Commit 9d0ac0b
committed
fix: CVE-2025-66506 - upgrade cosign to 2.6.2
Signed-off-by: Shubham Bhardwaj <shubbhar@redhat.com>1 parent ebcd9c2 commit 9d0ac0b
8,177 files changed
Lines changed: 1103583 additions & 420234 deletions
File tree
- vendor
- cel.dev/expr
- cloud.google.com/go
- auth
- credentials
- idtoken
- impersonate
- internal
- externalaccountuser
- externalaccount
- gdch
- impersonate
- stsexchange
- grpctransport
- httptransport
- internal
- compute
- credsfile
- jwt
- retry
- transport
- cert
- headers
- trustboundary
- oauth2adapt
- compute
- internal
- metadata
- firestore
- apiv1
- firestorepb
- internal
- iam
- apiv1/iampb
- internal
- trace
- kms
- apiv1
- kmspb
- internal
- longrunning
- autogen
- longrunningpb
- monitoring
- apiv3/v2
- monitoringpb
- internal
- storage
- experimental
- internal
- apiv2
- storagepb
- filippo.io/edwards25519
- field
- github.com
- AliyunContainerService/ack-ram-tool/pkg/credentials
- alibabacloudsdkgo/helper
- provider
- AzureAD/microsoft-authentication-library-for-go/apps
- confidential
- errors
- internal
- base
- internal/storage
- storage
- exported
- json
- local
- oauth
- ops
- accesstokens
- authority
- internal/comm
- version
- managedidentity
- public
- Azure
- azure-sdk-for-go/sdk
- azcore
- arm
- internal/resource
- policy
- runtime
- internal
- exported
- log
- pollers
- async
- body
- fake
- loc
- op
- log
- policy
- runtime
- streaming
- azidentity
- internal
- internal
- errorinfo
- exported
- log
- temporal
- security/keyvault
- azkeys
- internal
- go-ansiterm
- winterm
- GoogleCloudPlatform/opentelemetry-operations-go
- detectors/gcp
- exporter/metric
- internal/resourcemapping
- Microsoft/go-winio
- internal
- fs
- socket
- stringbuffer
- ProtonMail/go-crypto
- bitcurves
- brainpool
- eax
- internal/byteutil
- ocb
- openpgp
- aes/keywrap
- armor
- ecdh
- ecdsa
- eddsa
- elgamal
- errors
- internal
- algorithm
- ecc
- encoding
- packet
- s2k
- aliyun/credentials-go/credentials
- antlr4-go/antlr/v4
- antlr/antlr4/runtime/Go/antlr/v4
- awslabs/amazon-ecr-credential-helper/ecr-login
- api
- cache
- config
- aws
- aws-sdk-go-v2
- aws
- middleware
- private/metrics
- protocol/query
- ratelimit
- retry
- signer
- internal/v4
- v4
- transport/http
- config
- credentials
- ec2rolecreds
- endpointcreds
- internal/client
- logincreds
- processcreds
- ssocreds
- stscreds
- feature/ec2/imds
- internal
- auth/smithy
- configsources
- context
- endpoints
- awsrulesfn
- v2
- ini
- middleware
- service
- ecrpublic
- internal/endpoints
- types
- ecr
- internal/endpoints
- types
- internal
- accept-encoding
- presigned-url
- kms
- internal/endpoints
- types
- signin
- internal/endpoints
- types
- ssooidc
- internal/endpoints
- types
- sso
- internal/endpoints
- types
- sts
- internal/endpoints
- types
- aws-sdk-go
- aws
- auth/bearer
- awserr
- awsutil
- client
- metadata
- corehandlers
- credentials
- crr
- csm
- defaults
- ec2metadata
- endpoints
- request
- session
- signer/v4
- private/protocol/query/queryutil
- service
- dynamodb
- dynamodbattribute
- expression
- ssooidc
- sso
- sts
- smithy-go
- encoding/httpbinding
- endpoints
- private/rulesfn
- metrics
- middleware
- tracing
- transport/http
- bmatcuk/doublestar/v4
- buildkite
- agent/v3
- api
- internal/agenthttp
- logger
- version
- go-pipeline
- internal/env
- ordered
- warning
- interpolate
- roko
- cenkalti/backoff
- v3
- v4
- v5
- cespare/xxhash/v2
- cloudflare/circl
- dh
- x25519
- x448
- ecc/goldilocks
- internal
- conv
- sha3
- math
- fp25519
- fp448
- mlsbset
- sign
- ed25519
- ed448
- cncf/xds/go
- udpa
- annotations
- type/v1
- xds
- annotations/v3
- core/v3
- data/orca/v3
- service/orca/v3
- type
- matcher/v3
- v3
- containerd/stargz-snapshotter/estargz
- coreos/go-oidc/v3/oidc
- digitorus/timestamp
- docker
- cli
- cli/config
- configfile
- credentials
- memorystore
- types
