Merge pull request #954 from docker/bot/docker-releases-json

Update `.github/docker-releases.json`
github: update .github/docker-releases.json
2026-01-27 15:40:44 +01:00 · 2026-01-27 00:38:15 +00:00 · 2026-01-26 09:18:50 +01:00 · 2026-01-26 09:18:24 +01:00 · 2026-01-26 09:18:06 +01:00 · 2026-01-25 16:33:02 +00:00
29 changed files with 1513 additions and 539 deletions
--- a/.github/buildx-releases.json
+++ b/.github/buildx-releases.json
@@ -1,61 +1,372 @@
 {
  "latest": {
-    "id": 263040986,
-    "tag_name": "v0.30.1",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.30.1",
+    "id": 278817585,
+    "tag_name": "v0.31.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.31.0",
    "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/checksums.txt"
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/checksums.txt"
+    ]
+  },
+  "v0.31.0": {
+    "id": 278817585,
+    "tag_name": "v0.31.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.31.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/checksums.txt"
+    ]
+  },
+  "edge": {
+    "id": 278817585,
+    "tag_name": "v0.31.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.31.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/buildx-v0.31.0.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0/checksums.txt"
+    ]
+  },
+  "v0.31.0-rc2": {
+    "id": 277556093,
+    "tag_name": "v0.31.0-rc2",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.31.0-rc2",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/buildx-v0.31.0-rc2.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc2/checksums.txt"
+    ]
+  },
+  "v0.31.0-rc1": {
+    "id": 276899858,
+    "tag_name": "v0.31.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.31.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/buildx-v0.31.0-rc1.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.31.0-rc1/checksums.txt"
    ]
  },
  "v0.30.1": {
@@ -176,65 +487,6 @@
      "https://github.com/docker/buildx/releases/download/v0.30.0/checksums.txt"
    ]
  },
-  "edge": {
-    "id": 263040986,
-    "tag_name": "v0.30.1",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.30.1",
-    "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/buildx-v0.30.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.30.1/checksums.txt"
-    ]
-  },
  "v0.30.0-rc2": {
    "id": 261580981,
    "tag_name": "v0.30.0-rc2",
--- a/.github/compose-releases.json
+++ b/.github/compose-releases.json
@@ -1,54 +1,106 @@
 {
  "latest": {
-    "id": 271392988,
-    "tag_name": "v5.0.1",
-    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.1",
+    "id": 278255932,
+    "tag_name": "v5.0.2",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.2",
    "assets": [
-      "https://github.com/docker/compose/releases/download/v5.0.1/checksums.txt",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.sbom.json"
+      "https://github.com/docker/compose/releases/download/v5.0.2/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.sbom.json"
+    ]
+  },
+  "v5.0.2": {
+    "id": 278255932,
+    "tag_name": "v5.0.2",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.2",
+    "assets": [
+      "https://github.com/docker/compose/releases/download/v5.0.2/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.sbom.json"
    ]
  },
  "v5.0.1": {
@@ -156,55 +208,55 @@
    ]
  },
  "edge": {
-    "id": 271392988,
-    "tag_name": "v5.0.1",
-    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.1",
+    "id": 278255932,
+    "tag_name": "v5.0.2",
+    "html_url": "https://github.com/docker/compose/releases/tag/v5.0.2",
    "assets": [
-      "https://github.com/docker/compose/releases/download/v5.0.1/checksums.txt",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-darwin-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-aarch64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv6.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-armv7.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-ppc64le.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-riscv64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-s390x.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-linux-x86_64.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-aarch64.sbom.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.exe.sha256",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.provenance.json",
-      "https://github.com/docker/compose/releases/download/v5.0.1/docker-compose-windows-x86_64.sbom.json"
+      "https://github.com/docker/compose/releases/download/v5.0.2/checksums.txt",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-darwin-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-aarch64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv6.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-armv7.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-ppc64le.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-riscv64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-s390x.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-linux-x86_64.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-aarch64.sbom.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.exe",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.exe.sha256",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.provenance.json",
+      "https://github.com/docker/compose/releases/download/v5.0.2/docker-compose-windows-x86_64.sbom.json"
    ]
  },
  "v5.0.0-rc.2": {
--- a/.github/cosign-releases.json
+++ b/.github/cosign-releases.json
@@ -1,92 +1,302 @@
 {
  "latest": {
-    "id": 268935494,
-    "tag_name": "v3.0.3",
-    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.3",
+    "id": 275625037,
+    "tag_name": "v3.0.4",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.4",
    "assets": [
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.aarch64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.aarch64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.armv7hl.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.armv7hl.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.ppc64le.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.ppc64le.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.riscv64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.riscv64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.s390x.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.s390x.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.x86_64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.x86_64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64_3.0.3_darwin_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64_3.0.3_darwin_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64_3.0.3_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64_3.0.3_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm_3.0.3_linux_arm.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64_3.0.3_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64_3.0.3_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le_3.0.3_linux_ppc64le.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64_3.0.3_linux_riscv64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x_3.0.3_linux_s390x.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe_3.0.3_windows_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_aarch64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_aarch64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_amd64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_amd64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_arm64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_arm64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armhf.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armhf.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armv7.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armv7.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64el.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64el.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64le.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64le.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_x86_64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_x86_64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_checksums.txt",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_checksums.txt.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/release-cosign.pub"
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64_3.0.4_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64_3.0.4_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm_3.0.4_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le_3.0.4_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64_3.0.4_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x_3.0.4_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe_3.0.4_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/release-cosign.pub"
+    ]
+  },
+  "v3.0.4": {
+    "id": 275625037,
+    "tag_name": "v3.0.4",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.4",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64_3.0.4_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64_3.0.4_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm_3.0.4_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le_3.0.4_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64_3.0.4_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x_3.0.4_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe_3.0.4_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/release-cosign.pub"
+    ]
+  },
+  "v2.6.2": {
+    "id": 275620649,
+    "tag_name": "v2.6.2",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v2.6.2",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.aarch64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.aarch64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.armv7hl.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.armv7hl.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.ppc64le.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.ppc64le.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.riscv64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.riscv64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.s390x.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.s390x.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.x86_64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-2.6.2-1.x86_64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-amd64_2.6.2_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-darwin-arm64_2.6.2_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-amd64_2.6.2_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm64_2.6.2_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-arm_2.6.2_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-amd64_2.6.2_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-pivkey-pkcs11key-arm64_2.6.2_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-ppc64le_2.6.2_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-riscv64_2.6.2_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-linux-s390x_2.6.2_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign-windows-amd64.exe_2.6.2_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_aarch64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_aarch64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_amd64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_amd64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_arm64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_arm64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armhf.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armhf.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armv7.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_armv7.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64el.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64el.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64le.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_ppc64le.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_riscv64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_s390x.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_x86_64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_2.6.2_x86_64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_checksums.txt-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/cosign_checksums.txt-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.2/release-cosign.pub"
    ]
  },
  "v3.0.3": {
@@ -3196,93 +3406,93 @@
    ]
  },
  "edge": {
-    "id": 268935494,
-    "tag_name": "v3.0.3",
-    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.3",
+    "id": 275625037,
+    "tag_name": "v3.0.4",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.4",
    "assets": [
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.aarch64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.aarch64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.armv7hl.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.armv7hl.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.ppc64le.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.ppc64le.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.riscv64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.riscv64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.s390x.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.s390x.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.x86_64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-3.0.3-1.x86_64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-amd64_3.0.3_darwin_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-darwin-arm64_3.0.3_darwin_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-amd64_3.0.3_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm64_3.0.3_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-arm_3.0.3_linux_arm.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-amd64_3.0.3_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-pivkey-pkcs11key-arm64_3.0.3_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-ppc64le_3.0.3_linux_ppc64le.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-riscv64_3.0.3_linux_riscv64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-linux-s390x_3.0.3_linux_s390x.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign-windows-amd64.exe_3.0.3_windows_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_aarch64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_aarch64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_amd64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_amd64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_arm64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_arm64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armhf.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armhf.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armv7.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_armv7.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64el.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64el.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64le.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_ppc64le.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_riscv64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_s390x.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_x86_64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_3.0.3_x86_64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_checksums.txt",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/cosign_checksums.txt.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.3/release-cosign.pub"
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-3.0.4-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-amd64_3.0.4_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-darwin-arm64_3.0.4_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-arm_3.0.4_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-amd64_3.0.4_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-pivkey-pkcs11key-arm64_3.0.4_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-ppc64le_3.0.4_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-riscv64_3.0.4_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-linux-s390x_3.0.4_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign-windows-amd64.exe_3.0.4_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_3.0.4_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.4/release-cosign.pub"
    ]
  },
  "v2.0.0-rc.3": {
--- a/.github/docker-releases.json
+++ b/.github/docker-releases.json
@@ -1,14 +1,38 @@
 {
  "latest": {
-    "id": 269884470,
-    "tag_name": "docker-v29.1.3",
-    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.3",
+    "id": 280041206,
+    "tag_name": "docker-v29.2.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.2.0",
+    "assets": []
+  },
+  "v29.2.0": {
+    "id": 280041206,
+    "tag_name": "docker-v29.2.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.2.0",
    "assets": []
  },
  "edge": {
-    "id": 271147963,
-    "tag_name": "docker-v29.2.0-rc.1",
-    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.2.0-rc.1",
+    "id": 280041206,
+    "tag_name": "docker-v29.2.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.2.0",
+    "assets": []
+  },
+  "v29.2.0-rc.2": {
+    "id": 277933908,
+    "tag_name": "docker-v29.2.0-rc.2",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.2.0-rc.2",
+    "assets": []
+  },
+  "v29.1.5": {
+    "id": 277389559,
+    "tag_name": "docker-v29.1.5",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.5",
+    "assets": []
+  },
+  "v29.1.4": {
+    "id": 275290406,
+    "tag_name": "docker-v29.1.4",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.1.4",
    "assets": []
  },
  "v29.2.0-rc.1": {
--- a/.github/workflows/buildx-lab-releases-json.yml
+++ b/.github/workflows/buildx-lab-releases-json.yml
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/buildx-lab-releases-json
--- a/.github/workflows/buildx-releases-json.yml
+++ b/.github/workflows/buildx-releases-json.yml
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/buildx-releases-json
--- a/.github/workflows/compose-lab-releases-json.yml
+++ b/.github/workflows/compose-lab-releases-json.yml
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/compose-lab-releases-json
--- a/.github/workflows/compose-releases-json.yml
+++ b/.github/workflows/compose-releases-json.yml
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/compose-releases-json
--- a/.github/workflows/cosign-releases-json.yml
+++ b/.github/workflows/cosign-releases-json.yml
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/cosign-releases-json
--- a/.github/workflows/docker-releases-json.yml
+++ b/.github/workflows/docker-releases-json.yml
@@ -48,7 +48,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/docker-releases-json
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,8 +1,8 @@
 name: publish

