📦 Cosign

Cosign versions prior to 2.6.2 and 3.0.4 have a vulnerability where crafted bundles can bypass verification checks, allowing malicious actors with compromised identities or signing keys to create vali...