—
GO-2022-0758
Improper verification of signature attestations in github.com/sigstore/cosign
Quick fix
GO-2022-0758 — github.com/sigstore/cosign: upgrade to the fixed version with the command below.
go get github.com/sigstore/cosign@v1.10.1Details
Improper verification of signature attestations in github.com/sigstore/cosign
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/sigstore/cosign
Introduced in:
0Fixed in: 1.10.1Fix
go get github.com/sigstore/cosign@v1.10.1