 permissions:
-  id-token: write  # required for OIDC
-  contents: read
+  id-token: write # required for OIDC
+  contents: write # required to create GitHub Release

 concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
--- a/.github/workflows/regclient-releases-json.yml
+++ b/.github/workflows/regclient-releases-json.yml
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/regclient-releases-json
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -15,8 +15,8 @@ on:

 env:
  NODE_VERSION: "20"
-  BUILDX_VERSION: "edge"
-  BUILDKIT_IMAGE: "moby/buildkit:v0.26.2"
+  BUILDX_VERSION: "v0.31.0"
+  BUILDKIT_IMAGE: "moby/buildkit:v0.27.0"

 jobs:
  test:
@@ -149,6 +149,7 @@ jobs:
    permissions:
      contents: read
      id-token: write # needed for signing with GitHub OIDC Token
+      packages: write # needed for pushing to GitHub Container Registry
    steps:
      -
        name: Checkout
--- a/.github/workflows/undock-releases-json.yml
+++ b/.github/workflows/undock-releases-json.yml
@@ -45,7 +45,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725  # v8.0.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
        with:
          base: main
          branch: bot/undock-releases-json
--- a/tests/.fixtures/imagetools-06.json
+++ b/tests/.fixtures/imagetools-06.json
@@ -0,0 +1,15 @@
+[
+  {
+    "mediaType":"application/vnd.oci.image.manifest.v1+json",
+    "digest":"sha256:2ba4ad6eae1efcafee73a971953093c7c32b6938f2f9fd4998c8bf4d0fbe76f2",
+    "size":1113,
+    "annotations":{
+      "vnd.docker.reference.digest":"sha256:dccc69dd895968c4f21aa9e43e715f25f0cedfce4b17f1014c88c307928e22fc",
+      "vnd.docker.reference.type":"attestation-manifest"
+    },
+    "platform":{
+      "architecture":"unknown",
+      "os":"unknown"
+    }
+  }
+]
--- a/tests/.fixtures/imagetools-07.json
+++ b/tests/.fixtures/imagetools-07.json
@@ -0,0 +1,15 @@
+[
+  {
+    "mediaType": "application/vnd.oci.image.manifest.v1+json",
+    "digest": "sha256:0709528fae1747ce17638ad2978ee7936b38a294136eaadaf692e415f64b1e03",
+    "size": 1113,
+    "annotations": {
+      "vnd.docker.reference.digest": "sha256:1b6bce668653f08e2d0f9f7c9b646675b2cbce94ce8abdf4eb0eabaef4353045",
+      "vnd.docker.reference.type": "attestation-manifest"
+    },
+    "platform": {
+      "architecture": "unknown",
+      "os": "unknown"
+    }
+  }
+]
--- a/tests/buildx/imagetools.test.itg.ts
+++ b/tests/buildx/imagetools.test.itg.ts
@@ -60,6 +60,16 @@ maybe('attestationDescriptors', () => {
    const expectedAttestations = <Array<Descriptor>>JSON.parse(fs.readFileSync(path.join(fixturesDir, 'imagetools-05.json'), {encoding: 'utf-8'}).trim());
    expect(attestations).toEqual(expectedAttestations);
  });
+  it('returns buildkit attestations descriptors for linux/amd64', async () => {
+    const attestations = await new ImageTools().attestationDescriptors('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'amd64'});
+    const expectedAttestations = <Array<Descriptor>>JSON.parse(fs.readFileSync(path.join(fixturesDir, 'imagetools-06.json'), {encoding: 'utf-8'}).trim());
+    expect(attestations).toEqual(expectedAttestations);
+  });
+  it('returns buildkit attestations descriptors for linux/arm/v7', async () => {
+    const attestations = await new ImageTools().attestationDescriptors('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'arm', variant: 'v7'});
+    const expectedAttestations = <Array<Descriptor>>JSON.parse(fs.readFileSync(path.join(fixturesDir, 'imagetools-07.json'), {encoding: 'utf-8'}).trim());
+    expect(attestations).toEqual(expectedAttestations);
+  });
 });

 maybe('attestationDigests', () => {
@@ -75,4 +85,12 @@ maybe('attestationDigests', () => {
      'sha256:d95ca72d4f2a6bc416d4b2f3003b2af9d5f4dea99acec6ad3ab0c2082000a98c'
    ]);
  });
+  it('returns buildkit attestations digests for linux/amd64', async () => {
+    const digests = await new ImageTools().attestationDigests('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'amd64'});
+    expect(digests).toEqual(['sha256:2ba4ad6eae1efcafee73a971953093c7c32b6938f2f9fd4998c8bf4d0fbe76f2']);
+  });
+  it('returns buildkit attestations digests for linux/arm/v7', async () => {
+    const digests = await new ImageTools().attestationDigests('moby/buildkit:latest@sha256:79cc6476ab1a3371c9afd8b44e7c55610057c43e18d9b39b68e2b0c2475cc1b6', {os: 'linux', architecture: 'arm', variant: 'v7'});
+    expect(digests).toEqual(['sha256:0709528fae1747ce17638ad2978ee7936b38a294136eaadaf692e415f64b1e03']);
+  });
 });
--- a/tests/oci/oci.test.ts
+++ b/tests/oci/oci.test.ts
@@ -14,14 +14,17 @@
 * limitations under the License.
 */

-import {afterEach, describe, expect, test} from '@jest/globals';
+import {afterEach, describe, expect, jest, test} from '@jest/globals';
 import fs from 'fs';
 import os from 'os';
 import path from 'path';
 import * as rimraf from 'rimraf';
+import osm = require('os');

 import {OCI} from '../../src/oci/oci';

+import {Platform} from '../../src/types/oci/descriptor';
+
 const fixturesDir = path.join(__dirname, '..', '.fixtures');
 const tmpDir = fs.mkdtempSync(path.join(process.env.TEMP || os.tmpdir(), 'oci-oci-'));

@@ -29,6 +32,25 @@ afterEach(function () {
  rimraf.sync(tmpDir);
 });

