cosign icon indicating copy to clipboard operation
cosign copied to clipboard

Make bundle input required for signing and attestation

Open aaronlew02 opened this issue 1 month ago • 0 comments

Description

For signing and attestation commands, a bundle file path input is not required. However, a lack of this input causes a signing or attestation event that does not produce a bundle and therefore cannot be verified. Requiring a bundle input would enforce that all signing and attestation events produce verification material.

aaronlew02 avatar Nov 19 '25 20:11 aaronlew02