Packages / openSUSE Leap 16.0 / Unspecified / cosign

[Source: cosign]

Package: cosign (3.1.2-160000.1.1)

Container Signing, Verification and Storage in an OCI registry

Cosign aims to make signatures invisible infrastructure. Cosign supports: - Hardware and KMS signing - Bring-your-own PKI - Our free OIDC PKI (Fulcio) - Built-in binary transparency and timestamping service (Rekor)

Other Packages Related to cosign:

  • dep: libc.so.6(GLIBC_2.34)(64bit)

    Package not available

Download cosign

ArchitecturePackage sizeInstalled sizeFilesPackage
aarch6420 MiB100 MiBlist of filesDownload
ppc64le20 MiB107 MiBlist of filesDownload
s390x21 MiB109 MiBlist of filesDownload
x86_6422 MiB107 MiBlist of filesDownload

Package file paths (11)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/cosign
  • /usr/share/doc/packages/cosign
  • /usr/share/doc/packages/cosign/ALUMNI.md
  • /usr/share/doc/packages/cosign/CHANGELOG.md
  • /usr/share/doc/packages/cosign/CLI.md
  • /usr/share/doc/packages/cosign/CODE_OF_CONDUCT.md
  • /usr/share/doc/packages/cosign/CONTRIBUTING.md
  • /usr/share/doc/packages/cosign/README.md
  • /usr/share/doc/packages/cosign/VERSIONING.md
  • /usr/share/licenses/cosign
  • /usr/share/licenses/cosign/LICENSE

Field source: openSUSE Leap 16.0 OSS

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try openSUSE Leap 16.0 in the browserBuild an image that includes cosign

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
3.1.2-160000.1.1leap-16.0 / ossaarch64openSUSE Leap 16.0 · OSS · multi-architecture20 MiB100 MiBaarch64/cosign-3.1.2-160000.1.1.aarch64.rpm
3.1.2-160000.1.1leap-16.0 / ossppc64leopenSUSE Leap 16.0 · OSS · multi-architecture20 MiB107 MiBppc64le/cosign-3.1.2-160000.1.1.ppc64le.rpm
3.1.2-160000.1.1leap-16.0 / osss390xopenSUSE Leap 16.0 · OSS · multi-architecture21 MiB109 MiBs390x/cosign-3.1.2-160000.1.1.s390x.rpm
3.1.2-160000.1.1leap-16.0 / ossx86_64openSUSE Leap 16.0 · OSS · multi-architecture22 MiB107 MiBx86_64/cosign-3.1.2-160000.1.1.x86_64.rpm
3.1.1-160000.1.1leap-16.0 / ossaarch64openSUSE Leap 16.0 · OSS · multi-architecture20 MiB99 MiBaarch64/cosign-3.1.1-160000.1.1.aarch64.rpm
3.1.1-160000.1.1leap-16.0 / ossppc64leopenSUSE Leap 16.0 · OSS · multi-architecture20 MiB107 MiBppc64le/cosign-3.1.1-160000.1.1.ppc64le.rpm
3.1.1-160000.1.1leap-16.0 / osss390xopenSUSE Leap 16.0 · OSS · multi-architecture21 MiB108 MiBs390x/cosign-3.1.1-160000.1.1.s390x.rpm
3.1.1-160000.1.1leap-16.0 / ossx86_64openSUSE Leap 16.0 · OSS · multi-architecture22 MiB106 MiBx86_64/cosign-3.1.1-160000.1.1.x86_64.rpm
3.0.6-160000.1.1leap-16.0 / ossaarch64openSUSE Leap 16.0 · OSS · multi-architecture19 MiB97 MiBaarch64/cosign-3.0.6-160000.1.1.aarch64.rpm
3.0.6-160000.1.1leap-16.0 / ossppc64leopenSUSE Leap 16.0 · OSS · multi-architecture19 MiB104 MiBppc64le/cosign-3.0.6-160000.1.1.ppc64le.rpm
3.0.6-160000.1.1leap-16.0 / osss390xopenSUSE Leap 16.0 · OSS · multi-architecture21 MiB106 MiBs390x/cosign-3.0.6-160000.1.1.s390x.rpm
3.0.6-160000.1.1leap-16.0 / ossx86_64openSUSE Leap 16.0 · OSS · multi-architecture22 MiB104 MiBx86_64/cosign-3.0.6-160000.1.1.x86_64.rpm
3.0.5-160000.1.1leap-16.0 / ossaarch64openSUSE Leap 16.0 · OSS · multi-architecture19 MiB97 MiBaarch64/cosign-3.0.5-160000.1.1.aarch64.rpm
3.0.5-160000.1.1leap-16.0 / ossppc64leopenSUSE Leap 16.0 · OSS · multi-architecture19 MiB104 MiBppc64le/cosign-3.0.5-160000.1.1.ppc64le.rpm
3.0.5-160000.1.1leap-16.0 / osss390xopenSUSE Leap 16.0 · OSS · multi-architecture20 MiB108 MiBs390x/cosign-3.0.5-160000.1.1.s390x.rpm
3.0.5-160000.1.1leap-16.0 / ossx86_64openSUSE Leap 16.0 · OSS · multi-architecture22 MiB103 MiBx86_64/cosign-3.0.5-160000.1.1.x86_64.rpm
2.5.3-160000.1.2leap-16.0 / ossaarch64openSUSE Leap 16.0 · OSS · multi-architecture21 MiB109 MiBaarch64/cosign-2.5.3-160000.1.2.aarch64.rpm
2.5.3-160000.1.2leap-16.0 / ossppc64leopenSUSE Leap 16.0 · OSS · multi-architecture21 MiB115 MiBppc64le/cosign-2.5.3-160000.1.2.ppc64le.rpm
2.5.3-160000.1.2leap-16.0 / osss390xopenSUSE Leap 16.0 · OSS · multi-architecture22 MiB120 MiBs390x/cosign-2.5.3-160000.1.2.s390x.rpm
2.5.3-160000.1.2leap-16.0 / ossx86_64openSUSE Leap 16.0 · OSS · multi-architecture23 MiB114 MiBx86_64/cosign-2.5.3-160000.1.2.x86_64.rpm