+describe('defaultPlatform', () => {
+  test.each([
+    ['win32', 'x64', {architecture: 'amd64', os: 'windows'}],
+    ['win32', 'arm64', {architecture: 'arm64', os: 'windows'}],
+    ['darwin', 'x64', {architecture: 'amd64', os: 'darwin'}],
+    ['darwin', 'arm64', {architecture: 'arm64', os: 'darwin'}],
+    ['linux', 'ia32', {architecture: '386', os: 'linux'}],
+    ['linux', 'x64', {architecture: 'amd64', os: 'linux'}],
+    ['linux', 'arm64', {architecture: 'arm64', os: 'linux'}],
+    ['linux', 'ppc64', {architecture: 'ppc64le', os: 'linux'}],
+    ['linux', 's390x', {architecture: 's390x', os: 'linux'}]
+  ])('default platform for %s/%s', async (os: string, arch: string, expected: Platform) => {
+    jest.spyOn(osm, 'platform').mockImplementation(() => os as NodeJS.Platform);
+    jest.spyOn(osm, 'arch').mockImplementation(() => arch);
+    const res = OCI.defaultPlatform();
+    expect(res).toEqual(expected);
+  });
+});
+
 describe('loadArchive', () => {
  // prettier-ignore
  test.each(fs.readdirSync(path.join(fixturesDir, 'oci-archive')).filter(file => {
--- a/tests/sigstore/sigstore-cosign-old.test.itg.ts
+++ b/tests/sigstore/sigstore-cosign-old.test.itg.ts
@@ -0,0 +1,93 @@
+/**
+ * Copyright 2026 actions-toolkit authors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {beforeAll, describe, expect, jest, it} from '@jest/globals';
+import * as path from 'path';
+
+import {Buildx} from '../../src/buildx/buildx';
+import {Build} from '../../src/buildx/build';
+import {Install as CosignInstall} from '../../src/cosign/install';
+import {Docker} from '../../src/docker/docker';
+import {Exec} from '../../src/exec';
+import {Sigstore} from '../../src/sigstore/sigstore';
+
+const fixturesDir = path.join(__dirname, '..', '.fixtures');
+
+const runTest = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu');
+
+const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? describe : describe.skip;
+
+// needs current GitHub repo info
+jest.unmock('@actions/github');
+
+beforeAll(async () => {
+  const cosignInstall = new CosignInstall();
+  const cosignBinPath = await cosignInstall.download({
+    version: 'v3.0.2'
+  });
+  await cosignInstall.install(cosignBinPath);
+}, 100000);
+
+maybeIdToken('signAttestationManifests', () => {
+  it('build, sign and verify', async () => {
+    const buildx = new Buildx();
+    const build = new Build({buildx: buildx});
+    const imageName = 'ghcr.io/docker/actions-toolkit/test';
+
+    await expect(
+      (async () => {
+        await Docker.getExecOutput(['login', '--password-stdin', '--username', process.env.GITHUB_REPOSITORY_OWNER || 'docker', 'ghcr.io'], {
+          input: Buffer.from(process.env.GITHUB_TOKEN || '')
+        });
+      })()
+    ).resolves.not.toThrow();
+
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          'build',
+          '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+          '--provenance=mode=max',
+          '--tag', `${imageName}:sigstore-itg`,
+          '--platform', 'linux/amd64,linux/arm64',
+          '--push',
+          '--metadata-file', build.getMetadataFilePath(),
+          fixturesDir
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args);
+      })()
+    ).resolves.not.toThrow();
+
+    const metadata = build.resolveMetadata();
+    expect(metadata).toBeDefined();
+    const buildDigest = build.resolveDigest(metadata);
+    expect(buildDigest).toBeDefined();
+
+    const sigstore = new Sigstore();
+    const signResults = await sigstore.signAttestationManifests({
+      imageNames: [imageName],
+      imageDigest: buildDigest!
+    });
+    expect(Object.keys(signResults).length).toEqual(2);
+
+    const verifyResults = await sigstore.verifySignedManifests(signResults, {
+      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
+    });
+    expect(Object.keys(verifyResults).length).toEqual(2);
+  }, 100000);
+});
--- a/tests/sigstore/sigstore.test.itg.ts
+++ b/tests/sigstore/sigstore.test.itg.ts
@@ -14,16 +14,24 @@
 * limitations under the License.
 */

-import {describe, expect, jest, it, beforeAll} from '@jest/globals';
+import {beforeAll, describe, expect, jest, it, test} from '@jest/globals';
 import fs from 'fs';
 import * as path from 'path';

+import {Buildx} from '../../src/buildx/buildx';
+import {Build} from '../../src/buildx/build';
 import {Install as CosignInstall} from '../../src/cosign/install';
+import {Docker} from '../../src/docker/docker';
+import {Exec} from '../../src/exec';
+import {OCI} from '../../src/oci/oci';
 import {Sigstore} from '../../src/sigstore/sigstore';

 const fixturesDir = path.join(__dirname, '..', '.fixtures');

-const maybe = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'true' && process.env.ACTIONS_ID_TOKEN_REQUEST_URL && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu') ? describe : describe.skip;
+const runTest = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu');
+
+const maybe = runTest ? describe : describe.skip;
+const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? describe : describe.skip;

 // needs current GitHub repo info
 jest.unmock('@actions/github');
@@ -31,12 +39,99 @@ jest.unmock('@actions/github');
 beforeAll(async () => {
  const cosignInstall = new CosignInstall();
  const cosignBinPath = await cosignInstall.download({
-    version: 'v3.0.2'
+    version: 'v3.0.4'
  });
  await cosignInstall.install(cosignBinPath);
 }, 100000);

-maybe('signProvenanceBlobs', () => {
+maybeIdToken('signAttestationManifests', () => {
+  it('build, sign and verify', async () => {
+    const buildx = new Buildx();
+    const build = new Build({buildx: buildx});
+    const imageName = 'ghcr.io/docker/actions-toolkit/test';
+
+    await expect(
+      (async () => {
+        await Docker.getExecOutput(['login', '--password-stdin', '--username', process.env.GITHUB_REPOSITORY_OWNER || 'docker', 'ghcr.io'], {
+          input: Buffer.from(process.env.GITHUB_TOKEN || '')
+        });
+      })()
+    ).resolves.not.toThrow();
+
+    await expect(
+      (async () => {
+        // prettier-ignore
+        const buildCmd = await buildx.getCommand([
+          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+          'build',
+          '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+          '--provenance=mode=max',
+          '--tag', `${imageName}:sigstore-itg`,
+          '--platform', 'linux/amd64,linux/arm64',
+          '--push',
+          '--metadata-file', build.getMetadataFilePath(),
+          fixturesDir
+        ]);
+        await Exec.exec(buildCmd.command, buildCmd.args);
+      })()
+    ).resolves.not.toThrow();
+
+    const metadata = build.resolveMetadata();
+    expect(metadata).toBeDefined();
+    const buildDigest = build.resolveDigest(metadata);
+    expect(buildDigest).toBeDefined();
+
+    const sigstore = new Sigstore();
+    const signResults = await sigstore.signAttestationManifests({
+      imageNames: [imageName],
+      imageDigest: buildDigest!
+    });
+    expect(Object.keys(signResults).length).toEqual(2);
+
+    const verifyResults = await sigstore.verifySignedManifests(signResults, {
+      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
+    });
+    expect(Object.keys(verifyResults).length).toEqual(2);
+  }, 100000);
+});
+
+maybe('verifyImageAttestations', () => {
+  test.each([
+    ['moby/buildkit:master@sha256:84014da3581b2ff2c14cb4f60029cf9caa272b79e58f2e89c651ea6966d7a505', `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`],
+    ['docker/dockerfile-upstream:master@sha256:3e8cd5ebf48acd1a1939649ad1c62ca44c029852b22493c16a9307b654334958', `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`]
+  ])(
+    'given %p',
+    async (image, certificateIdentityRegexp) => {
+      const sigstore = new Sigstore();
+      const verifyResults = await sigstore.verifyImageAttestations(image, {
+        certificateIdentityRegexp: certificateIdentityRegexp
+      });
+      expect(Object.keys(verifyResults).length).toBeGreaterThan(0);
+      for (const [attestationRef, res] of Object.entries(verifyResults)) {
+        expect(attestationRef).toBeDefined();
+        expect(res.cosignArgs).toBeDefined();
+        expect(res.signatureManifestDigest).toBeDefined();
+      }
+    },
+    60000
+  );
+
+  it('default platform', async () => {
+    const sigstore = new Sigstore();
+    const verifyResults = await sigstore.verifyImageAttestations('moby/buildkit:master@sha256:84014da3581b2ff2c14cb4f60029cf9caa272b79e58f2e89c651ea6966d7a505', {
+      certificateIdentityRegexp: `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`,
+      platform: OCI.defaultPlatform()
+    });
+    expect(Object.keys(verifyResults).length).toEqual(1);
+    for (const [attestationRef, res] of Object.entries(verifyResults)) {
+      expect(attestationRef).toBeDefined();
+      expect(res.cosignArgs).toBeDefined();
+      expect(res.signatureManifestDigest).toBeDefined();
+    }
+  });
+});
+
+maybeIdToken('signProvenanceBlobs', () => {
  it('single platform', async () => {
    const sigstore = new Sigstore();
    const results = await sigstore.signProvenanceBlobs({
@@ -68,7 +163,7 @@ maybe('signProvenanceBlobs', () => {
  });
 });

