이전 버전입니다. 현재 최신 버전은 3.1.4입니다. cosign 3.1.4 · 출시일:
설치 파일 2.4.0
| 아키텍처 | 형식 | 설치 범위 | 파일 크기 | 다운로드 | SHA256 |
|---|---|---|---|---|---|
| 64비트 | 포터블 | — | — | github.com | VirusTotal |
링크와 SHA256은 Windows 패키지 관리자 커뮤니티 매니페스트에서 가져왔습니다. 실행하기 전에 다운로드한 파일의 해시를 비교해 보십시오.
릴리스 노트
v2.4.0 begins the modernization of the Cosign client, which includes:
- Support for the newer Sigstore specification-compliant bundle format
- Support for providing trust roots (e.g. Fulcio certificates, Rekor keys)
through a trust root file, instead of many different flags
- Conformance test suite integration to verify signing and verification behavior
In future updates, we'll include:
- General support for the trust root file, instead of only when using the bundle
format during verification
- Simplification of trust root flags and deprecation of the
Cosign-specific bundle format
- Bundle support with container signing
We have also moved nightly Cosign container builds to GHCR instead of GCR.Features
- Add new bundle support to verify-blob and verify-blob-attestation (#3796)
- Adding protobuf bundle support to sign-blob and attest-blob (#3752)
- Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
- Conformance testing for cosign (#3806)
- move incremental builds per commit to GHCR instead of GCR (#3808)
- Add support for recording creation timestamp for cosign attest (#3797)
- Include SCT verification failure details in error message (#3799)
Contributors
- Bob Callaway
- Hayden B
- Slavek Kabrda
- Zach Steindler
- Zsolt Horvath
Full Changelog: https://github.com/sigstore/cosign/compare/v2.3.0...v2.4.0