Skip to content

Commit b2f93a7

Browse files
authored
Update content/en/cosign/verifying/verify.md
Signed-off-by: ltagliaferri <[email protected]>
1 parent 3bca565 commit b2f93a7

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

content/en/cosign/verifying/verify.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -254,7 +254,7 @@ export SIGSTORE_ROOT_FILE="/home/jdoe/myrootCA.pem"
254254

255255
## New bundle format
256256

257-
Cosign has recently added support for the [Sigstore bundle format]({{< relref "about/bundle" >}}), which is a new format for storing and sharing software signatures, attestations, and other metadata needed to verify an artifact. This carries a number of advantages over the previous bundle format: it supports offline verification, and includes additional information (like signed timestamps and attestations) in a single file. Additionally, language client support for the new format is widely available for Go, Python, Javascript, and Java.
257+
Cosign has recently added support for the [Sigstore bundle format]({{< relref "about/bundle" >}}), which is a new format for storing and sharing software signatures, attestations, and other metadata needed to verify an artifact. This carries a number of advantages over the previous bundle format: it supports offline verification, and includes additional information (like signed timestamps and attestations) in a single file. Additionally, language client support for the new format is widely available for Go, Python, JavaScript, and Java.
258258

259259
The new format is disabled by default in Cosign v2.x. As of Cosign v2.4.x, the new bundle format is implemented for `sign-blob`, `verify-blob`, `attest-blob`, and `verify-blob-attestation` commands. As of Cosign v2.5.x, the new bundle format is implemented for `attest` and `verify-attestation`. Support for `sign` and `verify` is coming soon.
260260

0 commit comments

Comments
 (0)