Field source: openSUSE Leap 16.0 OSS

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.1.2-160000.1.1 / aarch64Observed Sep 1, 2026sha512 64eb72de7d6a…abec3784Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 64eb72de7d6a54f891f0af03c15a3d831844a6fc24fb8f64fb603cac4430cba5d821a8117e5cb6fa083c09e3e44bfb71f9c818d2e2b6c66d4a31f8bbabec3784

Field source: openSUSE Leap 16.0 OSS

3.1.2-160000.1.1 / ppc64leObserved Sep 1, 2026sha512 962fb3294568…12d6d467Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 962fb329456840b12807fa92371a45f5238cd6e12c841188bbedea09c7cb58f06f50350919bc18a17403ea3bca6d6459738be1544f16b01ceafe96bd12d6d467

Field source: openSUSE Leap 16.0 OSS

3.1.2-160000.1.1 / s390xObserved Sep 1, 2026sha512 4713bd2f1fd1…d9f6d277Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 4713bd2f1fd11d76eefcdbd58bb7ef9cfe9b4d0eed2e0e1e239dd3bf485ac98039b761e5ed53777584314c26d9a875dc78a1b5d84e989308816dbed7d9f6d277

Field source: openSUSE Leap 16.0 OSS

3.1.2-160000.1.1 / x86_64Observed Sep 1, 2026sha512 820771d9a6c3…bf4c75d1Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 820771d9a6c34e9b86465720660757fba526b77714c88ae3b017fb8dca2ee7b42d7ded44b9bcdc7991a5a10ea8b9a1619753d886a32a68be652311aabf4c75d1

Field source: openSUSE Leap 16.0 OSS

3.1.1-160000.1.1 / aarch64Observed Sep 1, 2026sha512 35ca08045bd3…77842c68Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 35ca08045bd31bd24b34d3018f0f642dfa38d23c557011e0e4e9678876980aaeee90fbece6fb51d387d4ed712f4e3a7888578b81aa50bdc6e65a12bb77842c68

Field source: openSUSE Leap 16.0 OSS

3.1.1-160000.1.1 / ppc64leObserved Sep 1, 2026sha512 ca986e21bfd7…25df01ebSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): ca986e21bfd7af68b3ddc53303ce0920c56b1c3a93fc8e6b43bec7d267fae58ab7a147153853b1bc3e626940e5d2c4afb5f06c84cd0eeba9ddafd4a325df01eb

Field source: openSUSE Leap 16.0 OSS

3.1.1-160000.1.1 / s390xObserved Sep 1, 2026sha512 5ebd755d762b…ca14243dSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 5ebd755d762b15b67499942212041935601a3e79edddd1e540c1984924f137909c3a026f549fb3ac880093a2b604a6b7658fc594a098190cb2320105ca14243d

Field source: openSUSE Leap 16.0 OSS

3.1.1-160000.1.1 / x86_64Observed Sep 1, 2026sha512 235a2e525810…f3e48baeSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 235a2e5258103e243d7e8d985083ce5791ff55f7a25aa539612e369da5d71193b072c75aff42fe9df710e25b27cd959f020cf057c3a6892c9fa9dec8f3e48bae

