Cosign is a command-line utility for signing software artifacts and verifying signatures. It offers flexible signing options, including keyless signing through Sigstore's Fulcio and Rekor, hardware and KMS signing, and the use of an encrypted private/public key pair. Cosign integrates with OCI registries for signing and verification and allows users to bring their own public key infrastructure.

Cosign

cosign:2.4.1-1.1

bash

bash-sh

ca-certificates-mozilla-prebuilt

coreutils

cosign-2

filesystem

glibc

libacl1

libattr1

libcap2

libgcc_s1

libgmp10

libncurses6

libpcre1

libreadline7

libselinux1

libstdc++6

skelcd-EULA-bci

sles-release

system-user-root

terminfo-base