Skip to content

Remove cosign triangulate - #4675

Closed
steiza wants to merge 1 commit into
mainfrom
remove-triangulate
Closed

steiza wants to merge 1 commit into
mainfrom
remove-triangulate

Conversation

@steiza

@steiza steiza commented Jan 30, 2026

Copy link
Copy Markdown
Member

Summary

For #4553 (also making progress on #4470).

Instead of adding protobuf bundle support for cosign triangulate, users should use cosign tree instead to find SBOMs, signatures, and other OCI objects related to their container image.

Release Note

  • Removed cosign triangulate; users should use cosign tree instead to find OCI objects (including SBOMs and signatures) related to a container image

Documentation

Signed-off-by: Zach Steindler <steiza@github.com>
@Hayden-IO

Copy link
Copy Markdown
Contributor

Can we have a deprecation warning with instructions on what to do instead rather than removal, and then remove in a v4 release?

steiza added a commit to steiza/sigstore-docs that referenced this pull request Jan 30, 2026
For sigstore/cosign#4675

Signed-off-by: Zach Steindler <steiza@github.com>
@steiza

steiza commented Jan 31, 2026

Copy link
Copy Markdown
Member Author

Gah, sorry, I got a little gung-ho; see #4676 instead.

@steiza steiza closed this Jan 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants