Verify Docker Image Signature
All LiteLLM Docker images are signed with cosign. To verify the integrity of an image before deploying:
cosign verify \
--key https://raw.githubusercontent.com/BerriAI/litellm/v1.82.3.dev.6/cosign.pub \
ghcr.io/berriai/litellm:v1.82.3.dev.6Expected output:
The following checks were performed on each of these signatures:
- The cosign claims were validated
- The signatures were verified against the specified public key
Full Changelog: v1.82.3.dev.5...v1.82.3.dev.6