Search results

cosign verify fails after cosign copy (JFrog artifactory)

bugSomething isn't workingSomething isn't working

Status: Open.

#4564 In sigstore/cosign;

· Munken opened on Dec 5, 2025

sigstore-bundle manifest should include an annotation pointing to the actual nested predicateType

enhancementNew feature or requestNew feature or request

Status: Open.

#4563 In sigstore/cosign;

· pauxus opened on Dec 5, 2025

Cosign 3.0.2: Intermediate certificates are not included in signatures having the new bundle format

bugSomething isn't workingSomething isn't working

Status: Open.

#4562 In sigstore/cosign;

· cck1860 opened on Dec 5, 2025

No files written to disk for cosign sign with flags --output-signature and --output-payload

bugSomething isn't workingSomething isn't working

Status: Open.

#4554 In sigstore/cosign;

· sherine-k opened on Nov 28, 2025

cosign triangulate command generate a .sig tag even for referrers signatures

enhancementNew feature or requestNew feature or request

Status: Open.

#4553 In sigstore/cosign;

· scraly opened on Nov 28, 2025

Custom metadata not configured properly for target tsa certs, skipping target

questionFurther information is requestedFurther information is requested

Status: Open.

#4551 In sigstore/cosign;

· gi-dorio opened on Nov 28, 2025

Cosign 3.0.2 continues trying to reach out to TUF CDN even with local key, Nexus-only access

enhancementNew feature or requestNew feature or request

Status: Open.

#4550 In sigstore/cosign;

· oarifbulut opened on Nov 27, 2025

Cosign signs successfully on Windows but fails on Ubuntu 24 when using PKCS#11/HSM

bugSomething isn't workingSomething isn't working

Status: Open.

#4540 In sigstore/cosign;

· tuantafz opened on Nov 24, 2025

Make bundle input required for signing and attestation

enhancementNew feature or requestNew feature or request

Status: Open.

#4534 In sigstore/cosign;

· aaronlew02 opened on Nov 19, 2025

Cosign v2 <code>verify</code> should auto-detect if <code>--new-bundle-format</code> is needed

enhancementNew feature or requestNew feature or request

Status: Open.

#4531 In sigstore/cosign;

· sudo-bmitch opened on Nov 18, 2025

Shall cosign save, clean and load the new bundle format or are here different methods to be used

questionFurther information is requestedFurther information is requested

Status: Open.

#4507 In sigstore/cosign;

· cck1860 opened on Oct 30, 2025

Improve the UX when verifying a Rekor v2 entry with a signed timestamp

enhancementNew feature or requestNew feature or request

Status: Open.

#4500 In sigstore/cosign;

· haydentherapper opened on Oct 27, 2025