Skip to content

Commit e5d9742

Browse files
authored
docs: Add signature verification note (#812)
1 parent 7fcc2fb commit e5d9742

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

modules/ROOT/partials/release-notes/release-25.11.adoc

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -150,6 +150,13 @@ See the xref:opensearch:index.adoc[OpenSearch documentation] page for more detai
150150
37 CVEs were fixed in the Stackable product images.
151151
This includes 2 critical and 18 high-severity CVEs.
152152

153+
====== Image signature verification
154+
155+
*Breaking:* With the release of SDP 25.11, we now sign container images and Helm charts using cosign 3 and its new bundle format, benefiting from the OCI Referrers API.
156+
This means to verify signatures of this and future releases, users need to use cosign 3.
157+
Verification using cosign 2 is also possible if you're using version 2.6.0 or above and provide the additional flag --new-bundle-format, but cosign 3 is recommended for full compatibility and functionality.
158+
For guidance on how to verify image signatures, please consult the Stackable xref:guides:enabling-verification-of-image-signatures.adoc[signature verification documentation].
159+
153160
[#observability-25_11_0]
154161
====== Observability
155162

0 commit comments

Comments
 (0)