cosign
cosign copied to clipboard
Make bundle input required for signing and attestation
Description
For signing and attestation commands, a bundle file path input is not required. However, a lack of this input causes a signing or attestation event that does not produce a bundle and therefore cannot be verified. Requiring a bundle input would enforce that all signing and attestation events produce verification material.