Package: cosign (2.5.0-2 and others)

Code signing/transparency for containers and binaries (program)

Signing OCI containers (and other artifacts) using Sigstore

Cosign supports:

 * "Keyless signing" with the Sigstore public good Fulcio certificate
   authority and Rekor transparency log (default)
 * Hardware and KMS signing
 * Signing with a cosign generated encrypted private/public keypair
 * Container Signing, Verification and Storage in an OCI registry.
 * Bring-your-own PKI

This package contains the command-line tool cosign.

This page is also available in the following languages: