LiteLLM 发布 v1.102.4：Docker 镜像签名验证与补丁更新

AI 摘要

LiteLLM 发布 v1.102.4 版本，该版本为稳定分支 1.102.x 的补丁更新，主要将 PR #44508 回合（backport）到该分支。此次发布强调所有 Docker 镜像均使用 cosign 签名，并提供了通过固定 commit hash 或 release tag 验证镜像签名的具体命令，以增强供应链安全性。

正文节选

## Verify Docker Image Signature All LiteLLM Docker images are signed with [cosign](https://docs.sigstore.dev/cosign/overview/). Every release is signed with the same key introduced in [commit `0112e53`](https://github.com/BerriAI/litellm/commit/0112e53046018d726492c814b3644b7d376029d0). **Verify using the pinned commit hash (recommended):** A commit hash is cryptographically immutable, so this is the strongest way to ensure you are using the original signing key: ```bash cosign verify \ -

发布时间：2026-10-08 15:49

抓取时间：2026-10-08 16:08

来源机构：BerriAI