Package cosign: Information
Source package: cosign
Version: 2.5.3-alt1
Build time: Aug 11, 2025, 03:48 PM
Category: Development/Tools
Report package bugHome page: https://github.com/sigstore/cosign
License: Apache-2.0
Summary: Container Signing, Verification and Storage in an OCI registry
Description:
Cosign aims to make signatures invisible infrastructure. Cosign supports: * "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log (default) * Hardware and KMS signing * Signing with a cosign generated encrypted private/public keypair * Container Signing, Verification and Storage in an OCI registry. * Bring-your-own PKI
Maintainer: Alexey Shabalin
Last changed
Aug. 11, 2025 Alexey Shabalin 2.5.3-alt1
- New version 2.5.3. - Disable tests, because need Internet access.
Aug. 20, 2024 Ivan Pepelyaev 2.4.0-alt1
- 2.3.0 -> 2.4.0
July 23, 2024 Ivan Pepelyaev 2.3.0-alt1
- 2.2.4 -> 2.3.0