Packages / Alpine Linux 3.23 / Source / cosign

Source Package: cosign (2.6.3-r1)

container signing tool with support for ephemeral keys and Sigstore signing

The following binary packages are built from this source package:

Vulnérabilités connues

L’association des paquets est en cours.

Dernière synchronisation:

[Catalogue CVE]

Sources

  • Alpine Linux 3.23 community aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Preuve de signature

    v3-23-community-aarch64:9d4d5738ce344f6ec950cf8aa259d9bc21eafa803fab1bb0c1e6a8fbc90ea2ea

    Repository-signature verification record
    Signed-object SHA-256
    02d9f1e388110632b9800d2af508ed93384639622858cd16d0809803579468e2
    Keyring revision
    alpine-aarch64
    SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
  • Alpine Linux 3.23 community x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Preuve de signature

    v3-23-community-x86-64:593675b29d97519f9b0067c786106f4eaad38b1adf120dbc952a7e6eec9e7c70

    Repository-signature verification record
    Signed-object SHA-256
    0f6caafa33babbeb740964ae2865cb4b365c5d32dd4162857a2d264e7afcb1c9
    Keyring revision
    alpine-x86_64
    SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026