v1.94.0-rc.2
📦 litellmView on GitHub →
Summary
This release introduces the ability to verify LiteLLM Docker image signatures using cosign, enhancing security and trust. It also includes a backport of a previous change to the release branch.
Migration Steps
- Users can now verify LiteLLM Docker image signatures using cosign. The recommended method is to use the pinned commit hash for the signing key.
- Example command for verifying with pinned commit hash: `cosign verify --key https://raw.githubusercontent.com/BerriAI/litellm/0112e53046018d726492c814b3644b7d376029d0/cosign.pub ghcr.io/berriai/litellm:v1.94.0-rc.2`
- Example command for verifying with release tag: `cosign verify --key https://raw.githubusercontent.com/BerriAI/litellm/v1.94.0-rc.2/cosign.pub ghcr.io/berriai/litellm:v1.94.0-rc.2`