git/gitlab
kubernetes
kubernetes/webhook
pivkey
pkcs11key
rego
remote
tuf
oci Package oci holds functions and types intended to align and compose with github.com/google/go-containerregistry.	Package oci holds functions and types intended to align and compose with github.com/google/go-containerregistry.
empty
internal/signature
layout
mutate
remote
signature
signed
static
walk
providers Package providers defines the APIs for providers to detect their relevance and register themselves to furnish OIDC tokens within a given environment.	Package providers defines the APIs for providers to detect their relevance and register themselves to furnish OIDC tokens within a given environment.
all
filesystem Package filesystem defines an implementation of the providers.Interface that reads identity tokens from a well-known filesystem location.	Package filesystem defines an implementation of the providers.Interface that reads identity tokens from a well-known filesystem location.
github Package github defines a github implementation of the providers.Interface.	Package github defines a github implementation of the providers.Interface.
google Package google defines a google implementation of the providers.Interface.	Package google defines a google implementation of the providers.Interface.
spiffe Package spiffe defines a SPIFFE/SPIRE implementation of the providers.Interface.	Package spiffe defines a SPIFFE/SPIRE implementation of the providers.Interface.
reconciler
clusterimagepolicy
clusterimagepolicy/resources
testing/v1alpha1
sget
signature
types

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL