Package cosign: Information

Source package: cosign

Version: 3.1.1-alt1

Build time:  Jun 10, 2026, 02:52 PM in the task #414545

Category: Development/Tools

Gear: https://git.altlinux.org/gears/c/cosign.git?a=tree;hb=df6d2b0d8b…

Home page: https://github.com/sigstore/cosign

License: Apache-2.0

Summary: Container Signing, Verification and Storage in an OCI registry

Description: 

Cosign aims to make signatures invisible infrastructure.

Cosign supports:

* "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log (default)
* Hardware and KMS signing
* Signing with a cosign generated encrypted private/public keypair
* Container Signing, Verification and Storage in an OCI registry.
* Bring-your-own PKI

List of RPM packages built from this SRPM:
cosign (x86_64, i586, aarch64)
cosign-debuginfo (x86_64, i586, aarch64)

Maintainer: Ivan Pepelyaev

ACL:
Ivan Pepelyaev
Alexander Danilov
@everybody