Field source: openSUSE Leap 16.0 OSS

3.0.6-160000.1.1 / aarch64Observed Sep 1, 2026sha512 2a36816c6916…cae6878bSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 2a36816c6916d269bfbc51675db1fe92cef366d462ebb1cace915d8008dfd914d548a20bdfa2bfa385c300ca666d4a53b63cc8cc6c3bc5e8dda687f1cae6878b

Field source: openSUSE Leap 16.0 OSS

3.0.6-160000.1.1 / ppc64leObserved Sep 1, 2026sha512 e851e86e9140…10f68e82Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): e851e86e9140448a0f1ccf95af837dad5af9d32a62b3c809aa43aa237622f5fa27b00dfd8783d76e8e971fee8e67f13b03d1316735a125921c3839c710f68e82

Field source: openSUSE Leap 16.0 OSS

3.0.6-160000.1.1 / s390xObserved Sep 1, 2026sha512 59f48b6b4c71…d3c78a34Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 59f48b6b4c71b86cac20d279176a7abdeaaef946bfa1e9da499133904b61c5255e42b492bf183ed94b2430c401147ed1c63b1c31e50933113c141d65d3c78a34

Field source: openSUSE Leap 16.0 OSS

3.0.6-160000.1.1 / x86_64Observed Sep 1, 2026sha512 108149183722…f9efb47dSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 10814918372288db1a5603bb19aa407a5a557205b137d181230237e1ead3ba1c5a352dbfaff3bf3ca8ff0771c94c0b8d10e57d6ba11d4023196d81a0f9efb47d

Field source: openSUSE Leap 16.0 OSS

3.0.5-160000.1.1 / aarch64Observed Sep 1, 2026sha512 96415a8f89b8…ee54f842Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 96415a8f89b8c37b93fa5dd4bd61a566da01245bea2c354093a492f7e853ec8cbef89a029206f7fbaa94fb4fda184d082a4f1e44358c89b9e66db7faee54f842

Field source: openSUSE Leap 16.0 OSS

3.0.5-160000.1.1 / ppc64leObserved Sep 1, 2026sha512 95b097c4fe5a…21a4b460Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 95b097c4fe5a569648940d5aa5532b3f48e09eee28ce44481f7fd524d7fa02229958bdce209023214fe3f740c187523fb31c95c4d6deadcf470140ac21a4b460

Field source: openSUSE Leap 16.0 OSS

3.0.5-160000.1.1 / s390xObserved Sep 1, 2026sha512 b08882007f28…46dfde2dSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): b08882007f285c6c121fa182b0ffa712b15af03a1c2e615144b978d2e990d3073383e6655ce4177983a2ade82b6a7c1e3c2e20e8a33840a1329d59fc46dfde2d

Field source: openSUSE Leap 16.0 OSS

3.0.5-160000.1.1 / x86_64Observed Sep 1, 2026sha512 1bbf0131f5cb…772fe521Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 1bbf0131f5cbd9cd4b0a52ecd4da072c780343b2c347e26999ca517f4d99cc9dfcab653c0c3d0c1d8933c6132bd6ae2292df703558c9f85c94e9e3f5772fe521

Field source: openSUSE Leap 16.0 OSS

2.5.3-160000.1.2 / aarch64Observed Sep 1, 2026sha512 a8915038dce2…95ceddcbSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): a8915038dce260d9f0caba8cb76d98a4822a08b4e56f4c97661908a63ecf3516c60ca4b590fc117ceea3c3509de012f9fe7ad402366528e4edfbd39c95ceddcb

Field source: openSUSE Leap 16.0 OSS

2.5.3-160000.1.2 / ppc64leObserved Sep 1, 2026sha512 d4c0d3ddc80d…74162c66Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): d4c0d3ddc80d52c7f8ab2065e4b84d4bf3f391c94764883cb83dbe7bc4417114b5f455bb8e08bbb68bf524f874aabc4fd034e3d3b2e960e78a475bb674162c66

Field source: openSUSE Leap 16.0 OSS

2.5.3-160000.1.2 / s390xObserved Sep 1, 2026sha512 a149b3618bd2…29ff9432Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): a149b3618bd2e5f59088213a45f26aeacc67e736b5d88ff3826ced391e5ad643ffa564f8c7abac3dfb4a73b18eaf6d45edd257d27bd09d4123b58ab029ff9432

Field source: openSUSE Leap 16.0 OSS

2.5.3-160000.1.2 / x86_64Observed Sep 1, 2026sha512 1c28a71faa1a…a4d1f0c7Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha512): 1c28a71faa1a3375f7a9093d8a8af188502cf079cb5f55ccec43023ca74132d118ceb946baf12e2519b6068cb41c775cdccf2787898a321953c57674a4d1f0c7

Field source: openSUSE Leap 16.0 OSS

Sources

  • openSUSE Leap 16.0 OSSSep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

    Repository-signature verification record
    Signed-object SHA-256
    271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Result
    Recorded as verified; digest details unavailable