-maybe('verifySignedArtifacts', () => {
+maybeIdToken('verifySignedArtifacts', () => {
  it('sign and verify', async () => {
    const sigstore = new Sigstore();
    const signResults = await sigstore.signProvenanceBlobs({
@@ -76,12 +171,9 @@ maybe('verifySignedArtifacts', () => {
    });
    expect(Object.keys(signResults).length).toEqual(2);

-    const verifyResults = await sigstore.verifySignedArtifacts(
-      {
-        certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
-      },
-      signResults
-    );
+    const verifyResults = await sigstore.verifySignedArtifacts(signResults, {
+      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
+    });
    expect(Object.keys(verifyResults).length).toEqual(2);
    for (const [artifactPath, res] of Object.entries(verifyResults)) {
      expect(fs.existsSync(artifactPath)).toBe(true);
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -16,7 +16,7 @@

 ARG NODE_VERSION=20
 ARG DOCKER_VERSION=28.3
-ARG BUILDX_VERSION=0.30.1
+ARG BUILDX_VERSION=0.31.0
 ARG COMPOSE_VERSION=2.39.1
 ARG UNDOCK_VERSION=0.10.0
 ARG REGCTL_VERSION=v0.8.2
--- a/package.json
+++ b/package.json
@@ -45,14 +45,14 @@
    "registry": "https://registry.npmjs.org/"
  },
  "dependencies": {
-    "@actions/artifact": "^5.0.1",
-    "@actions/cache": "^5.0.1",
-    "@actions/core": "^2.0.1",
+    "@actions/artifact": "^5.0.2",
+    "@actions/cache": "^5.0.3",
+    "@actions/core": "^2.0.2",
    "@actions/exec": "^2.0.0",
-    "@actions/github": "^6.0.1",
-    "@actions/http-client": "^3.0.0",
+    "@actions/github": "^7.0.0",
+    "@actions/http-client": "^3.0.1",
    "@actions/io": "^2.0.0",
-    "@actions/tool-cache": "^2.0.2",
+    "@actions/tool-cache": "^3.0.0",
    "@azure/storage-blob": "^12.29.1",
    "@octokit/core": "^5.2.2",
    "@octokit/plugin-rest-endpoint-methods": "^10.4.1",
--- a/src/buildx/bake.ts
+++ b/src/buildx/bake.ts
@@ -105,13 +105,7 @@ export class Bake {
  public async getDefinition(cmdOpts: BakeCmdOpts, execOptions?: ExecOptions): Promise<BakeDefinition> {
    execOptions = execOptions || {ignoreReturnCode: true};
    execOptions.ignoreReturnCode = true;
-    if (cmdOpts.githubToken) {
-      execOptions.env = Object.assign({}, process.env, {
-        BUILDX_BAKE_GIT_AUTH_TOKEN: cmdOpts.githubToken
-      }) as {
-        [key: string]: string;
-      };
-    }
+    execOptions.env = Object.assign({}, process.env, execOptions.env || {}, cmdOpts.githubToken ? {BUILDX_BAKE_GIT_AUTH_TOKEN: cmdOpts.githubToken} : {});

    const args = ['bake'];

--- a/src/buildx/imagetools.ts
+++ b/src/buildx/imagetools.ts
@@ -19,7 +19,7 @@ import {Exec} from '../exec';

 import {Manifest as ImageToolsManifest} from '../types/buildx/imagetools';
 import {Image} from '../types/oci/config';
-import {Descriptor} from '../types/oci/descriptor';
+import {Descriptor, Platform} from '../types/oci/descriptor';
 import {Digest} from '../types/oci/digest';

 export interface ImageToolsOpts {
@@ -83,15 +83,39 @@ export class ImageTools {
    });
  }

-  public async attestationDescriptors(name: string): Promise<Array<Descriptor>> {
+  public async attestationDescriptors(name: string, platform?: Platform): Promise<Array<Descriptor>> {
    const manifest = await this.inspectManifest(name);
-    if (typeof manifest === 'object' && manifest !== null && 'manifests' in manifest && Array.isArray(manifest.manifests)) {
-      return manifest.manifests.filter(m => m.annotations && m.annotations['vnd.docker.reference.type'] === 'attestation-manifest');
+
+    if (typeof manifest !== 'object' || manifest === null || !('manifests' in manifest) || !Array.isArray(manifest.manifests)) {
+      throw new Error(`No descriptor found for ${name}`);
    }
-    throw new Error(`No attestation descriptors found for ${name}`);
+
+    const attestations = manifest.manifests.filter(m => m.annotations?.['vnd.docker.reference.type'] === 'attestation-manifest');
+    if (!platform) {
+      return attestations;
+    }
+
+    const manifestByDigest = new Map<string, Descriptor>();
+    for (const m of manifest.manifests) {
+      if (m.digest) {
+        manifestByDigest.set(m.digest, m);
+      }
+    }
+
+    return attestations.filter(attestation => {
+      const refDigest = attestation.annotations?.['vnd.docker.reference.digest'];
+      if (!refDigest) {
+        return false;
+      }
+      const referencedManifest = manifestByDigest.get(refDigest);
+      if (!referencedManifest) {
+        return false;
+      }
+      return referencedManifest.platform?.os === platform.os && referencedManifest.platform?.architecture === platform.architecture && (referencedManifest.platform?.variant ?? '') === (platform.variant ?? '');
+    });
  }

-  public async attestationDigests(name: string): Promise<Array<Digest>> {
-    return (await this.attestationDescriptors(name)).map(attestation => attestation.digest);
+  public async attestationDigests(name: string, platform?: Platform): Promise<Array<Digest>> {
+    return (await this.attestationDescriptors(name, platform)).map(attestation => attestation.digest);
  }
 }
--- a/src/cosign/cosign.ts
+++ b/src/cosign/cosign.ts
@@ -142,15 +142,12 @@ export class Cosign {
        bundlePayload = obj as SerializedBundle;
      }

-      if (bundlePayload && signatureManifestDigest) {
+      if (bundlePayload && (signatureManifestDigest || signatureManifestFallbackDigest)) {
+        errors = undefined; // clear errors if we have both payload and manifest digest
        break;
      }
    }

-    if (!errors && !bundlePayload) {
-      throw new Error(`Cannot find signature bundle from cosign command output: ${logs}`);
-    }
-
    return {
      bundle: bundlePayload,
      signatureManifestDigest: signatureManifestDigest || signatureManifestFallbackDigest,
--- a/src/oci/oci.ts
+++ b/src/oci/oci.ts
@@ -14,6 +14,7 @@
 * limitations under the License.
 */
 import fs from 'fs';
+import os from 'os';
 import gunzip from 'gunzip-maybe';
 import * as path from 'path';
 import {Readable} from 'stream';
@@ -21,12 +22,59 @@ import * as tar from 'tar-stream';

 import {Archive, LoadArchiveOpts} from '../types/oci/oci';
 import {Index} from '../types/oci';
+import {Platform} from '../types/oci/descriptor';
 import {Manifest} from '../types/oci/manifest';
 import {Image} from '../types/oci/config';
 import {IMAGE_BLOBS_DIR_V1, IMAGE_INDEX_FILE_V1, IMAGE_LAYOUT_FILE_V1, ImageLayout} from '../types/oci/layout';
 import {MEDIATYPE_IMAGE_INDEX_V1, MEDIATYPE_IMAGE_MANIFEST_V1} from '../types/oci/mediatype';

 export class OCI {
+  public static defaultPlatform(): Platform {
+    const nodePlatform = os.platform();
+    const nodeArch = os.arch();
+
+    const goosMap: Record<string, string> = {
+      win32: 'windows',
+      sunos: 'solaris'
+      // others (linux, darwin, freebsd, openbsd, netbsd, aix, android) match Go already
+    };
+
+    const goArchMap: Record<string, string> = {
+      x64: 'amd64',
+      ia32: '386',
+      arm: 'arm',
+      arm64: 'arm64',
+      ppc64: 'ppc64le',
+      s390x: 's390x',
+      riscv64: 'riscv64',
+      loong64: 'loong64',
+      mips: 'mips',
+      mipsel: 'mipsle',
+      mips64: 'mips64',
+      mips64el: 'mips64le'
+    };
+
+    const goos = goosMap[nodePlatform] ?? nodePlatform;
+    const goarch = goArchMap[nodeArch] ?? nodeArch;
+
+    let variant: string | undefined;
+    if (goarch === 'arm') {
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      const armVersionRaw = (process.config.variables as any)?.arm_version;
+      const armVersion = Number(armVersionRaw);
+      // Go only recognizes v5/v6/v7 for GOARM. Do not emit v8+ (that would be arm64).
+      if ([5, 6, 7].includes(armVersion)) {
+        variant = `v${armVersion}`;
+      }
+    }
+
+    return {
+      architecture: goarch,
+      os: goos,
+      variant: variant
+    };
+  }
+
  public static loadArchive(opts: LoadArchiveOpts): Promise<Archive> {
    return new Promise<Archive>((resolve, reject) => {
      const tarex: tar.Extract = tar.extract();
--- a/src/sigstore/sigstore.ts
+++ b/src/sigstore/sigstore.ts
@@ -22,6 +22,7 @@ import * as core from '@actions/core';
 import {bundleFromJSON, bundleToJSON} from '@sigstore/bundle';
 import {Artifact, Bundle, CIContextProvider, DSSEBundleBuilder, FulcioSigner, RekorWitness, TSAWitness, Witness} from '@sigstore/sign';

+import {Context} from '../context';
 import {Cosign} from '../cosign/cosign';
 import {Exec} from '../exec';
 import {GitHub} from '../github';
@@ -73,6 +74,40 @@ export class Sigstore {
      core.info(`Using Sigstore signing endpoint: ${endpoints.fulcioURL}`);
      const noTransparencyLog = Sigstore.noTransparencyLog(opts.noTransparencyLog);

+      const cosignExtraArgs: string[] = [];
+      if (await this.cosign.versionSatisfies('>=3.0.4')) {
+        await core.group(`Creating Sigstore protobuf signing config`, async () => {
+          const signingConfig = Context.tmpName({
+            template: 'signing-config-XXXXXX.json',
+            tmpdir: Context.tmpDir()
+          });
+          // prettier-ignore
+          const createConfigArgs = [
+            'signing-config',
+            'create',
+            '--with-default-services=true',
+            `--out=${signingConfig}`
+          ];
+          if (noTransparencyLog) {
+            createConfigArgs.push('--no-default-rekor=true');
+          }
+          await Exec.exec('cosign', createConfigArgs, {
+            env: Object.assign({}, process.env, {
+              COSIGN_EXPERIMENTAL: '1'
+            }) as {
+              [key: string]: string;
+            }
+          });
+          core.info(JSON.stringify(JSON.parse(fs.readFileSync(signingConfig, {encoding: 'utf-8'})), null, 2));
+          cosignExtraArgs.push(`--signing-config=${signingConfig}`);
+        });
+      } else {
+        cosignExtraArgs.push('--use-signing-config');
+        if (noTransparencyLog) {
+          cosignExtraArgs.push('--tlog-upload=false');
+        }
+      }
+
      for (const imageName of opts.imageNames) {
        const attestationDigests = await this.imageTools.attestationDigests(`${imageName}@${opts.imageDigest}`);
        for (const attestationDigest of attestationDigests) {
@@ -80,16 +115,13 @@ export class Sigstore {
          await core.group(`Signing attestation manifest ${attestationRef}`, async () => {
            // prettier-ignore
            const cosignArgs = [
-            'sign',
-            '--yes',
-            '--oidc-provider', 'github-actions',
-            '--registry-referrers-mode', 'oci-1-1',
-            '--new-bundle-format',
-            '--use-signing-config'
-          ];
-            if (noTransparencyLog) {
-              cosignArgs.push('--tlog-upload=false');
-            }
+              'sign',
+              '--yes',
+              '--oidc-provider', 'github-actions',
+              '--registry-referrers-mode', 'oci-1-1',
+              '--new-bundle-format',
+              ...cosignExtraArgs
+            ];
            core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
            const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
              ignoreReturnCode: true,
@@ -106,7 +138,8 @@ export class Sigstore {
                const errorMessages = signResult.errors.map(e => `- [${e.code}] ${e.message} : ${e.detail}`).join('\n');
                throw new Error(`Cosign sign command failed with errors:\n${errorMessages}`);
              } else {
-                throw new Error(`Cosign sign command failed with exit code ${execRes.exitCode}`);
+                // prettier-ignore
+                throw new Error(`Cosign sign command failed with: ${execRes.stderr.trim().split(/\r?\n/).filter(line => line.length > 0).pop() ?? 'unknown error'}`);
              }
            }
            const parsedBundle = Sigstore.parseBundle(bundleFromJSON(signResult.bundle));
@@ -127,69 +160,114 @@ export class Sigstore {
    return result;
  }

-  public async verifySignedManifests(opts: VerifySignedManifestsOpts, signed: Record<string, SignAttestationManifestsResult>): Promise<Record<string, VerifySignedManifestsResult>> {
+  public async verifySignedManifests(signedManifestsResult: Record<string, SignAttestationManifestsResult>, opts: VerifySignedManifestsOpts): Promise<Record<string, VerifySignedManifestsResult>> {
    const result: Record<string, VerifySignedManifestsResult> = {};
-    const retries = opts.retries ?? 15;
+    for (const [attestationRef, signedRes] of Object.entries(signedManifestsResult)) {
+      await core.group(`Verifying signature of ${attestationRef}`, async () => {
+        const verifyResult = await this.verifyImageAttestation(attestationRef, {
+          certificateIdentityRegexp: opts.certificateIdentityRegexp,
+          noTransparencyLog: opts.noTransparencyLog || !signedRes.tlogID,
+          retryOnManifestUnknown: opts.retryOnManifestUnknown
+        });
+        core.info(`Signature manifest verified: https://oci.dag.dev/?image=${signedRes.imageName}@${verifyResult.signatureManifestDigest}`);
+        result[attestationRef] = verifyResult;
+      });
+    }
+    return result;
+  }

+  public async verifyImageAttestations(image: string, opts: VerifySignedManifestsOpts): Promise<Record<string, VerifySignedManifestsResult>> {
+    const result: Record<string, VerifySignedManifestsResult> = {};
+
+    const attestationDigests = await this.imageTools.attestationDigests(image, opts.platform);
+    if (attestationDigests.length === 0) {
+      throw new Error(`No attestation manifests found for ${image}`);
+    }
+
+    const imageName = image.split(':', 1)[0];
+    for (const attestationDigest of attestationDigests) {
+      const attestationRef = `${imageName}@${attestationDigest}`;
+      const verifyResult = await this.verifyImageAttestation(attestationRef, opts);
+      core.info(`Signature manifest verified: https://oci.dag.dev/?image=${imageName}@${verifyResult.signatureManifestDigest}`);
+      result[attestationRef] = verifyResult;
+    }
+
+    return result;
+  }
+
+  public async verifyImageAttestation(attestationRef: string, opts: VerifySignedManifestsOpts): Promise<VerifySignedManifestsResult> {
    if (!(await this.cosign.isAvailable())) {
      throw new Error('Cosign is required to verify signed manifests');
    }

-    let lastError: Error | undefined;
-    for (const [attestationRef, signedRes] of Object.entries(signed)) {
-      await core.group(`Verifying signature of ${attestationRef}`, async () => {
-        // prettier-ignore
-        const cosignArgs = [
-          'verify',
-          '--experimental-oci11',
-          '--new-bundle-format',
-          '--certificate-oidc-issuer', 'https://token.actions.githubusercontent.com',
-          '--certificate-identity-regexp', opts.certificateIdentityRegexp
-        ];
-        if (!signedRes.tlogID) {
-          // skip tlog verification but still verify the signed timestamp
-          cosignArgs.push('--use-signed-timestamps', '--insecure-ignore-tlog');
-        }
-        core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
-        for (let attempt = 0; attempt < retries; attempt++) {
-          const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
-            ignoreReturnCode: true,
-            silent: true,
-            env: Object.assign({}, process.env, {
-              COSIGN_EXPERIMENTAL: '1'
-            }) as {[key: string]: string}
-          });
-          const verifyResult = Cosign.parseCommandOutput(execRes.stderr.trim());
-          if (execRes.exitCode === 0) {
-            result[attestationRef] = {
-              cosignArgs: cosignArgs,
-              signatureManifestDigest: verifyResult.signatureManifestDigest!
-            };
-            lastError = undefined;
-            core.info(`Signature manifest verified: https://oci.dag.dev/?image=${signedRes.imageName}@${verifyResult.signatureManifestDigest}`);
-            break;
-          } else {
-            if (verifyResult.errors && verifyResult.errors.length > 0) {
-              const errorMessages = verifyResult.errors.map(e => `- [${e.code}] ${e.message} : ${e.detail}`).join('\n');
-              lastError = new Error(`Cosign verify command failed with errors:\n${errorMessages}`);
-              if (verifyResult.errors.some(e => e.code === 'MANIFEST_UNKNOWN')) {
-                core.info(`Cosign verify command failed with MANIFEST_UNKNOWN, retrying attempt ${attempt + 1}/${retries}...\n${errorMessages}`);
-                await new Promise(res => setTimeout(res, Math.pow(2, attempt) * 100));
-              } else {
-                throw lastError;
-              }
-            } else {
-              throw new Error(`Cosign verify command failed: ${execRes.stderr}`);
-            }
-          }
-        }
-      });
-    }
-    if (lastError) {
-      throw lastError;
+    // prettier-ignore
+    const cosignArgs = [
+      'verify',
+      '--experimental-oci11',
+      '--new-bundle-format',
+      '--certificate-oidc-issuer', 'https://token.actions.githubusercontent.com',
+      '--certificate-identity-regexp', opts.certificateIdentityRegexp
+    ];
+    if (opts.noTransparencyLog) {
+      // skip tlog verification but still verify the signed timestamp
+      cosignArgs.push('--use-signed-timestamps', '--insecure-ignore-tlog');
    }

-    return result;
+    if (!opts.retryOnManifestUnknown) {
+      core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
+      const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
+        ignoreReturnCode: true,
+        silent: true,
+        env: Object.assign({}, process.env, {
+          COSIGN_EXPERIMENTAL: '1'
+        }) as {[key: string]: string}
+      });
+      if (execRes.exitCode !== 0) {
+        // prettier-ignore
+        throw new Error(`Cosign verify command failed with: ${execRes.stderr.trim().split(/\r?\n/).filter(line => line.length > 0).pop() ?? 'unknown error'}`);
+      }
+      const verifyResult = Cosign.parseCommandOutput(execRes.stderr.trim());
+      return {
+        cosignArgs: cosignArgs,
+        signatureManifestDigest: verifyResult.signatureManifestDigest!
+      };
+    }
+
+    const retries = 15;
+    let lastError: Error | undefined;
+    core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
+    for (let attempt = 0; attempt < retries; attempt++) {
+      const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
+        ignoreReturnCode: true,
+        silent: true,
+        env: Object.assign({}, process.env, {
+          COSIGN_EXPERIMENTAL: '1'
+        }) as {[key: string]: string}
+      });
+      const verifyResult = Cosign.parseCommandOutput(execRes.stderr.trim());
+      if (execRes.exitCode === 0) {
+        return {
+          cosignArgs: cosignArgs,
+          signatureManifestDigest: verifyResult.signatureManifestDigest!
+        };
+      } else {
+        if (verifyResult.errors && verifyResult.errors.length > 0) {
+          const errorMessages = verifyResult.errors.map(e => `- [${e.code}] ${e.message} : ${e.detail}`).join('\n');
+          lastError = new Error(`Cosign verify command failed with errors:\n${errorMessages}`);
+          if (verifyResult.errors.some(e => e.code === 'MANIFEST_UNKNOWN')) {
+            core.info(`Cosign verify command failed with MANIFEST_UNKNOWN, retrying attempt ${attempt + 1}/${retries}...\n${errorMessages}`);
+            await new Promise(res => setTimeout(res, Math.pow(2, attempt) * 100));
+          } else {
+            throw lastError;
+          }
+        } else {
+          // prettier-ignore
+          throw new Error(`Cosign verify command failed with: ${execRes.stderr.trim().split(/\r?\n/).filter(line => line.length > 0).pop() ?? 'unknown error'}`);
+        }
+      }
+    }
+
+    throw lastError;
  }

  public async signProvenanceBlobs(opts: SignProvenanceBlobsOpts): Promise<Record<string, SignProvenanceBlobsResult>> {
@@ -245,12 +323,12 @@ export class Sigstore {
    return result;
  }

-  public async verifySignedArtifacts(opts: VerifySignedArtifactsOpts, signed: Record<string, SignProvenanceBlobsResult>): Promise<Record<string, VerifySignedArtifactsResult>> {
+  public async verifySignedArtifacts(signedArtifactsResult: Record<string, SignProvenanceBlobsResult>, opts: VerifySignedArtifactsOpts): Promise<Record<string, VerifySignedArtifactsResult>> {
    const result: Record<string, VerifySignedArtifactsResult> = {};
    if (!(await this.cosign.isAvailable())) {
      throw new Error('Cosign is required to verify signed artifacts');
    }
-    for (const [provenancePath, signedRes] of Object.entries(signed)) {
+    for (const [provenancePath, signedRes] of Object.entries(signedArtifactsResult)) {
      const baseDir = path.dirname(provenancePath);
      await core.group(`Verifying signature bundle ${signedRes.bundlePath}`, async () => {
        for (const subject of signedRes.subjects) {
@@ -263,7 +341,7 @@ export class Sigstore {
            '--certificate-oidc-issuer', 'https://token.actions.githubusercontent.com',
            '--certificate-identity-regexp', opts.certificateIdentityRegexp
          ]
-          if (!signedRes.tlogID) {
+          if (opts.noTransparencyLog || !signedRes.tlogID) {
            // if there is no tlog entry, we skip tlog verification but still verify the signed timestamp
            cosignArgs.push('--use-signed-timestamps', '--insecure-ignore-tlog');
          }
--- a/src/types/sigstore/sigstore.ts
+++ b/src/types/sigstore/sigstore.ts
@@ -17,6 +17,7 @@
 import type {SerializedBundle} from '@sigstore/bundle';

 import {Subject} from '../intoto/intoto';
+import {Platform} from '../oci/descriptor';

 export const FULCIO_URL = 'https://fulcio.sigstore.dev';
 export const REKOR_URL = 'https://rekor.sigstore.dev';
@@ -47,7 +48,9 @@ export interface SignAttestationManifestsResult extends ParsedBundle {

 export interface VerifySignedManifestsOpts {
  certificateIdentityRegexp: string;
-  retries?: number;
+  platform?: Platform;
+  noTransparencyLog?: boolean;
+  retryOnManifestUnknown?: boolean;
 }

 export interface VerifySignedManifestsResult {
@@ -68,6 +71,7 @@ export interface SignProvenanceBlobsResult extends ParsedBundle {

 export interface VerifySignedArtifactsOpts {
  certificateIdentityRegexp: string;
+  noTransparencyLog?: boolean;
 }

 export interface VerifySignedArtifactsResult {
--- a/yarn.lock
+++ b/yarn.lock
@@ -12,13 +12,13 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/artifact@npm:^5.0.1":
-  version: 5.0.1
-  resolution: "@actions/artifact@npm:5.0.1"
+"@actions/artifact@npm:^5.0.2":
+  version: 5.0.2
+  resolution: "@actions/artifact@npm:5.0.2"
  dependencies:
    "@actions/core": "npm:^2.0.0"
    "@actions/github": "npm:^6.0.1"
-    "@actions/http-client": "npm:^3.0.0"
+    "@actions/http-client": "npm:^3.0.1"
    "@azure/storage-blob": "npm:^12.29.1"
    "@octokit/core": "npm:^5.2.1"
    "@octokit/plugin-request-log": "npm:^1.0.4"
@@ -29,29 +29,29 @@ __metadata:
    archiver: "npm:^7.0.1"
    jwt-decode: "npm:^3.1.2"
    unzip-stream: "npm:^0.3.1"
-  checksum: 10/621b374e203926452e357ad3d6fecad195c3f76c513b35761b779540fecde2689c2a7786edb4a04613e2afe502dcd0f7033c2f83ba960e0c255f9bdc564f6a20
+  checksum: 10/c712842af195b89a41ffc0445aa887ff671d95e8596598f82bedab2ee3b98f309b7c076bb5284187527aec667faf24ea2b909079d0fdc60d81f4e39947253343
  languageName: node
  linkType: hard

-"@actions/cache@npm:^5.0.1":
-  version: 5.0.1
-  resolution: "@actions/cache@npm:5.0.1"
+"@actions/cache@npm:^5.0.3":
+  version: 5.0.3
+  resolution: "@actions/cache@npm:5.0.3"
  dependencies:
    "@actions/core": "npm:^2.0.0"
    "@actions/exec": "npm:^2.0.0"
    "@actions/glob": "npm:^0.5.0"
-    "@actions/http-client": "npm:^3.0.0"
+    "@actions/http-client": "npm:^3.0.1"
    "@actions/io": "npm:^2.0.0"
    "@azure/abort-controller": "npm:^1.1.0"
    "@azure/core-rest-pipeline": "npm:^1.22.0"
    "@azure/storage-blob": "npm:^12.29.1"
    "@protobuf-ts/runtime-rpc": "npm:^2.11.1"
    semver: "npm:^6.3.1"
-  checksum: 10/5ee1ea2fcd9a4f7c5029beb122a9427ac51aa381074ed39f549124772ca00f0f5a7d2218102559d0b86037b5ab2c3d57dc2abb3651cb41959de39963b228c05a
+  checksum: 10/ac544a5ec75fc6147d7be7dc5cbee01d2b37f45a52be7cee31cd3471c6618b73d299a72580452f05911e2a049484cb2567209a8fbf5ac43705d86b59a0f8992a
  languageName: node
  linkType: hard

