The security/cosign port
cosign-3.1.2 – sigstore signing tool
Description
Signing OCI containers (and other artifacts) using Sigstore.
Cosign supports:
- "Keyless signing" with the Sigstore public good Fulcio certificate authority
and Rekor transparency log (default)
- Hardware and KMS signing
- Signing with a cosign generated encrypted private/public keypair
- Container Signing, Verification and Storage in an OCI registry
- Bring-your-own PKI
WWW: https://www.sigstore.dev/
- Only for arches
-
aarch64
amd64
arm
i386
riscv64
- Categories:
-
lang/go
security
Library dependencies
Build dependencies
Run dependencies