cosign bundle inspect displays Sigstore protobuf bundle contents
Introduced 2026-07-17 · score 0.91
HOW TO USE IT
When diagnosing a Sigstore protobuf bundle, run `cosign bundle inspect <BUNDLE>` to display its contents.
cosign bundle inspect <BUNDLE>WHY THIS HELPS
Diagnose the contents of a Sigstore protobuf bundle while working on a repository that uses Cosign bundles.
REQUIREMENTS AND LIMITATIONS
- Version: v3.1.2
- BUNDLE (required): Bundle to inspect.
- --output-file <string>: Log output to a file.
- -t, --timeout <duration>: Set command timeout; default is 3m0s.
- -d, --verbose: Log debug output.
- -h, --help: Show help for inspect.
- The command provides a diagnostic display of a bundle's contents.
FIRST-PARTY EVIDENCE
- https://github.com/sigstore/cosign/releases/tag/v3.1.2
- https://github.com/sigstore/cosign/pull/4842
- https://github.com/sigstore/cosign/blob/v3.1.2/doc/cosign_bundle_inspect.md
Check the installed version and the source before using it. Entry JSON