Changelog
- ecae448 INS-3143: Fix CVE-2026-111943 for goldilocks (#900)
- 12ae952 Managed by Terraform
- fa8f5cc Managed by Terraform
- 85a468f Managed by Terraform
You can verify the signatures of both the checksums.txt file and the published docker images using cosign.
cosign verify-blob checksums.txt --bundle=checksums.txt.sigstore.json --key https://artifacts.fairwinds.com/cosign-p256.pubcosign verify us-docker.pkg.dev/fairwinds-ops/oss/goldilocks:v4.16.3 --key https://artifacts.fairwinds.com/cosign-p256.pub