Skip to content

[GHSA-wfqx-gjrf-g28r] Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag #8037

[GHSA-wfqx-gjrf-g28r] Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag

[GHSA-wfqx-gjrf-g28r] Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag #8037

Triggered via pull request July 8, 2026 16:00
@adamwgadamwg
opened #8628
Status Success
Total duration 1m 17s
Artifacts

create_staging_branch.yaml

on: pull_request_target
ensure-base-is-staging
1m 12s
ensure-base-is-staging
Fit to window
Zoom out
Zoom in