CVE-2026-22703: Cosign Bundle Verify Bypasscve-2026-22703-cosign-bundle-verify-bypass
Cosign skips critical bundle validation checks because they are placed after an early successful return for `TrustedMaterial` configurations. Ensure all critical checks like `compareSigs` and `comparePublicKey` are evaluated prior to any successful early returns to avoid validation bypass.