-"@actions/core@npm:^1.11.1, @actions/core@npm:^1.9.1":
+"@actions/core@npm:^1.9.1":
  version: 1.11.1
  resolution: "@actions/core@npm:1.11.1"
  dependencies:
@@ -61,7 +61,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/core@npm:^2.0.0, @actions/core@npm:^2.0.1":
+"@actions/core@npm:^2.0.0":
  version: 2.0.1
  resolution: "@actions/core@npm:2.0.1"
  dependencies:
@@ -71,7 +71,17 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/exec@npm:^1.0.0, @actions/exec@npm:^1.1.1":
+"@actions/core@npm:^2.0.1, @actions/core@npm:^2.0.2":
+  version: 2.0.2
+  resolution: "@actions/core@npm:2.0.2"
+  dependencies:
+    "@actions/exec": "npm:^2.0.0"
+    "@actions/http-client": "npm:^3.0.1"
+  checksum: 10/37547d3668c7df0b498b7f4596e190a9bf27d3d24f9c9b8b9718c6e79f3d550ef7bab9b2e517d54de163e36f0e1fdc51cc688753130caf3240cefb9ac37cd0b3
+  languageName: node
+  linkType: hard
+
+"@actions/exec@npm:^1.1.1":
  version: 1.1.1
  resolution: "@actions/exec@npm:1.1.1"
  dependencies:
@@ -104,6 +114,21 @@ __metadata:
  languageName: node
  linkType: hard

+"@actions/github@npm:^7.0.0":
+  version: 7.0.0
+  resolution: "@actions/github@npm:7.0.0"
+  dependencies:
+    "@actions/http-client": "npm:^3.0.1"
+    "@octokit/core": "npm:^5.0.1"
+    "@octokit/plugin-paginate-rest": "npm:^9.2.2"
+    "@octokit/plugin-rest-endpoint-methods": "npm:^10.4.0"
+    "@octokit/request": "npm:^8.4.1"
+    "@octokit/request-error": "npm:^5.1.1"
+    undici: "npm:^5.28.5"
+  checksum: 10/829c6402f927839714692f4e1f48359d306be0fd21ef3843feaf3db6541e5e7f85447b0bf794beeebad0b8f4a2644f7f92143cb4a8311541b29f5ddfc585cec1
+  languageName: node
+  linkType: hard
+
 "@actions/glob@npm:^0.5.0":
  version: 0.5.0
  resolution: "@actions/glob@npm:0.5.0"
@@ -143,7 +168,17 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/io@npm:^1.0.1, @actions/io@npm:^1.1.1":
+"@actions/http-client@npm:^3.0.1":
+  version: 3.0.1
+  resolution: "@actions/http-client@npm:3.0.1"
+  dependencies:
+    tunnel: "npm:^0.0.6"
+    undici: "npm:^5.28.5"
+  checksum: 10/aac5a88023a44bd0ea658a31308a73ab6a3da9dd36ded5d7311adf5e41f4379d37091aa9390de654d8d5a81435c02c2b5316ff3166066cd14eec5e66f1e0c3d0
+  languageName: node
+  linkType: hard
+
+"@actions/io@npm:^1.0.1":
  version: 1.1.3
  resolution: "@actions/io@npm:1.1.3"
  checksum: 10/4de44e8d428ba9f20049c844b37ecd486b589ed201f8cc8c5b550a9e4c72d1f594271ee2a7a6cfe8a42ebfb5dd527ef65016454656db391a353d41eab4f147e1
@@ -157,16 +192,16 @@ __metadata:
  languageName: node
  linkType: hard

-"@actions/tool-cache@npm:^2.0.2":
-  version: 2.0.2
-  resolution: "@actions/tool-cache@npm:2.0.2"
+"@actions/tool-cache@npm:^3.0.0":
+  version: 3.0.0
+  resolution: "@actions/tool-cache@npm:3.0.0"
  dependencies:
-    "@actions/core": "npm:^1.11.1"
-    "@actions/exec": "npm:^1.0.0"
-    "@actions/http-client": "npm:^2.0.1"
-    "@actions/io": "npm:^1.1.1"
+    "@actions/core": "npm:^2.0.1"
+    "@actions/exec": "npm:^2.0.0"
+    "@actions/http-client": "npm:^3.0.1"
+    "@actions/io": "npm:^2.0.0"
    semver: "npm:^6.1.0"
-  checksum: 10/87ec7fef40a2ad606c4a8b47833c1818ddb42e009bd0434b49dfc8c8bd4de6b67b4edafae599e76869d923a2f940f223866012b0179dcbb172c784d90da3c3a9
+  checksum: 10/9e881d280cc627f950745696c508e63570db04773e8ce027ce7824192a1c32a00417d029fd27ad8b5dd2bdfc81ebcc551c9204b87a757d3d5685aa2c9255e784
  languageName: node
  linkType: hard

@@ -1168,14 +1203,14 @@ __metadata:
  version: 0.0.0-use.local
  resolution: "@docker/actions-toolkit@workspace:."
  dependencies:
-    "@actions/artifact": "npm:^5.0.1"
-    "@actions/cache": "npm:^5.0.1"
-    "@actions/core": "npm:^2.0.1"
+    "@actions/artifact": "npm:^5.0.2"
+    "@actions/cache": "npm:^5.0.3"
+    "@actions/core": "npm:^2.0.2"
    "@actions/exec": "npm:^2.0.0"
-    "@actions/github": "npm:^6.0.1"
-    "@actions/http-client": "npm:^3.0.0"
+    "@actions/github": "npm:^7.0.0"
+    "@actions/http-client": "npm:^3.0.1"
    "@actions/io": "npm:^2.0.0"
-    "@actions/tool-cache": "npm:^2.0.2"
+    "@actions/tool-cache": "npm:^3.0.0"
    "@azure/storage-blob": "npm:^12.29.1"
    "@eslint/compat": "npm:^2.0.0"
    "@eslint/eslintrc": "npm:^3.3.3"
@@ -7022,9 +7057,9 @@ __metadata:
  linkType: hard

