Commit eca9dd1
committed
fix: CVE-2025-66506 - upgrade cosign to 2.6.2
Signed-off-by: Shubham Bhardwaj <shubbhar@redhat.com>1 parent 6c3448b commit eca9dd1
8,177 files changed
Lines changed: 1103582 additions & 420233 deletions
File tree
- vendor
- cel.dev/expr
- cloud.google.com/go
- auth
- credentials
- idtoken
- impersonate
- internal
- externalaccountuser
- externalaccount
- gdch
- impersonate
- stsexchange
- grpctransport
- httptransport
- internal
- compute
- credsfile
- jwt
- retry
- transport
- cert
- headers
- trustboundary
- oauth2adapt
- compute
- internal
- metadata
- firestore
- apiv1
- firestorepb
- internal
- iam
- apiv1/iampb
- internal
- trace
- kms
- apiv1
- kmspb
- internal
- longrunning
- autogen
- longrunningpb
- monitoring
- apiv3/v2
- monitoringpb
- internal
- storage
- experimental
- internal
- apiv2
- storagepb
- filippo.io/edwards25519
- field
- github.com
- AliyunContainerService/ack-ram-tool/pkg/credentials
- alibabacloudsdkgo/helper
- provider
- AzureAD/microsoft-authentication-library-for-go/apps
- confidential
- errors
- internal
- base
- internal/storage
- storage
- exported
- json
- local
- oauth
- ops
- accesstokens
- authority
- internal/comm
- version
- managedidentity
- public
- Azure
- azure-sdk-for-go/sdk
- azcore
- arm
- internal/resource
- policy
- runtime
- internal
- exported
- log
- pollers
- async
- body
- fake
- loc
- op
- log
- policy
- runtime
- streaming
- azidentity
- internal
- internal
- errorinfo
- exported
- log
- temporal
- security/keyvault
- azkeys
- internal
- go-ansiterm
- winterm
- GoogleCloudPlatform/opentelemetry-operations-go
- detectors/gcp
- exporter/metric
- internal/resourcemapping
- Microsoft/go-winio
- internal
- fs
- socket
- stringbuffer
- ProtonMail/go-crypto
- bitcurves
- brainpool
- eax
- internal/byteutil
- ocb
- openpgp
- aes/keywrap
- armor
- ecdh
- ecdsa
- eddsa
- elgamal
- errors
- internal
- algorithm
- ecc
- encoding
- packet
- s2k
- aliyun/credentials-go/credentials
- antlr4-go/antlr/v4
- antlr/antlr4/runtime/Go/antlr/v4
- awslabs/amazon-ecr-credential-helper/ecr-login
- api
- cache
- config
- aws
- aws-sdk-go-v2
- aws
- middleware
- private/metrics
- protocol/query
- ratelimit
- retry
- signer
- internal/v4
- v4
- transport/http
- config
- credentials
- ec2rolecreds
- endpointcreds
- internal/client
- logincreds
- processcreds
- ssocreds
- stscreds
- feature/ec2/imds
- internal
- auth/smithy
- configsources
- context
- endpoints
- awsrulesfn
- v2
- ini
- middleware
- service
- ecrpublic
- internal/endpoints
- types
- ecr
- internal/endpoints
- types
- internal
- accept-encoding
- presigned-url
- kms
- internal/endpoints
- types
- signin
- internal/endpoints
- types
- ssooidc
- internal/endpoints
- types
- sso
- internal/endpoints
- types
- sts
- internal/endpoints
- types
- aws-sdk-go
- aws
- auth/bearer
- awserr
- awsutil
- client
- metadata
- corehandlers
- credentials
- crr
- csm
- defaults
- ec2metadata
- endpoints
- request
- session
- signer/v4
- private/protocol/query/queryutil
- service
- dynamodb
- dynamodbattribute
- expression
- ssooidc
- sso
- sts
- smithy-go
- encoding/httpbinding
- endpoints
- private/rulesfn
- metrics
- middleware
- tracing
- transport/http
- bmatcuk/doublestar/v4
- buildkite
- agent/v3
- api
- internal/agenthttp
- logger
- version
- go-pipeline
- internal/env
- ordered
- warning
- interpolate
- roko
- cenkalti/backoff
- v3
- v4
- v5
- cespare/xxhash/v2
- cloudflare/circl
- dh
- x25519
- x448
- ecc/goldilocks
- internal
- conv
- sha3
- math
- fp25519
- fp448
- mlsbset
- sign
- ed25519
- ed448
- cncf/xds/go
- udpa
- annotations
- type/v1
- xds
- annotations/v3
- core/v3
- data/orca/v3
- service/orca/v3
- type
- matcher/v3
- v3
- containerd/stargz-snapshotter/estargz
- coreos/go-oidc/v3/oidc
- digitorus/timestamp
- docker
- cli
- cli/config
- configfile
- credentials
- memorystore
- types
