Skip to content

Actions: sigstore/cosign

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql-analysis.yml
393 workflow runs
393 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

update golang builder to use go1.25.7 (#4687) CodeQL #3558: Commit b7fd27d pushed by Hayden-IO
4m 2s main
main
4m 2s
update golangci-lint to v2.8.x (#4688) CodeQL #3557: Commit 8f1cd80 pushed by cpanato
2m 31s main
main
2m 31s
Fix typo in CLI help (#4701) CodeQL #3556: Commit e949e21 pushed by cpanato
2m 45s main
main
2m 45s
Support DSSE signing conformance test (#4685) CodeQL #3555: Commit 39f05cd pushed by Hayden-IO
2m 53s main
main
2m 53s
chore(deps): bump the actions group across 1 directory with 8 updates… CodeQL #3554: Commit d920318 pushed by cpanato
2m 55s main
main
2m 55s
Deprecate rekor-entry-type flag (#4691) CodeQL #3553: Commit 31a61b2 pushed by Hayden-IO
2m 56s main
main
2m 56s
Deprecate cosign triangulate (#4676) CodeQL #3552: Commit 954b945 pushed by steiza
2m 32s main
main
2m 32s
Deprecate cosign copy (#4681) CodeQL #3551: Commit 9effd8a pushed by steiza
2m 46s main
main
2m 46s
Enforce TSA requirement for Rekor v2, Fuclio signing (#4683) CodeQL #3550: Commit e64dc88 pushed by Hayden-IO
2m 22s main
main
2m 22s
chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668) CodeQL #3549: Commit 661243c pushed by Hayden-IO
4m 4s main
main
4m 4s
chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673) CodeQL #3548: Commit 3b3ab24 pushed by cpanato
3m 47s main
main
3m 47s
Automatically require signed timestamp with Rekor v2 entries (#4666) CodeQL #3547: Commit 71291be pushed by Hayden-IO
3m 4s main
main
3m 4s
Fix syntax issue in conformance test, update nightly (#4664) CodeQL #3546: Commit 2b94507 pushed by Hayden-IO
2m 39s main
main
2m 39s
Add mTLS support for TSA client connections when signing with a signi… CodeQL #3545: Commit 934afc4 pushed by Hayden-IO
4m 16s main
main
4m 16s
fix: avoid panic on malformed tlog entry body (#4652) CodeQL #3544: Commit 7351cac pushed by Hayden-IO
2m 41s main
main
2m 41s
Verify validity of chain rather than just certificate (#4663) CodeQL #3543: Commit 3c9a736 pushed by Hayden-IO
4m 11s main
main
4m 11s
Allow --local-image with --new-bundle-format for v2 and v3 signatures… CodeQL #3542: Commit c5717cb pushed by steiza
4m 17s main
main
4m 17s
chore(deps): bump the gomod group across 1 directory with 3 updates (… CodeQL #3541: Commit c9852b7 pushed by Hayden-IO
3m 2s main
main
3m 2s
Bump sigstore/sigstore to resolve GHSA (#4660) CodeQL #3540: Commit 806d06c pushed by Hayden-IO
3m 11s main
main
3m 11s
Gracefully fail if bundle payload body is not a string (#4648) CodeQL #3539: Commit 98663a2 pushed by Hayden-IO
5m 2s main
main
5m 2s
fix: avoid panic on malformed replace payload (#4653) CodeQL #3538: Commit c836f7a pushed by Hayden-IO
2m 49s main
main
2m 49s
chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659) CodeQL #3537: Commit a4034bc pushed by Hayden-IO
3m 3s main
main
3m 3s
fix: avoid panic on malformed attestation payload (#4651) CodeQL #3536: Commit 47643e0 pushed by Hayden-IO
4m 25s main
main
4m 25s
fix: avoid panic on malformed tlog entries (#4649) CodeQL #3535: Commit 4229f6d pushed by Hayden-IO
4m 29s main
main
4m 29s
Update conformance to latest CodeQL #3534: Commit 03be625 pushed by cmurphy
3m 1s main
main
3m 1s