Commits

Commit history

1. Commits on Oct 4, 2026

   • Mention windows builds in readme (#5147)

     Show description for e2d25b5
     Hayden-IO

     authored
     e2d25b5View commit details

     Copy full SHA for e2d25b5

     Browse repository at this point
2. Commits on Oct 2, 2026

   • fix(verify): don't panic on a bundle entry with no hash (#5127)

     Show description for 6a83f9a
     ashvinctrl

     authored
     6a83f9aView commit details

     Copy full SHA for 6a83f9a

     Browse repository at this point
3. Commits on Oct 1, 2026

   • refactor: remove uploadToRekor parameter from ConfirmPrivacyStatement

     Show description for 0ea1cec
     

     aaronlew02

     authored and

     cmurphy

     committed
     0ea1cecView commit details

     Copy full SHA for 0ea1cec

     Browse repository at this point

   • fix(sign): pass digest hash algorithm to underlying signer in SignData

     Show description for ff2a8f4
     

     pujitha24

     authored and

     cmurphy

     committed
     ff2a8f4View commit details

     Copy full SHA for ff2a8f4

     Browse repository at this point

   • fix(e2e): enable UseSignedTimestamps in *TSAMTLSWithSigningConfig

     Show description for 7757e8b
     

     aaronlew02

     authored and

     cmurphy

     committed
     7757e8bView commit details

     Copy full SHA for 7757e8b

     Browse repository at this point
4. Commits on Sep 30, 2026

   • chore(deps): bump the actions group across 1 directory with 6 updates (#5129)

     Show description for a46875b
     dependabot[bot]

     authored
     a46875bView commit details

     Copy full SHA for a46875b

     Browse repository at this point

   • chore(deps): bump the gomod group across 1 directory with 3 updates (#5139)

     Show description for ba6ae08
     dependabot[bot]

     authored
     ba6ae08View commit details

     Copy full SHA for ba6ae08

     Browse repository at this point

   • chore(deps): bump golangci/golangci-lint in the all group (#5140)

     Show description for 3a9150d
     dependabot[bot]

     authored
     3a9150dView commit details

     Copy full SHA for 3a9150d

     Browse repository at this point
5. Commits on Sep 29, 2026

   • test(verify): add failure cases for new bundle verification

     Show description for f624836
     

     aaronlew02

     authored and

     cmurphy

     committed
     f624836View commit details

     Copy full SHA for f624836

     Browse repository at this point
6. Commits on Sep 24, 2026

   • fix(sign): propagate BundlePath from SignOptions to KeyOpts

     Show description for 907c3d8
     

     aaronlew02

     authored and

     cmurphy

     committed
     907c3d8View commit details

     Copy full SHA for 907c3d8

     Browse repository at this point

   • Rename crypto11 module path (#5135)

     Show description for 4961ad0
     Hayden-IO

     authored
     4961ad0View commit details

     Copy full SHA for 4961ad0

     Browse repository at this point

   • chore(deps): upgrade gitlab-org/api/client-go to v3 (#5133)

     Show description for f9285f2
     chimanjain

     authored
     f9285f2View commit details

     Copy full SHA for f9285f2

     Browse repository at this point
7. Commits on Sep 18, 2026

   • clean: update inaccurate warning (#4909)

     Show description for 0c66ecd
     

     3 peopleauthored
     0c66ecdView commit details

     Copy full SHA for 0c66ecd

     Browse repository at this point

   • fix: write referrers when image index has attestations (#5111)

     Show description for 67a1216
     aaronlew02

     authored
     67a1216View commit details

     Copy full SHA for 67a1216

     Browse repository at this point

   • fix(verify): enforce mutually exclusive key and security key (#5124)

     Show description for ac3a927
     aaronlew02

     authored
     ac3a927View commit details

     Copy full SHA for ac3a927

     Browse repository at this point

   • Reorder events in LoadTrustedMaterialAndSigningConfig

     Show description for 048eff5
     

     aaronlew02

     authored and

     cmurphy

     committed
     048eff5View commit details

     Copy full SHA for 048eff5

     Browse repository at this point
8. Commits on Sep 15, 2026

   • update builder images to use go1.27.1 (#5107)

     Show description for e9a91ea
     cpanato

     authored
     e9a91eaView commit details

     Copy full SHA for e9a91ea

     Browse repository at this point
9. Commits on Sep 14, 2026

   • fix(layout): preserve manifest artifactType in index.json when saving (#4821)

