TL;DR: LiteLLM's new release candidate signs all Docker images with cosign, giving AI builders a way to verify supply-chain integrity.
Summary: BerriAI released LiteLLM v1.99.0-rc.1, an AI gateway for LLM calls, and now signs all its Docker images with cosign. The release documentation provides both pinned-commit and tag-based verification commands for the ghcr.io/berriai/litellm image. This strengthens supply-chain security for teams deploying LiteLLM via containers.
Why it matters: For AI builders running LiteLLM in production, this adds a practical way to enforce image authenticity and avoid tampered artifacts. If you deploy LiteLLM via Docker, adopt the cosign verify step in your CI/CD or pull process.
Source: github_releases