All issues

Search results

SigstoreTrustRoot::new gives callers no way to supply a configured reqwest client for the TUF fetch

Status: Open.

#626 In sigstore/sigstore-rs;

· michael-herwig opened on Sep 15, 2026

Migrate away from cached crate into moka

Status: Open.

#621 In sigstore/sigstore-rs;

· viccuad opened on Aug 27, 2026

Security audit workflow has been failing since 2026-07-15

Status: Open.

#614 In sigstore/sigstore-rs;

· samuraixwandering opened on Aug 5, 2026

DSSE bundle verification rejects valid cosign attest-blob v0.3 bundles (envelopeHash re-serialization mismatch)

Status: Open.

#608 In sigstore/sigstore-rs;

· coreyleavitt opened on Jul 29, 2026

DSSE bundle verification rejects attestations with multiple subjects

bugSomething isn't workingSomething isn't working

Status: Open.

#596 In sigstore/sigstore-rs;

· adalinesimonian opened on Jul 4, 2026

Support arbitrary in-toto attestation predicate types in Sigstore Bundle verification

enhancementNew feature or requestNew feature or request

Status: Open.

#588 In sigstore/sigstore-rs;

· ryan-surname-p opened on Jun 22, 2026

RUSTSEC-2026-0173: proc-macro-error2 is unmaintained

Status: Open.

#581 In sigstore/sigstore-rs;

· github-actions opened on Jun 8, 2026

Expose SigningContext::staging() (or re-export Keyring) for downstream e2e testing

Status: Open.

#562 In sigstore/sigstore-rs;

· sweengineeringlabs opened on Apr 26, 2026

Feature discussion: Support Rekor-less repos (such as GitHub Sigstore) using TSA-based verification

enhancementNew feature or requestNew feature or request

Status: Open.

#539 In sigstore/sigstore-rs;

· procr1337 opened on Dec 21, 2025

RUSTSEC-2025-0134: rustls-pemfile is unmaintained

Status: Open.

#535 In sigstore/sigstore-rs;

· github-actions opened on Dec 6, 2025

Support cosign verification cosign3 signed images

enhancementNew feature or requestNew feature or request

Status: Open.

#533 In sigstore/sigstore-rs;

· Xynnn007 opened on Dec 3, 2025

RUSTSEC-2025-0111: tokio-tar parses PAX extended headers incorrectly, allows file smuggling

Status: Open.

#509 In sigstore/sigstore-rs;

· github-actions opened on Oct 26, 2025