All issues

Search results

No adapter from a cosign bundle into KeylessSignature — wsc can export its own signatures but cannot ingest the ecosystem's

Status: Open.

#260 In pulseengine/sigil;

· avrabe opened on Aug 21, 2026

·  

v0.12.0

The embedded Sigstore trusted root has one Rekor log; the live one has two — verification breaks when cosign moves to Rekor v2

Status: Open.

#259 In pulseengine/sigil;

· avrabe opened on Aug 21, 2026

·  

v0.12.0

The airgapped e2e test cannot fail — it never calls verify_signature

Status: Open.

#258 In pulseengine/sigil;

· avrabe opened on Aug 21, 2026

·  

v0.12.0

wsc: keyless signing over an arbitrary digest, not only a WASM Module

Status: Open.

#256 In pulseengine/sigil;

· avrabe opened on Aug 21, 2026

·  

v0.12.0

CLI baseline: --version reports wsc-cli, but the binary is wsc

tool-frictionFriction hit while using the tool for real workFriction hit while using the tool for real work

Status: Open.

#255 In pulseengine/sigil;

· avrabe opened on Aug 18, 2026

witness gate: ^src/ scoping counts inlined std read_exact decisions

Status: Open.

#241 In pulseengine/sigil;

· avrabe opened on Aug 11, 2026

SigstoreBundle::verify(&trust_bundle, artifact_digest) — in-library offline bundle verify

Status: Open.

#231 In pulseengine/sigil;

· avrabe opened on Aug 8, 2026

·  

v0.12.0

SLSA provenance attest intermittently fails on ghcr token (DENIED on pull scope)

Status: Open.

#224 In pulseengine/sigil;

· avrabe opened on Aug 7, 2026

Certificate-checked 64-bit varint overflow rejection via ordeal (#88)

Status: Open.

#190 In pulseengine/sigil;

· avrabe opened on Jul 11, 2026

Embedded: no_std on-target verifier + signed WCMC/size manifest for the kiln on-board interpreter trust chain

Status: Open.

#187 In pulseengine/sigil;

· avrabe opened on Jul 11, 2026

license: add LICENSE + retain wasmsign2 (MIT) attribution — derivative-work compliance gap

Status: Open.

#186 In pulseengine/sigil;

· avrabe opened on Jul 10, 2026

[cert-pin-watchdog] Sigstore certificate pin drift detected

Status: Open.

#185 In pulseengine/sigil;

· github-actions opened on Jul 8, 2026