Linux workstation

Alpine Linux 3.23 native package

rekor

Journal de transparence des signatures

Packages / Alpine Linux 3.23 / rekor

[Source: rekor]

Package: rekor (1.4.2-r6)

[Project overview: rekor]

Maintainers:

kpcyrd

External Resources:

Homepage: [github.com]

Similar packages:

Journal de transparence des signatures

Other Packages Related to rekor:

  • dep: so:libc.musl-aarch64.so.1

    Package not available

Download rekor

ArchitecturePackage SizeInstalled SizeFiles
aarch6411 MiB37 MiB[list of files]
x86_6412 MiB39 MiB[list of files]

Couverture des fichiers (non observée)

The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.

No package-associated file paths were observed for the displayed build metadata.

Field source: Alpine Linux 3.23 community aarch64 revision v3-23-community-aarch64:9d4d5738ce344f6ec950cf8aa259d9bc21eafa803fab1bb0c1e6a8fbc90ea2ea

Utiliser ce paquet

OpenFactory peut démarrer ce système d'exploitation dans une machine virtuelle du navigateur, ou lancer une construction qui inclut le nom natif du paquet de cet enregistrement.

Essayer Alpine Linux 3.23 dans le navigateurConstruire une image qui inclut rekor

Versions, suites et dépôts

Chaque ligne est une métadonnée d'index pour une version, une architecture, une suite et un dépôt. Noms, URL et tailles viennent de la source ; un lien est un emplacement de récupération mutable, pas une redistribution OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1.4.2-r6v3.23 / communityaarch64Alpine Linux 3.23 · community · aarch6411 MiB37 MiBNot reported
1.4.2-r6v3.23 / communityx86_64Alpine Linux 3.23 · community · x86_6412 MiB39 MiBNot reported

Field source: Alpine Linux 3.23 community aarch64 revision v3-23-community-aarch64:9d4d5738ce344f6ec950cf8aa259d9bc21eafa803fab1bb0c1e6a8fbc90ea2ea

Empreintes et dates d'observation

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

Complétude de la fiche

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
10/25
Dependency metadata
15/15
Package-file index
0/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 70/100

Field source: Alpine Linux 3.23 community aarch64 revision v3-23-community-aarch64:9d4d5738ce344f6ec950cf8aa259d9bc21eafa803fab1bb0c1e6a8fbc90ea2ea, Alpine Linux 3.23 community x86_64 revision v3-23-community-x86-64:593675b29d97519f9b0067c786106f4eaad38b1adf120dbc952a7e6eec9e7c70. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources et provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Alpine Linux 3.23 community aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision v3-23-community-aarch64:9d4d5738ce344f6ec950cf8aa259d9bc21eafa803fab1bb0c1e6a8fbc90ea2ea

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed object
    Not recorded
    Signed-object SHA-256
    02d9f1e388110632b9800d2af508ed93384639622858cd16d0809803579468e2
    Signer fingerprint
    Not recorded
    Keyring revision
    alpine-aarch64
    SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
  • Alpine Linux 3.23 community x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision v3-23-community-x86-64:593675b29d97519f9b0067c786106f4eaad38b1adf120dbc952a7e6eec9e7c70

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed object
    Not recorded
    Signed-object SHA-256
    0f6caafa33babbeb740964ae2865cb4b365c5d32dd4162857a2d264e7afcb1c9
    Signer fingerprint
    Not recorded
    Keyring revision
    alpine-x86_64
    SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026