Verify Docker Image Signature
All LiteLLM Docker images are signed with cosign. Every release is signed with the same key introduced in commit 0112e53.
Verify using the pinned commit hash (recommended):
A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key:
cosign verify \
--key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub \
ghcr.io/berriai/litellm:v1.106.0-rc.1Verify using the release tag (convenience):
Tags are protected in this repository and resolve to the same key. This option is easier to read but relies on tag protection rules:
cosign verify \
--key https://raw.githubusercontent.com/BerriAI/litellm/v1.106.0-rc.1/cosign.pub \
ghcr.io/berriai/litellm:v1.106.0-rc.1Expected output:
The following checks were performed on each of these signatures:
- The cosign claims were validated
- The signatures were verified against the specified public key
What's Changed
- fix(mcp): never forward the caller's LiteLLM key to MCP servers by @joshua-berri in #45401
- ci: run every build_and_test job in every CircleCI pipeline (#43152) by @yuneng-berri in #45651
- feat(decisions): backport Microsoft-Decision-1 and the decision models Admin UI to rc/1.106.0 (#45639, #45673, #45654, #45717) by @mateo-berri in #45735
- feat(ui): backport the System One request form to rc/1.106.0 (#45721) by @mateo-berri in #45739
- feat(guardrails): backport the logging_only scope split to rc/1.106.0 (#45709) by @yucheng-berri in #45782
- fix(ui): backport modal backdrop fix to rc/1.106.0 by @yuneng-berri in #45877
- feat(guardrails): backport the decision model guardrail to rc/1.106.0 (#45663) by @yucheng-berri in #45888
- fix(credentials): backport credential edit fixes to rc/1.106.0 by @yuneng-berri in #45890
- fix(mcp): backport request-local guardrail bearers to RC 106 by @joshua-berri in #45901
- feat(decisions): backport the rest of the decisions and System One launch to rc/1.106.0 by @mateo-berri in #45891
- feat(ui): backport the Home page dashboard root to rc/1.106.0 by @devin-ai-integration[bot] in #45911
- feat(ui): backport decision auto-router setup to 1.106 by @joshua-berri in #45916
- fix(home): serve the bundled whats_new.json by default on rc/1.106.0 by @devin-ai-integration[bot] in #45922
- feat(ui): backport the form-first Decisions playground restyle to rc/1.106.0 by @devin-ai-integration[bot] in #45929
- chore: rebuild Admin UI bundle for rc/1.106.0 by @devin-ai-integration[bot] in #45930
Full Changelog: v1.106.0-dev.3...v1.106.0-rc.1