Home

The security/cosign port

cosign-3.1.2 – sigstore signing tool (cvsweb github mirror)

Description

Signing OCI containers (and other artifacts) using Sigstore.

Cosign supports:

- "Keyless signing" with the Sigstore public good Fulcio certificate authority
  and Rekor transparency log (default)
- Hardware and KMS signing
- Signing with a cosign generated encrypted private/public keypair
- Container Signing, Verification and Storage in an OCI registry
- Bring-your-own PKI
WWW: https://www.sigstore.dev/

Maintainer

Rafael Sadowski

Only for arches

aarch64 amd64 arm i386 riscv64

Categories

lang/go security

Build dependencies

Files

Search