openSUSE Leap 15.6 native package

rekor

Supply Chain Transparency Log

Packages / openSUSE Leap 15.6 / Unspecified / rekor

[Source: rekor]

Package: rekor (1.3.5-150400.4.19.1)

[Project overview: rekor]

External Resources:

Homepage: [github.com]

Supply Chain Transparency Log

Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. Rekor will enable software maintainers and build systems to record signed metadata to an immutable record. Other parties can then query said metadata to enable them to make informed decisions on trust and non-repudiation of an object's lifecycle. For more details visit the sigstore website The Rekor project provides a restful API based server for validation and a transparency log for storage. A CLI application is available to make and verify entries, query the transparency log for inclusion proof, integrity verification of the transparency log or retrieval of entries by either public key or artifact. Rekor fulfils the signature transparency role of sigstore's software signing infrastructure. However, Rekor can be run on its own and is designed to be extensible to working with different manifest schemas and PKI tooling.

Other Packages Related to rekor:

dep: /bin/bash
Package not available
dep: libpthread.so.0()(64bit)
Package not available
dep: libpthread.so.0(GLIBC_2.17)(64bit)
Package not available
dep: libresolv.so.2()(64bit)
Package not available
dep: libresolv.so.2(GLIBC_2.17)(64bit)
Package not available
dep: libc.so.6(GLIBC_2.17)(64bit)
Package not available

Download rekor

Architecture	Package Size	Installed Size	Files
aarch64	14 MiB	69 MiB	[list of files]
ppc64le	14 MiB	72 MiB	[list of files]
s390x	15 MiB	75 MiB	[list of files]
x86_64	16 MiB	72 MiB	[list of files]

Шляхи файлів пакета (16)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/rekor-cli
/usr/bin/rekor-server
/usr/bin/rekor-zypp-verify
/usr/share/doc/packages/rekor
/usr/share/doc/packages/rekor/CHANGELOG.md
/usr/share/doc/packages/rekor/CODE_OF_CONDUCT.md
/usr/share/doc/packages/rekor/CONTRIBUTORS.md
/usr/share/doc/packages/rekor/DEPRECATIONS.md
/usr/share/doc/packages/rekor/FEATURES.md
/usr/share/doc/packages/rekor/MAINTAINERS.md
/usr/share/doc/packages/rekor/oid-info.md
/usr/share/doc/packages/rekor/OWNERS.md
/usr/share/doc/packages/rekor/README.md
/usr/share/doc/packages/rekor/types.md
/usr/share/licenses/rekor
/usr/share/licenses/rekor/LICENSE

Field source: openSUSE Leap 15.6 OSS revision leap-15-6-oss-multiarch:ca2653101b9afba6656aea529109ba0c0f1ca1a92aa8614e7c887fda5264c230

Використати цей пакет

OpenFactory може завантажити цю операційну систему у віртуальній машині браузера або почати збірку образу з рідною назвою пакета з цього запису.

Спробувати openSUSE Leap 15.6 у браузері Зібрати образ, що містить rekor

Версії, набори та репозиторії

Кожен рядок: метадані індексу пакетів для однієї версії, архітектури, набору й репозиторію. Назви, URL і розміри зі джерела; посилання є змінним місцем отримання, не перерозповсюдженням OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1.3.5-150400.4.19.1	leap-15.6 / oss	aarch64	openSUSE Leap 15.6 · OSS · multi-architecture	14 MiB	69 MiB	aarch64/rekor-1.3.5-150400.4.19.1.aarch64.rpm
1.3.5-150400.4.19.1	leap-15.6 / oss	ppc64le	openSUSE Leap 15.6 · OSS · multi-architecture	14 MiB	72 MiB	ppc64le/rekor-1.3.5-150400.4.19.1.ppc64le.rpm
1.3.5-150400.4.19.1	leap-15.6 / oss	s390x	openSUSE Leap 15.6 · OSS · multi-architecture	15 MiB	75 MiB	s390x/rekor-1.3.5-150400.4.19.1.s390x.rpm
1.3.5-150400.4.19.1	leap-15.6 / oss	x86_64	openSUSE Leap 15.6 · OSS · multi-architecture	16 MiB	72 MiB	x86_64/rekor-1.3.5-150400.4.19.1.x86_64.rpm

Field source: openSUSE Leap 15.6 OSS revision leap-15-6-oss-multiarch:ca2653101b9afba6656aea529109ba0c0f1ca1a92aa8614e7c887fda5264c230

Контрольні суми й дати спостереження

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

1.3.5-150400.4.19.1 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha512: 7a4bbd01676644e8dc1ab08062438a088f96790afe20484a733d6e67ccb33b2e2c4e80c1a786d93be7c9c752fbc650409da86d79a0d06995f32ad66394e7534f

Field source: openSUSE Leap 15.6 OSS revision leap-15-6-oss-multiarch:ca2653101b9afba6656aea529109ba0c0f1ca1a92aa8614e7c887fda5264c230

1.3.5-150400.4.19.1 / ppc64leObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha512: 5f65499281119366b3368a74efa0a726d14fee5fb337d15a663183fba10b46dd80f58434a4c8e770648422c31b6e75b25dfad6945df136ab059530fb3f9ea268

Field source: openSUSE Leap 15.6 OSS revision leap-15-6-oss-multiarch:ca2653101b9afba6656aea529109ba0c0f1ca1a92aa8614e7c887fda5264c230

1.3.5-150400.4.19.1 / s390xObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha512: 9741add50e3cbfd7aa81f55b21af23dca2ebeec331baf8ad4e1eab3a806efbd75b0fded6ee5dd1d7a75f09c988552f778f145f5bc00c0de61a9949a7123a7066

Field source: openSUSE Leap 15.6 OSS revision leap-15-6-oss-multiarch:ca2653101b9afba6656aea529109ba0c0f1ca1a92aa8614e7c887fda5264c230

1.3.5-150400.4.19.1 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha512: 6d171f162b8089720166cbb17ca9858fb868819e2f789eb8b56f02f0e4db0d1346dac3a0c6b3c7b144c1cbeb0a7742e81748fa96497771f9751e6f8588d9542b

Field source: openSUSE Leap 15.6 OSS revision leap-15-6-oss-multiarch:ca2653101b9afba6656aea529109ba0c0f1ca1a92aa8614e7c887fda5264c230

Повнота запису каталогу

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description: 25/25
Artifact path and source digest: 25/25
Dependency metadata: 15/15
Package-file index: 15/15
Homepage: 5/5
License text: 5/5
Source package or maintainer: 10/10

Recorded total: 100/100

Field source: openSUSE Leap 15.6 OSS revision leap-15-6-oss-multiarch:ca2653101b9afba6656aea529109ba0c0f1ca1a92aa8614e7c887fda5264c230. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Джерела та походження

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

openSUSE Leap 15.6 OSSSep 1, 2026
Authoritative source; repository metadata signature verified, revision leap-15-6-oss-multiarch:ca2653101b9afba6656aea529109ba0c0f1ca1a92aa8614e7c887fda5264c230
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://download.opensuse.org/distribution/leap/15.6/repo/oss/repodata/repomd.xml
Signed-object SHA-256
ca2653101b9afba6656aea529109ba0c0f1ca1a92aa8614e7c887fda5264c230
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified