NEW: security/cosign

Rafael Sadowski <[email protected]> Tue, 4 Aug 2026 17:04:46 +0200
Newsgroups gmane.os.openbsd.ports
Message-ID <[email protected]>
OK to import cosign-3.1.2?

Comment:
sigstore signing tool

Description:
Signing OCI containers (and other artifacts) using Sigstore.

Cosign supports:

- "Keyless signing" with the Sigstore public good Fulcio certificate authority
  and Rekor transparency log (default)
- Hardware and KMS signing
- Signing with a cosign generated encrypted private/public keypair
- Container Signing, Verification and Storage in an OCI registry
- Bring-your-own PKI

Maintainer: Rafael Sadowski <[email protected]>

WWW: https://www.sigstore.dev/