https://advisories.gitlab.com/golang/github.com/sigstore/gitsign/CVE-2023-47122/
Gitsign's Rekor public keys fetched from upstream API instead of local TUF client. | GitLab...
CVE-2023-47122 Gitsign's Rekor public keys fetched from upstream API instead of local TUF client.: Gitsign is software for keyless Git signing using Sigstore....