Description

When calling cosign sign locally with keyless signing, after OIDC flow, I see:

Looking through changes the only recent thing I can find that touches anything close to this is sigstore/sigstore#2288 Mar 4

which was released in https://github.com/sigstore/sigstore/releases/tag/v1.10.5 Mar 29
which was picked up in cosign in #4789 Apr 2
which was released in cosign in https://github.com/sigstore/cosign/releases/tag/v3.0.6 Apr 6

Version

cosign: A tool for Container Signing, Verification and Storage in an OCI registry.

GitVersion:    v3.0.6
GitCommit:     f1ad3ee952313be5d74a49d67ba0aa8d0d5e351f
GitTreeState:  "clean"
BuildDate:     2026-04-06T21:39:58Z
GoVersion:     go1.26.1
Compiler:      gc
Platform:      darwin/arm64