- docker-credential-helpers
- client
- credentials
- docker
- pkg/homedir
- dustin/go-humanize
- emicklei/go-restful/v3
- envoyproxy
- go-control-plane/envoy
- admin/v3
- annotations
- config
- accesslog/v3
- bootstrap/v3
- cluster/v3
- common/matcher/v3
- core/v3
- endpoint/v3
- listener/v3
- metrics/v3
- overload/v3
- rbac/v3
- route/v3
- tap/v3
- trace/v3
- data/accesslog/v3
- extensions
- clusters/aggregate/v3
- filters
- common/fault/v3
- http
- fault/v3
- rbac/v3
- router/v3
- network/http_connection_manager/v3
- load_balancing_policies
- client_side_weighted_round_robin/v3
- common/v3
- least_request/v3
- pick_first/v3
- ring_hash/v3
- wrr_locality/v3
- rbac/audit_loggers/stream/v3
- transport_sockets/tls/v3
- service
- discovery/v3
- load_stats/v3
- status/v3
- type
- http/v3
- matcher/v3
- metadata/v3
- tracing/v3
- v3
- protoc-gen-validate
- validate
- fatih/color
- fsnotify/fsnotify
- internal
- fxamacker/cbor/v2
- go-chi/chi
- middleware
- v5
- middleware
- go-jose/go-jose
- v3
- json
- jwt
- v4
- cipher
- json
- jwt
- go-logr/logr
- funcr
- slogr
- go-openapi
- analysis
- internal
- debug
- flatten
- normalize
- operations
- replace
- schutils
- sortref
- errors
- jsonpointer
- jsonreference
- internal
- loads
- runtime
- client
- logger
- middleware
- denco
- header
- untyped
- security
- yamlpc
- spec
- schemas
- v2
- strfmt
- swag
- cmdutils
- conv
- fileutils
- jsonname
- jsonutils
- adapters
- ifaces
- stdlib/json
- loading
- mangling
- netutils
- stringutils
- typeutils
- yamlutils
- validate
- go-viper/mapstructure/v2
- internal/errors
- gofrs/flock
- golang-jwt/jwt
- v4
- v5
- golang/protobuf
- jsonpb
- proto
- ptypes
- duration
- googleapis/gax-go/v2
- apierror
- callctx
- internallog
- grpclog
- internal
- internal
- iterator
- google
- cel-go
- cel
- templates
- checker
- decls
- common
- ast
- containers
- debug
- decls
- env
- runes
- stdlib
- types
- pb
- traits
- interpreter
- parser
- gen
- certificate-transparency-go
- client
- configpb
- ctutil
- jsonclient
- loglist3
- x509util
- x509
- pkix
- gnostic-models
- compiler
- extensions
- jsonschema
- openapiv2
- openapiv3
- go-cmp/cmp
- cmpopts
- internal/function
- go-containerregistry
- internal/redact
- pkg
- authn
- name
- registry
- v1
- google
- layout
- mutate
- remote
- transport
- tarball
- go-github
- v55
- github
- v73
- github
- gofuzz
- s2a-go
- internal
- proto
- common_go_proto
- s2a_context_go_proto
- s2a_go_proto
- v2
- common_go_proto
- s2a_context_go_proto
- s2a_go_proto
- record
- tokenmanager
- v2
- certverifier/testdata
- remotesigner/testdata
- testdata
- tlsconfigstore
- testdata
- stream
- testdata
- uuid
- wire
- grpc-ecosystem/grpc-gateway/v2
- internal/httprule
- protoc-gen-openapiv2/options
- runtime
- utilities
- hashicorp
- go-retryablehttp
- go-secure-stdlib/parseutil
- go-sockaddr
- go-version
- hcl
- hcl
- parser
- printer
- vault/api
- cliconfig
- tokenhelper
- imdario/mergo
- in-toto/attestation
- go/v1
- jellydator/ttlcache/v3
- jmespath/go-jmespath
- josharian/intern
- klauspost/compress
- flate
- fse
- gzip
- huff0
- internal
- le
- snapref
- zstd
- internal/xxhash
- letsencrypt/boulder
- core
- proto
- goodkey
- identifier
- probs
- revocation
- strictyaml
- magiconair/properties
- mailru/easyjson
- buffer
- jlexer
- jwriter
- mattn
- go-colorable
- go-runewidth
- matttproud/golang_protobuf_extensions/v2
- pbutil
- mitchellh/mapstructure
- moby/term
- windows
- modern-go/reflect2
- mozillazg/docker-credential-acr-helper/pkg
- acr
- credhelper
- natefinch/atomic
- oleiade/reflections
- olekukonko
- errors
- ll
- lh
- lx
- tablewriter
- pkg
- twwarp
- twwidth
- renderer
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
Large diffs are not rendered by default.
Large diffs are not rendered by default.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
File renamed without changes.
0 commit comments