 "lodash@npm:^4.17.15":
-  version: 4.17.21
-  resolution: "lodash@npm:4.17.21"
-  checksum: 10/c08619c038846ea6ac754abd6dd29d2568aa705feb69339e836dfa8d8b09abbb2f859371e86863eda41848221f9af43714491467b5b0299122431e202bb0c532
+  version: 4.17.23
+  resolution: "lodash@npm:4.17.23"
+  checksum: 10/82504c88250f58da7a5a4289f57a4f759c44946c005dd232821c7688b5fcfbf4a6268f6a6cdde4b792c91edd2f3b5398c1d2a0998274432cff76def48735e233
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
CrazyMax	2359f15647	Merge pull request #954 from docker/bot/docker-releases-json Some checks failed publish / publish (push) Has been cancelled Details Update `.github/docker-releases.json`	2026-01-27 15:40:44 +01:00
crazy-max	5945e3ce92	github: update .github/docker-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-01-27 00:38:15 +00:00
CrazyMax	ab52a082b7	Merge pull request #949 from tonistiigi/update-buildkit-v0.27.0 Update buildkit v0.27.0 buildx v0.31.0	2026-01-26 09:18:50 +01:00
CrazyMax	20dcd0ab5d	Merge pull request #946 from docker/bot/compose-releases-json Update `.github/compose-releases.json`	2026-01-26 09:18:24 +01:00
CrazyMax	05e85e2bdc	Merge pull request #945 from docker/bot/docker-releases-json Update `.github/docker-releases.json`	2026-01-26 09:18:06 +01:00
crazy-max	119c41667b	github: update .github/compose-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-01-25 16:33:02 +00:00
crazy-max	410f125810	github: update .github/docker-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-01-25 16:32:57 +00:00
CrazyMax	715a9004a5	Merge pull request #950 from docker/dependabot/npm_and_yarn/lodash-4.17.23 build(deps): bump lodash from 4.17.21 to 4.17.23	2026-01-25 17:32:32 +01:00
CrazyMax	108eb64bab	Merge pull request #940 from docker/dependabot/npm_and_yarn/actions/cache-5.0.3 build(deps): bump @actions/cache from 5.0.2 to 5.0.3	2026-01-25 17:31:51 +01:00
CrazyMax	2a3d026818	Merge pull request #947 from docker/dependabot/github_actions/peter-evans/create-pull-request-8.1.0 build(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0	2026-01-25 16:43:16 +01:00
dependabot[bot]	fda38b8e1a	build(deps): bump lodash from 4.17.21 to 4.17.23 Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23) --- updated-dependencies: - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-22 06:22:14 +00:00
Tonis Tiigi	fe1a39d735	update buildkit v0.27.0 Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>	2026-01-21 17:00:01 -08:00
Tonis Tiigi	34ce37a841	update buildx v0.31.0 Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>	2026-01-21 16:59:23 -08:00
Tõnis Tiigi	5e85cd909c	Merge pull request #948 from docker/bot/buildx-releases-json Update `.github/buildx-releases.json`	2026-01-21 16:56:03 -08:00
crazy-max	e4be903f47	github: update .github/buildx-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-01-22 00:27:49 +00:00
dependabot[bot]	38f5d06496	build(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 8.0.0 to 8.1.0. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](`98357b18bf...c0f553fe54`) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-21 22:53:03 +00:00
CrazyMax	1e6bce61a0	Merge pull request #942 from docker/bot/docker-releases-json Update `.github/docker-releases.json`	2026-01-17 20:22:12 +01:00
CrazyMax	62950e53c4	Merge pull request #941 from docker/bot/buildx-releases-json Update `.github/buildx-releases.json`	2026-01-17 20:21:48 +01:00
crazy-max	fbfb919592	github: update .github/docker-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-01-17 00:34:28 +00:00
crazy-max	7853dc580d	github: update .github/buildx-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-01-17 00:24:56 +00:00
dependabot[bot]	e99d5ed6bd	build(deps): bump @actions/cache from 5.0.2 to 5.0.3 Bumps [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) from 5.0.2 to 5.0.3. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache) --- updated-dependencies: - dependency-name: "@actions/cache" dependency-version: 5.0.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-16 22:54:11 +00:00
CrazyMax	882907c07b	Merge pull request #931 from docker/sigstore-signing-config sigstore: use signing config with cosign	2026-01-15 17:11:42 +01:00
CrazyMax	d5a1a969a5	Merge pull request #939 from docker/bot/buildx-releases-json Update `.github/buildx-releases.json`	2026-01-15 09:28:57 +01:00
crazy-max	99d1f39750	github: update .github/buildx-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-01-15 08:27:12 +00:00
CrazyMax	79a6dd0432	Merge pull request #938 from crazy-max/bake-def-envs Some checks failed publish / publish (push) Has been cancelled Details buildx(bake): merge existing env vars when parsing definition	2026-01-14 14:03:57 +01:00
CrazyMax	306d954be2	buildx(bake): merge existing env vars when parsing definition Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-01-14 13:51:42 +01:00
CrazyMax	65261f5a19	Merge pull request #937 from crazy-max/sigstore-platform sigstore: opt to verify attestation manifest for specific platform	2026-01-14 12:59:10 +01:00
CrazyMax	a5dc8e7614	sigstore: opt to verify attestation manifest for specific platform Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-01-14 12:23:11 +01:00
CrazyMax	c9ffda6adf	Merge pull request #936 from crazy-max/oci-defaultPlatform oci: defaultPlatform function	2026-01-14 12:01:47 +01:00
CrazyMax	af989cc324	oci: defaultPlatform function Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-01-14 11:49:45 +01:00
CrazyMax	18f82ba384	Merge pull request #935 from crazy-max/imagetools-filter-platform buildx(imagetools): opt to filter attestation manifests by platform	2026-01-14 11:12:59 +01:00
CrazyMax	f136d06171	buildx(imagetools): opt to filter attestation manifests by platform Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-01-14 10:52:51 +01:00
CrazyMax	6e1b0e6179	Merge pull request #934 from docker/sigstore-verify-retry Some checks failed publish / publish (push) Has been cancelled Details sigstore: make retry on manifest unknown optional	2026-01-13 17:33:53 +01:00
CrazyMax	b4f34ed319	sigstore: make retry on manifest unknown optional Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-01-13 16:21:46 +01:00
CrazyMax	c47fbe6179	sigstore: use signing config with cosign Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-01-13 15:14:37 +01:00
CrazyMax	ba992bb822	Merge pull request #933 from crazy-max/sigstore-test-sign Some checks failed publish / publish (push) Has been cancelled Details sigstore: test signAttestationManifests	2026-01-13 15:07:08 +01:00
CrazyMax	345531d0a4	sigstore: test signAttestationManifests Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-01-13 14:56:12 +01:00
CrazyMax	2e620f9c90	Merge pull request #932 from crazy-max/sigstore-verifyimage sigstore: add function to verify image attestations	2026-01-13 14:50:59 +01:00
CrazyMax	0162b2cf8b	cosign: clear errors if manifest or bundle payload found Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-01-13 13:25:39 +01:00
CrazyMax	7397cfe37c	sigstore: add function to verify image attestations Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-01-13 13:21:55 +01:00
CrazyMax	a3d5eee63a	Merge pull request #928 from docker/bot/cosign-releases-json Update `.github/cosign-releases.json`	2026-01-12 14:18:20 +01:00
crazy-max	85c3d8b7f3	github: update .github/cosign-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-01-10 00:13:01 +00:00
CrazyMax	22773fa848	Merge pull request #927 from docker/bot/docker-releases-json Update `.github/docker-releases.json`	2026-01-09 13:16:03 +01:00
crazy-max	cbf7323bc1	github: update .github/docker-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-01-09 12:14:24 +00:00
CrazyMax	382ab4c9ac	Merge pull request #924 from docker/dependabot/npm_and_yarn/actions/tool-cache-3.0.0 build(deps): bump @actions/tool-cache from 2.0.2 to 3.0.0	2026-01-08 16:33:06 +01:00
CrazyMax	b0b34198c4	Merge pull request #925 from docker/dependabot/npm_and_yarn/actions/cache-5.0.2 build(deps): bump @actions/cache from 5.0.1 to 5.0.2	2026-01-08 16:30:42 +01:00
dependabot[bot]	842eaf5ac0	build(deps): bump @actions/cache from 5.0.1 to 5.0.2 Bumps [@actions/cache](https://github.com/actions/toolkit/tree/HEAD/packages/cache) from 5.0.1 to 5.0.2. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/cache/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/cache) --- updated-dependencies: - dependency-name: "@actions/cache" dependency-version: 5.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-08 15:21:39 +00:00
CrazyMax	2f0f57f46e	Merge pull request #926 from docker/dependabot/npm_and_yarn/actions/artifact-5.0.2 build(deps): bump @actions/artifact from 5.0.1 to 5.0.2	2026-01-08 16:19:26 +01:00
dependabot[bot]	4f8b9ae301	build(deps): bump @actions/tool-cache from 2.0.2 to 3.0.0 Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) from 2.0.2 to 3.0.0. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/tool-cache) --- updated-dependencies: - dependency-name: "@actions/tool-cache" dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-08 15:12:22 +00:00
dependabot[bot]	0aaa94bdee	build(deps): bump @actions/artifact from 5.0.1 to 5.0.2 Bumps [@actions/artifact](https://github.com/actions/toolkit/tree/HEAD/packages/artifact) from 5.0.1 to 5.0.2. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/artifact/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/artifact) --- updated-dependencies: - dependency-name: "@actions/artifact" dependency-version: 5.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-08 15:12:07 +00:00
CrazyMax	654afbf8c5	Merge pull request #922 from docker/dependabot/npm_and_yarn/actions/core-2.0.2 build(deps): bump @actions/core from 2.0.1 to 2.0.2	2026-01-08 16:09:49 +01:00
CrazyMax	d256fc587d	Merge pull request #923 from docker/dependabot/npm_and_yarn/actions/github-7.0.0 build(deps): bump @actions/github from 6.0.1 to 7.0.0	2026-01-08 16:08:23 +01:00
dependabot[bot]	ca8ad9e7ab	build(deps): bump @actions/github from 6.0.1 to 7.0.0 Bumps [@actions/github](https://github.com/actions/toolkit/tree/HEAD/packages/github) from 6.0.1 to 7.0.0. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/github/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/github) --- updated-dependencies: - dependency-name: "@actions/github" dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-08 14:53:30 +00:00
dependabot[bot]	53aedd9542	build(deps): bump @actions/core from 2.0.1 to 2.0.2 Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 2.0.1 to 2.0.2. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) --- updated-dependencies: - dependency-name: "@actions/core" dependency-version: 2.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-08 14:53:07 +00:00
CrazyMax	01fb6c8d3b	Merge pull request #921 from docker/dependabot/npm_and_yarn/actions/http-client-3.0.1 build(deps): bump @actions/http-client from 3.0.0 to 3.0.1	2026-01-08 10:28:17 +01:00
dependabot[bot]	6439a13308	build(deps): bump @actions/http-client from 3.0.0 to 3.0.1 Bumps [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client) from 3.0.0 to 3.0.1. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/http-client) --- updated-dependencies: - dependency-name: "@actions/http-client" dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-01-08 01:10:26 +00:00
CrazyMax	a6ccf4cb79	Merge pull request #919 from crazy-max/fix-publish-workflow ci(publish): fix permissions to create GitHub Release	2026-01-07 17:17:31 +01:00
CrazyMax	333909f560	Merge pull request #920 from crazy-max/buildkit-0.26.3 update buildkit to 0.26.3	2026-01-05 16:08:22 +01:00
CrazyMax	0b7584385a	update buildkit to 0.26.3 Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-01-05 14:58:42 +01:00
CrazyMax	3a94f7311f	ci(publish): fix permissions to create GitHub Release Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-01-05 14:47:21 +01:00