Versions in this module
v1
Apr 27, 2022 GO-2022-0758 +4 more
GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign
GO-2022-0998: Improper blob verification in github.com/sigstore/cosign
GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign
GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign
GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign
Changes in this version
type ClusterImagePolicySpec
Apr 12, 2022 GO-2022-0758 +4 more
GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign
GO-2022-0998: Improper blob verification in github.com/sigstore/cosign
GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign
GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign
GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign
Apr 5, 2022 GO-2022-0758 +4 more
GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign
GO-2022-0998: Improper blob verification in github.com/sigstore/cosign
GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign
GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign
GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign
Apr 4, 2022 GO-2022-0758 +4 more
GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign
GO-2022-0998: Improper blob verification in github.com/sigstore/cosign
GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign
GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign
GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign
Changes in this version
type ClusterImagePolicySpec
Mar 3, 2022 GO-2022-0758 +4 more
GO-2022-0758: Improper verification of signature attestations in github.com/sigstore/cosign
GO-2022-0998: Improper blob verification in github.com/sigstore/cosign
GO-2023-2181: Denial of service attack from remote registry in github.com/sigstore/cosign
GO-2024-2718: Cosign malicious attachments can cause system-wide denial of service in github.com/sigstore/cosign
GO-2024-2719: Cosign malicious artifacts can cause machine-wide DoS in github.com/sigstore/cosign
Changes in this version