shield Recommended update for cosign

SUSE-SLES-16.0-1362

This update for cosign fixes the following issues: - updated to version 3.1.2: * Deprecate --payload for sign and verify commands * docs: add OVHcloud KMS in available external plugins * Add insecure registry flag to ko publish in kind-verify-attestation workflow * Deprecate --output-attestation * Add bundle inspect command * Guard against empty certificate PEM in mutate.Signature * fix(download): Validate predicate type for new bundle format * Skip nil subject entries in IntotoSubjectClaimVerifier * Fix Makefile: fall back to "unknown" version info when built outside a git repo * fix(verify): skip identity validation for security keys * fix: include artifactType in OCI 1.1 signature referrer manifest * Allow attestation download to handle both bundle types * Fix panic in dockerfile verify on malformed FROM lines * fix(release): restore signing-step auth and fail on image signing errors * feat(signing-config): add --base-config flag to override services from base config * fix: pass NewBundleFormat to KeyOpts in sign command * fix: ignore build stage references in dockerfile verify * fix: allow '=' in annotation values * Remove unused policy evaluation code * Remove unused signing code * Remove unused OCI code * Remove unused ephemeral signer * feat: improve verify flag shell completions * docs: fix Short style and add Example fields to piv-tool subcommands * docs: add Example fields to env and bundle create commands * docs: fix Short style and add Example fields to pkcs11-tool subcommands

• Release Date
  Jul 28 2026
• References
• Type
  recommended
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server for SAP applications 16.0 x86_64

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.1.2-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 aarch64

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.1.2-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 ppc64le

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.1.2-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 s390x

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.1.2-160000.1.1 lock rpm

SUSE Linux Enterprise Server 16.0 x86_64

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.1.2-160000.1.1 lock rpm

SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le

• Packages
  cosign
  Container Signing, Verification and Storage in an OCI registry

  3.1.2-160000.1.1 lock rpm