<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Sigstore Rekor · sigstore-rekor-mcp · changes | VerifyMCP</title><description>Recorded changes to this MCP component: tools, parameters, capabilities, advisories and trust-score checks. Security-relevant changes by default; append ?materiality=all for everything.</description><link>https://verifymcp.io</link><atom:link href="https://verifymcp.io/servers/pipeworx-io-sigstore-rekor/sigstore-rekor-mcp.xml" rel="self" type="application/rss+xml"/><item><title>[SECURITY] sigstore-rekor-mcp: Authorization (fail → unverified)</title><link>https://verifymcp.io/servers/pipeworx-io-sigstore-rekor/sigstore-rekor-mcp#chg-chg_01a12185-6c36-762c-a550-3e191d9ba48e</link><guid isPermaLink="true">https://verifymcp.io/servers/pipeworx-io-sigstore-rekor/sigstore-rekor-mcp#chg-chg_01a12185-6c36-762c-a550-3e191d9ba48e</guid><description>Authorization (fail → unverified). Compared against 2026-10-06.</description><pubDate>Fri, 09 Oct 2026 16:35:50 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[SECURITY] sigstore-rekor-mcp: Tool safety (pass → unverified)</title><link>https://verifymcp.io/servers/pipeworx-io-sigstore-rekor/sigstore-rekor-mcp#chg-chg_01a12185-6c9a-7068-8925-da0f58bcfa86</link><guid isPermaLink="true">https://verifymcp.io/servers/pipeworx-io-sigstore-rekor/sigstore-rekor-mcp#chg-chg_01a12185-6c9a-7068-8925-da0f58bcfa86</guid><description>Tool safety (pass → unverified). Compared against 2026-10-06.</description><pubDate>Fri, 09 Oct 2026 16:35:50 GMT</pubDate><category>security</category><category>regression</category><category>check.unverifiable</category></item><item><title>[CRITICAL] sigstore-rekor-mcp: Authorization (unverified → fail)</title><link>https://verifymcp.io/servers/pipeworx-io-sigstore-rekor/sigstore-rekor-mcp#chg-chg_01a10e93-3581-7b2b-a782-5f0db99f33d2</link><guid isPermaLink="true">https://verifymcp.io/servers/pipeworx-io-sigstore-rekor/sigstore-rekor-mcp#chg-chg_01a10e93-3581-7b2b-a782-5f0db99f33d2</guid><description>Authorization (unverified → fail). Compared against 2026-10-04.</description><pubDate>Tue, 06 Oct 2026 00:18:05 GMT</pubDate><category>critical</category><category>regression</category><category>check.reverified</category></item><item><title>[SECURITY] sigstore-rekor-mcp: Injection markers (unverified → pass)</title><link>https://verifymcp.io/servers/pipeworx-io-sigstore-rekor/sigstore-rekor-mcp#chg-chg_01a10e93-35db-7596-8149-f267ff3e04a8</link><guid isPermaLink="true">https://verifymcp.io/servers/pipeworx-io-sigstore-rekor/sigstore-rekor-mcp#chg-chg_01a10e93-35db-7596-8149-f267ff3e04a8</guid><description>Injection markers (unverified → pass). Compared against 2026-10-04.</description><pubDate>Tue, 06 Oct 2026 00:18:05 GMT</pubDate><category>security</category><category>improvement</category><category>check.reverified</category></item><item><title>[SECURITY] sigstore-rekor-mcp: First check of Judged manipulation (pass)</title><link>https://verifymcp.io/servers/pipeworx-io-sigstore-rekor/sigstore-rekor-mcp#chg-chg_01a10e93-35dc-7ca7-92d1-f6a4b4781c4d</link><guid isPermaLink="true">https://verifymcp.io/servers/pipeworx-io-sigstore-rekor/sigstore-rekor-mcp#chg-chg_01a10e93-35dc-7ca7-92d1-f6a4b4781c4d</guid><description>First check of Judged manipulation (pass). Compared against 2026-10-04.</description><pubDate>Tue, 06 Oct 2026 00:18:05 GMT</pubDate><category>security</category><category>neutral</category><category>check.appeared</category></item></channel></rss>