—
GO-2022-0998
Improper blob verification in github.com/sigstore/cosign
Quick fix
GO-2022-0998 — github.com/sigstore/cosign: upgrade to the fixed version with the command below.
go get github.com/sigstore/cosign@v1.12.0Details
Improper blob verification in github.com/sigstore/cosign
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/sigstore/cosign
Introduced in:
0Fixed in: 1.12.0Fix
go get github.com/sigstore/cosign@v1.12.0