Dangerzone Threat Model

Component: Cosign Binary (embedded)

Embedded cosign binary for signature verification

boundary: Local host loads resources: ['system', 'images'] verifies resources: ['images'] assume not compromised is build artifact is memory safe is verifiable uses network uses strong crypto works offline writes to terminal

Threats Affecting This Component

No threats identified for this component.

Scenarios Using This Component

Back to Components List | Back to Summary