- docker-credential-helpers
- client
- credentials
- docker
- pkg/homedir
- dustin/go-humanize
- emicklei/go-restful/v3
- envoyproxy
- go-control-plane/envoy
- admin/v3
- annotations
- config
- accesslog/v3
- bootstrap/v3
- cluster/v3
- common/matcher/v3
- core/v3
- endpoint/v3
- listener/v3
- metrics/v3
- overload/v3
- rbac/v3
- route/v3
- tap/v3
- trace/v3
- data/accesslog/v3
- extensions
- clusters/aggregate/v3
- filters
- common/fault/v3
- http
- fault/v3
- rbac/v3
- router/v3
- network/http_connection_manager/v3
- load_balancing_policies
- client_side_weighted_round_robin/v3
- common/v3
- least_request/v3
- pick_first/v3
- ring_hash/v3
- wrr_locality/v3
- rbac/audit_loggers/stream/v3
- transport_sockets/tls/v3
- service
- discovery/v3
- load_stats/v3
- status/v3
- type
- http/v3
- matcher/v3
- metadata/v3
- tracing/v3
- v3
- protoc-gen-validate
- validate
- fatih/color
- fsnotify/fsnotify
- internal
- fxamacker/cbor/v2
- go-chi/chi
- middleware
- v5
- middleware
- go-jose/go-jose
- v3
- json
- jwt
- v4
- cipher
- json
- jwt
- go-logr/logr
- funcr
- slogr
- go-openapi
- analysis
- internal
- debug
- flatten
- normalize
- operations
- replace
- schutils
- sortref
- errors
- jsonpointer
- jsonreference
- internal
- loads
- runtime
- client
- logger
- middleware
- denco
- header
- untyped
- security
- yamlpc
- spec
- schemas
- v2
- strfmt
- swag
- cmdutils
- conv
- fileutils
- jsonname
- jsonutils
- adapters
- ifaces
- stdlib/json
- loading
- mangling
- netutils
- stringutils
- typeutils
- yamlutils
- validate
- go-viper/mapstructure/v2
- internal/errors
- gofrs/flock
- golang-jwt/jwt
- v4
- v5
- golang/protobuf
- jsonpb
- proto
- ptypes
- duration
- googleapis/gax-go/v2
- apierror
- callctx
- internallog
- grpclog
- internal
- internal
- iterator
- google
- cel-go
- cel
- templates
- checker
- decls
- common
- ast
- containers
- debug
- decls
- env
- runes
- stdlib
- types
- pb
- traits
- interpreter
- parser
- gen
- certificate-transparency-go
- client
- configpb
- ctutil
- jsonclient
- loglist3
- x509util
- x509
- pkix
- gnostic-models
- compiler
- extensions
- jsonschema
- openapiv2
- openapiv3
- go-cmp/cmp
- cmpopts
- internal/function
- go-containerregistry
- internal/redact
- pkg
- authn
- name
- registry
- v1
- google
- layout
- mutate
- remote
- transport
- tarball
- go-github
- v55
- github
- v73
- github
- gofuzz
- s2a-go
- internal
- proto
- common_go_proto
- s2a_context_go_proto
- s2a_go_proto
- v2
- common_go_proto
- s2a_context_go_proto
- s2a_go_proto
- record
- tokenmanager
- v2
- certverifier/testdata
- remotesigner/testdata
- testdata
- tlsconfigstore
- testdata
- stream
- testdata
- uuid
- wire
- grpc-ecosystem/grpc-gateway/v2
- internal/httprule
- protoc-gen-openapiv2/options
- runtime
- utilities
- hashicorp
- go-retryablehttp
- go-secure-stdlib/parseutil
- go-sockaddr
- go-version
- hcl
- hcl
- parser
- printer
- vault/api
- cliconfig
- tokenhelper
- imdario/mergo
- in-toto/attestation
- go/v1
- jellydator/ttlcache/v3
- jmespath/go-jmespath
- josharian/intern
- klauspost/compress
- flate
- fse
- gzip
- huff0
- internal
- le
- snapref
- zstd
- internal/xxhash
- letsencrypt/boulder
- core
- proto
- goodkey
- identifier
- probs
- revocation
- strictyaml
- magiconair/properties
- mailru/easyjson
- buffer
- jlexer
- jwriter
- mattn
- go-colorable
- go-runewidth
- matttproud/golang_protobuf_extensions/v2
- pbutil
- mitchellh/mapstructure
- moby/term
- windows
- modern-go/reflect2
- mozillazg/docker-credential-acr-helper/pkg
- acr
- credhelper
- natefinch/atomic
- oleiade/reflections
- olekukonko
- errors
- ll
- lh
- lx
- tablewriter
- pkg
- twwarp
- twwidth
- renderer
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
Large diffs are not rendered by default.
Large diffs are not rendered by default.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
File renamed without changes.
0 commit comments