Debian Patches

Status for gitsign/0.16.1-2

Patch Description Author Forwarded Bugs Origin Last update
0001-Don-t-hard-fail-on-slow-systems.-624.patch Don't hard fail on slow systems. #624.
Patch tweak by @wlynch
Simon Josefsson <simon@josefsson.org> yes 2025-04-10
0001-Restore-keyless-attest-build-against-cosign-3.1.patch Restore keyless attest build against cosign 3.1
cosign 3.1 unexported signcommon.GetSignerVerifier, which the attest command
used to build the keyless signer, so gitsign no longer builds (#826).

Rebuild the same thing inline: generate an ephemeral key, get a Fulcio cert
via the still-exported fulcio.NewSigner, and wrap them in a
signcommon.SignerVerifier (also still exported) so the attestor keeps working
unchanged. Bumps cosign to v3.1.1.

Fixes #826
Arpit Jain <arpitjain099@gmail.com> yes 2026-06-17

All known versions for source package 'gitsign'

Links