     Show description for 43d83e8
     alliasgher

     authored
     43d83e8View commit details

     Copy full SHA for 43d83e8

     Browse repository at this point

   • fix(load): upload bundle layer blobs before manifest PUT

     Show description for 1dbbc36
     

     2 peopleauthored and

     cmurphy

     committed
     1dbbc36View commit details

     Copy full SHA for 1dbbc36

     Browse repository at this point

   • fix: strip trailing whitespace from attached signature files/stdin (#5058)

     Show description for 81b61e2
     pujitha24

     authored
     81b61e2View commit details

     Copy full SHA for 81b61e2

     Browse repository at this point

   • fix: clarify COSIGN_REPOSITORY error when repository path is missing

     Show description for b327bba
     

     bejaratommy

     authored and

     cmurphy

     committed
     b327bbaView commit details

     Copy full SHA for b327bba

     Browse repository at this point

   • fix: include annotations in implied payload for offline verify

     Show description for 3532c1d
     

     pujitha24

     authored and

     cmurphy

     committed
     3532c1dView commit details

     Copy full SHA for 3532c1d

     Browse repository at this point

   • Cap the bundle layer read in ociremote.Bundle

     Show description for b84a076
     

     arpitjain099

     authored and

     cmurphy

     committed
     b84a076View commit details

     Copy full SHA for b84a076

     Browse repository at this point
10. Commits on Sep 8, 2026

    • chore(deps): bump the gomod group across 1 directory with 17 updates (#5104)

      Show description for 633e8f4
      

      dependabot[bot]

      and

      bobcallaway

      authored
      633e8f4View commit details

      Copy full SHA for 633e8f4

      Browse repository at this point

    • Align privacy statement prompt behavior (#5076)

      Show description for d39ab7c
      aaronlew02

      authored
      d39ab7cView commit details

      Copy full SHA for d39ab7c

      Browse repository at this point

    • chore(deps): bump the all group across 1 directory with 2 updates (#5067)

      Show description for b918f9d
      

      dependabot[bot]

      and

      bobcallaway

      authored
      b918f9dView commit details

      Copy full SHA for b918f9d

      Browse repository at this point

    • chore(deps): bump the actions group across 1 directory with 6 updates (#5105)

      Show description for 93902e5
      dependabot[bot]

      authored
      93902e5View commit details

      Copy full SHA for 93902e5

      Browse repository at this point

    • chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#5106)

      Show description for 0e676d9
      dependabot[bot]

      authored
      0e676d9View commit details

      Copy full SHA for 0e676d9

      Browse repository at this point

    • copy annotations by key instead of copying obj (#5103)

      Show description for 559c58c
      bobcallaway

      authored
      559c58cView commit details

      Copy full SHA for 559c58c

      Browse repository at this point
11. Commits on Sep 6, 2026

    • chore(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 (#4955)

      Show description for 1ab7015
      dependabot[bot]

      authored
      1ab7015View commit details

      Copy full SHA for 1ab7015

      Browse repository at this point

    • chore(deps): bump github.com/spiffe/go-spiffe/v2 from 2.7.0 to 2.8.1 (#4987)

      Show description for 49a9ba0
      dependabot[bot]

      authored
      49a9ba0View commit details

      Copy full SHA for 49a9ba0

      Browse repository at this point

    • chore(deps): bump github.com/open-policy-agent/opa from 1.17.1 to 1.20.1 (#4986)

      Show description for 059c22b
      dependabot[bot]

      authored
      059c22bView commit details

      Copy full SHA for 059c22b

      Browse repository at this point

    • docs: fix two dead links in README (#5072)

      Show description for f69dd35
      CAOShurong

      authored
      f69dd35View commit details

      Copy full SHA for f69dd35

      Browse repository at this point

    • Add org.opencontainers.image.title annotation to attestation layers (#4498)

      Show description for 37cf1bc
      

      ralphbean

      and

      claude

      authored
      37cf1bcView commit details

      Copy full SHA for 37cf1bc

      Browse repository at this point

    • chore(deps): bump cuelang.org/go from 0.16.1 to 0.17.0 (#4989)

      Show description for cd5817d
      dependabot[bot]

      authored
      cd5817dView commit details

      Copy full SHA for cd5817d

      Browse repository at this point