Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cosign-image for openSUSE:Factory checked in at 2025-12-23 13:44:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cosign-image (Old) and /work/SRC/openSUSE:Factory/.cosign-image.new.1928 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cosign-image" Tue Dec 23 13:44:35 2025 rev:18 rq:1324245 version:unknown Changes: -------- --- /work/SRC/openSUSE:Factory/cosign-image/cosign-image.changes 2025-12-17 17:40:02.944930824 +0100 +++ /work/SRC/openSUSE:Factory/.cosign-image.new.1928/cosign-image.changes 2025-12-23 13:45:19.759964877 +0100 @@ -1,0 +2,5 @@ +Mon Dec 22 15:42:33 UTC 2025 - SUSE Update Bot <[email protected]> + +- update for 3.0 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ Dockerfile ++++++ --- /var/tmp/diff_new_pack.LrOhjU/_old 2025-12-23 13:45:20.479994765 +0100 +++ /var/tmp/diff_new_pack.LrOhjU/_new 2025-12-23 13:45:20.483994931 +0100 @@ -17,8 +17,8 @@ #!BuildTag: opensuse/cosign:%%cosign_version%%-%RELEASE% #!BuildTag: opensuse/cosign:%%cosign_version%% -#!BuildTag: opensuse/cosign:2.6 -#!BuildTag: opensuse/cosign:2 +#!BuildTag: opensuse/cosign:3.0 +#!BuildTag: opensuse/cosign:3 #!BuildTag: opensuse/cosign:latest FROM opensuse/bci/bci-micro:latest AS target @@ -31,7 +31,7 @@ # sanity check that the version from the tag is equal to the version of cosign that we expect RUN set -euo pipefail; \ [ "$(rpm --root /target -q --qf '%{version}' cosign | \ - cut -d '.' -f -2)" = "2.6" ] + cut -d '.' -f -2)" = "3.0" ] # cleanup logs and temporary files RUN set -euo pipefail; zypper -n --installroot /target clean -a; \ ++++++ README.md ++++++ --- /var/tmp/diff_new_pack.LrOhjU/_old 2025-12-23 13:45:20.527996757 +0100 +++ /var/tmp/diff_new_pack.LrOhjU/_new 2025-12-23 13:45:20.531996923 +0100 @@ -22,7 +22,7 @@ `--certificate-oidc-issuer` flags: ```ShellSession -$ podman run registry.opensuse.org/opensuse/cosign:2.6 \ +$ podman run registry.opensuse.org/opensuse/cosign:3.0 \ verify $IMAGE \ --certificate-identity=$IDENTITY \ --certificate-oidc-issuer=$OIDC_ISSUER @@ -42,7 +42,7 @@ signed payload includes the digest of the container image, which indicates that these "detached" signatures apply to the correct image. ```ShellSession -$ podman run registry.opensuse.org/opensuse/cosign:2.6 verify --key cosign.pub $IMAGE_URI:1h +$ podman run registry.opensuse.org/opensuse/cosign:3.0 verify --key cosign.pub $IMAGE_URI:1h The following checks were performed on these signatures: - The cosign claims were validated - The signatures were verified against the specified public key
