Skip to content

chore: upgrade cosign toolchain to v3.0.6#893

Open
suhalvemu wants to merge 1 commit intobazel-contrib:mainfrom
suhalvemu:upgrade-cosign-v3.0.6
Open

chore: upgrade cosign toolchain to v3.0.6#893
suhalvemu wants to merge 1 commit intobazel-contrib:mainfrom
suhalvemu:upgrade-cosign-v3.0.6

Conversation

@suhalvemu
Copy link
Copy Markdown

@suhalvemu suhalvemu commented Apr 27, 2026

Summary

  • Adds cosign v3.0.6 as the first (default) entry in COSIGN_VERSIONS
  • SRI integrity hashes sourced from the official cosign_checksums.txt for all 7 supported platforms: darwin-amd64, darwin-arm64, linux-amd64, linux-arm, linux-arm64, linux-ppc64le, linux-s390x
  • Previous versions remain available for users pinning to an older release

Test plan

  • bazel build //cosign/... passes
  • bazel run @oci_cosign_darwin_arm64//:cosign -- version reports v3.0.6
  • Hash verified by Bazel's integrity check on download

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant