Merge pull request #39080 from saschagrunert/cosign-version

Mentioned required cosign version for the `--certificate` flag
pull/39345/head
Kubernetes Prow Robot 2023-02-07 22:15:00 -08:00 committed by GitHub
commit 4e4c238ebf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions

View File

@ -47,6 +47,9 @@ Then verify the blob by using `cosign`:
cosign verify-blob "$BINARY" --signature "$BINARY".sig --certificate "$BINARY".cert
```
cosign v1.9.0 is required to be able to use the `--certificate` flag. Please use
`--cert` for older versions of cosign.
{{< note >}}
To learn more about keyless signing, please refer to [Keyless
Signatures](https://github.com/sigstore/cosign/blob/main/KEYLESS.md#keyless-signatures).