Skip to content

Conversation

@cmurphy
Copy link
Contributor

@cmurphy cmurphy commented Oct 16, 2025

Ensure COSIGN_REPOSITORY environment variable is respected both for the legacy attachment format and the new bundle format.

Fixes #4464

Summary

Release Note

Documentation

@cmurphy
Copy link
Contributor Author

cmurphy commented Oct 16, 2025

Working on a test

@codecov
Copy link

codecov bot commented Oct 16, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 35.36%. Comparing base (2ef6022) to head (9a9fb69).
⚠️ Report is 560 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #4473      +/-   ##
==========================================
- Coverage   40.10%   35.36%   -4.74%     
==========================================
  Files         155      220      +65     
  Lines       10044    15160    +5116     
==========================================
+ Hits         4028     5362    +1334     
- Misses       5530     9110    +3580     
- Partials      486      688     +202     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@cmurphy cmurphy marked this pull request as ready for review October 17, 2025 22:08
@cmurphy cmurphy requested a review from a team as a code owner October 17, 2025 22:08
Ensure COSIGN_REPOSITORY environment variable is respected both for the
legacy attachment format and the new bundle format.

Signed-off-by: Colleen Murphy <[email protected]>
@bobcallaway bobcallaway merged commit 5ae3d57 into sigstore:main Oct 18, 2025
29 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Cosign v3 silently ignores pushing signatures to a separate repository via the COSIGN_REPOSITORY envvar

2 participants