Repository Issue Activity (beta)

#5110 Air-gapped verification of signed container image is failing with no signatures associated error

#5084 Update golang.org/x/crypto to 0.55 - CVE-2026-56854

#4554 No files written to disk for cosign sign with flags --output-signature and --output-payload

#2632 bug: x509 verification broken

#4533 Add staging flag to test signing against public-good staging environment

#4552 Add annotations with a signature don't work with cosign 3.0.2

#4555 Add annotations with a signature don't work with cosign 3.0.2

#4551 Custom metadata not configured properly for target tsa certs, skipping target

#4549 cosign sign-blob and verify-blob just local with pkcs11

#4488 Cosign attest doesn't work in Cosign 3.0.2

#4513 Signing is not working with self-signed certificate

#4121 [Question] pubkey mismatch for gcr.io vs ghcr.io

#3846 Add OCI image annotations to gcr.io/projectsigstore/cosign images

#4537 Register OCI annotations for the docker image

#4387 Signing manifests of manifests

#4503 cosign does not seem to honor --tlog-upload=false

#4466 Image sign with flag --allow-http-registry=true fails

#4506 Cosign cli doesn't pass in a cancellable context

#4504 Annotations are not being displayed while verification

#3271 Allow configurable signing algorithms

#4505 Verifying signature of release binaries (*.sig files)

#4465 cosign sign record-creation-timestamp=true not taken into account for new bundle format

#4496 Verify multiple local bundle attestations

#4493 Add support for multiple PIV tokens

#4283 Allow disabling Transparancy Upload via environment variable