Pull requests · sigstore/cosign · GitHub
Skip to content

Pull requests: sigstore/cosign

New pull request New
49 Open 3,779 Closed
49 Open 3,779 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

chore(deps): bump golang.org/x/crypto from 0.55.0 to 0.57.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#5121 opened Sep 14, 2026 by dependabot Bot Loading…
chore(deps): bump k8s.io/apimachinery from 0.36.2 to 0.37.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#5120 opened Sep 14, 2026 by dependabot Bot Loading…
chore(deps): bump github.com/buildkite/agent/v3 from 3.130.0 to 3.138.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#5119 opened Sep 14, 2026 by dependabot Bot Loading…
chore(deps): bump golang.org/x/term from 0.45.0 to 0.46.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#5118 opened Sep 14, 2026 by dependabot Bot Loading…
chore(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#5117 opened Sep 14, 2026 by dependabot Bot Loading…
chore(deps): bump k8s.io/client-go from 0.36.2 to 0.37.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#5116 opened Sep 14, 2026 by dependabot Bot Loading…
chore(deps): bump golang.org/x/oauth2 from 0.36.0 to 0.37.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#5115 opened Sep 14, 2026 by dependabot Bot Loading…
chore(deps): bump gitlab.com/gitlab-org/api/client-go/v2 from 2.56.0 to 2.64.0 dependencies Pull requests that update a dependency file go Pull requests that update Go code
#5114 opened Sep 14, 2026 by dependabot Bot Loading…
chore(deps): bump the gomod group with 8 updates dependencies Pull requests that update a dependency file go Pull requests that update Go code
#5113 opened Sep 14, 2026 by dependabot Bot Loading…
chore(deps): bump the actions group with 5 updates dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
#5112 opened Sep 14, 2026 by dependabot Bot Loading…
fix: write referrers when image index has attestations
#5111 opened Sep 11, 2026 by aaronlew02 Contributor Loading…
1
Verify image attestations exclusively via sigstore-go
#5109 opened Sep 11, 2026 by aaronlew02 Contributor • Draft
1
Require new bundle format for attest
#5108 opened Sep 10, 2026 by aaronlew02 Contributor • Draft
1
update builder images to use go1.27.1
#5107 opened Sep 8, 2026 by cpanato Member • Draft
9
Fix stale version comment on pinned actions/checkout
#5102 opened Sep 7, 2026 by helgafinn Loading…
1
move to maintained lib for azure env detection
#5099 opened Sep 5, 2026 by bobcallaway Member Loading…
3
Require new bundle format for image signing and verification
#5093 opened Sep 2, 2026 by aaronlew02 Contributor • Draft
1
Verify blob attestations exclusively via sigstore-go
#5089 opened Sep 2, 2026 by aaronlew02 Contributor • Draft
1
Require new bundle format for attest-blob
#5088 opened Sep 2, 2026 by aaronlew02 Contributor • Draft
1
Verify blobs exclusively via sigstore-go
#5087 opened Sep 1, 2026 by aaronlew02 Contributor • Draft
1
feat: add native Syft JSON support in cosign attest
#5085 opened Sep 1, 2026 by ompushkara Contributor Loading…
1
2
Require new bundle format for sign-blob
#5083 opened Aug 31, 2026 by aaronlew02 Contributor • Draft
1
fix: make Ed25519 keys usable again for sign-blob, attest-blob and verify --key
#5074 opened Aug 26, 2026 by hamodywe Loading…
1
fix: honor --attachment-tag-prefix in cosign clean
#5060 opened Aug 16, 2026 by hamodywe Loading…
1
Add offline signing flag
#5059 opened Aug 14, 2026 by aaronlew02 Contributor Loading…
1
15
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.