Anitha Natarajan 26261f0541 Allow attestation download to handle both bundle types (#4996) (#5017) ...

* Allow attestation download to handle both bundle types.

As suggested on https://github.com/sigstore/cosign/issues/4573



* Do not error out if no old attestations are found to download



* Update e2e test to actually check download attestation output



---------


(cherry picked from commit c0edaac063)

Signed-off-by: Zach Steindler <steiza@github.com>
Co-authored-by: Zach Steindler <steiza@github.com>

2026-07-17 08:12:46 -04:00

..

blob

Add support for verifying root checksum in cosign initialize (#3953)

2025-01-07 07:44:07 -08:00

cosign

Allow attestation download to handle both bundle types (#4996) (#5017)

2026-07-17 08:12:46 -04:00

oci

fix: include artifactType in OCI 1.1 signature referrer manifest (cherry-pick PR-4997 to release-2.6) (#5002)

2026-07-16 09:27:57 -07:00

policy

sort properly Go imports (#4071)

2025-02-19 08:49:57 -08:00

providers

More linting coverage (#4213)

2025-05-30 10:26:07 -07:00

signature

Remove SHA256 assumption in sign-blob/verify-blob (#4050)

2025-09-02 15:00:46 -07:00

types

Have cosign sign support bundle format (#4316)

2025-08-07 14:41:10 -04:00