fix!: use Fulcio certificate instead of public key and upgrade Sigstore Cosign from v2 to v3#1726

Merged

jakobmoellerdev merged 19 commits intoopen-component-model:mainfrom

morri-son:feat/upgrade-sigstore-v3

Jan 21, 2026

Commits on Jan 12, 2026

change verify to digest both v2 and v2 signature
morrison-sap
committed

Commits on Jan 19, 2026

add testing and doc changes
morrison-sap
committed
add comments about offline testing capability
morrison-sap
committed
resolve conflicts
morrison-sap
committed
docs: regenerate CLI docs and update sources for Sigstore. Register sigstore-v3 algorithm, update attribute description and sign command docs to reflect Fulcio-certificate Rekor bundle; ensure gene…
morrison-sap
committed
docs: regenerate CLI docs from source after sigstore-v3 handler changes
morrison-sap
committed
sigstore: register sigstore-v3; update attribute description and tests; regenerate docs to align
morrison-sap
committed

Commits on Jan 21, 2026