Skip to content

Commit 1d0f100

Browse files
authored
Add docs on using cosign bundle create (#334)
Signed-off-by: Zach Steindler <[email protected]>
1 parent 93024b3 commit 1d0f100

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

content/en/cosign/verifying/verify.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -248,6 +248,12 @@ You can override the public good instance CA using the environment variable `SIG
248248
export SIGSTORE_ROOT_FILE="/home/jdoe/myrootCA.pem"
249249
```
250250

251+
## New bundle format coming soon
252+
253+
There's a new bundle format using [bundle protobuf-specs](https://github.com/sigstore/protobuf-specs/blob/main/protos/sigstore_bundle.proto) that has a number of advantages over the previous bundle format: it supports offline verification, and includes additional information (like signed timestamps and attestations) in a single file.
254+
255+
You can take existing signed material and make a new protobuf bundle with `cosign bundle create ...`.
256+
251257
## Experimental Features
252258

253259
### Verify a signature was added to the transparency log

0 commit comments

Comments
 (0)