Aquesta és una versió anterior. La versió actual és la 3.1.4. cosign 3.1.4 · Data de publicació:
Fitxers d’instal·lació 2.4.0
| Arquitectura | Tipus | Àmbit | Mida del fitxer | Baixa | SHA256 |
|---|---|---|---|---|---|
| 64 bits | Portable | — | — | github.com | VirusTotal |
L’enllaç i l’SHA256 provenen del manifest comunitari del Gestor de paquets del Windows. Convé comparar el hash del fitxer baixat abans d’executar-lo.
Notes de la versió
v2.4.0 begins the modernization of the Cosign client, which includes:
- Support for the newer Sigstore specification-compliant bundle format
- Support for providing trust roots (e.g. Fulcio certificates, Rekor keys)
through a trust root file, instead of many different flags
- Conformance test suite integration to verify signing and verification behavior
In future updates, we'll include:
- General support for the trust root file, instead of only when using the bundle
format during verification
- Simplification of trust root flags and deprecation of the
Cosign-specific bundle format
- Bundle support with container signing
We have also moved nightly Cosign container builds to GHCR instead of GCR.Features
- Add new bundle support to verify-blob and verify-blob-attestation (#3796)
- Adding protobuf bundle support to sign-blob and attest-blob (#3752)
- Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
- Conformance testing for cosign (#3806)
- move incremental builds per commit to GHCR instead of GCR (#3808)
- Add support for recording creation timestamp for cosign attest (#3797)
- Include SCT verification failure details in error message (#3799)
Contributors
- Bob Callaway
- Hayden B
- Slavek Kabrda
- Zach Steindler
- Zsolt Horvath
Full Changelog: https://github.com/sigstore/cosign/compare/v2.3.0...v2.4.0