Linux workstation

openSUSE Leap 16.0 native package

rekor

Journal de transparence de la chaîne d'approvisionnement

Packages / openSUSE Leap 16.0 / Unspecified / rekor

[Source: rekor]

Package: rekor (1.3.10-160000.2.2)

[Project overview: rekor]

External Resources:

Homepage: [github.com]

Journal de transparence de la chaîne d'approvisionnement

Les objectifs de Rekor sont de fournir un registre immuable et résistant à la falsification de métadonnées générées au sein de la chaîne d'approvisionnement d'un projet logiciel. Rekor permettra aux mainteneurs de logiciels et aux systèmes de build d'enregistrer des métadonnées signées dans un enregistrement immuable. D'autres parties peuvent ensuite interroger ces métadonnées pour prendre des décisions éclairées sur la confiance et la non-répudiation du cycle de vie d'un objet. Pour plus de détails, visitez le site web de sigstore Le projet Rekor fournit un serveur basé sur une API restful pour la validation et un journal de transparence pour le stockage. Une application CLI est disponible pour créer et vérifier des entrées, interroger le journal de transparence pour une preuve d'inclusion, vérifier l'intégrité du journal de transparence ou récupérer des entrées par clé publique ou artefact. Rekor remplit le rôle de transparence des signatures de l'infrastructure de signature logicielle de sigstore. Cependant, Rekor peut être exécuté seul et est conçu pour être extensible afin de travailler avec différents schémas de manifeste et outils PKI.

Other Packages Related to rekor:

  • dep: /bin/bash

    Package not available

  • dep: libc.so.6(GLIBC_2.34)(64bit)

    Package not available

Download rekor

ArchitecturePackage SizeInstalled SizeFiles
aarch6423 MiB106 MiB[list of files]
ppc64le22 MiB112 MiB[list of files]
s390x23 MiB115 MiB[list of files]
x86_6425 MiB111 MiB[list of files]

Chemins de fichiers du paquet (16)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/rekor-cli
  • /usr/bin/rekor-server
  • /usr/bin/rekor-zypp-verify
  • /usr/share/doc/packages/rekor
  • /usr/share/doc/packages/rekor/CHANGELOG.md
  • /usr/share/doc/packages/rekor/CODE_OF_CONDUCT.md
  • /usr/share/doc/packages/rekor/CONTRIBUTORS.md
  • /usr/share/doc/packages/rekor/DEPRECATIONS.md
  • /usr/share/doc/packages/rekor/FEATURES.md
  • /usr/share/doc/packages/rekor/MAINTAINERS.md
  • /usr/share/doc/packages/rekor/oid-info.md
  • /usr/share/doc/packages/rekor/OWNERS.md
  • /usr/share/doc/packages/rekor/README.md
  • /usr/share/doc/packages/rekor/types.md
  • /usr/share/licenses/rekor
  • /usr/share/licenses/rekor/LICENSE

Field source: openSUSE Leap 16.0 OSS revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

Utiliser ce paquet

OpenFactory peut démarrer ce système d'exploitation dans une machine virtuelle du navigateur, ou lancer une construction qui inclut le nom natif du paquet de cet enregistrement.

Essayer openSUSE Leap 16.0 dans le navigateurConstruire une image qui inclut rekor

Versions, suites et dépôts

Chaque ligne est une métadonnée d'index pour une version, une architecture, une suite et un dépôt. Noms, URL et tailles viennent de la source ; un lien est un emplacement de récupération mutable, pas une redistribution OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
1.3.10-160000.2.2leap-16.0 / ossaarch64openSUSE Leap 16.0 · OSS · multi-architecture23 MiB106 MiBaarch64/rekor-1.3.10-160000.2.2.aarch64.rpm
1.3.10-160000.2.2leap-16.0 / ossppc64leopenSUSE Leap 16.0 · OSS · multi-architecture22 MiB112 MiBppc64le/rekor-1.3.10-160000.2.2.ppc64le.rpm
1.3.10-160000.2.2leap-16.0 / osss390xopenSUSE Leap 16.0 · OSS · multi-architecture23 MiB115 MiBs390x/rekor-1.3.10-160000.2.2.s390x.rpm
1.3.10-160000.2.2leap-16.0 / ossx86_64openSUSE Leap 16.0 · OSS · multi-architecture25 MiB111 MiBx86_64/rekor-1.3.10-160000.2.2.x86_64.rpm

Field source: openSUSE Leap 16.0 OSS revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

Empreintes et dates d'observation

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

1.3.10-160000.2.2 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha512: d079c40bc2c8d934a2001e06d0210bd1af809c7fe23017b1e48237fa0e14a969c67df6d7b277ab123625f775c41caf1cc0534fc53f8a44e9f471af50034ff1a1

Field source: openSUSE Leap 16.0 OSS revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

1.3.10-160000.2.2 / ppc64leObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha512: 5cad0e4f2ff0a573c1ec15d472b00e2773043c28aab7849241aa45c51375ca8e75222af294895dc2faca459c46b142cde940b87afd585fc5e4da4f4df68bdf47

Field source: openSUSE Leap 16.0 OSS revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

1.3.10-160000.2.2 / s390xObserved Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha512: 11f7590cd86f656260feb074618fefcfc56d600cc8376af0b44e0c2cd9448414659f9852420290c44fb1eee79a3c3bc65b4f0303976510d2de1b7f5e2fc0b871

Field source: openSUSE Leap 16.0 OSS revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

1.3.10-160000.2.2 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha512: 5e1540ab9ee3f17c585fd54d7c4aa4505897ac5435834fbdb68a3f39cb1531a25ab9f816857d9ad83db8c5baed838af6e8eb031cc312d09b5747dc6b7e4b3b01

Field source: openSUSE Leap 16.0 OSS revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

Complétude de la fiche

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
15/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 100/100

Field source: openSUSE Leap 16.0 OSS revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources et provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • openSUSE Leap 16.0 OSSSep 1, 2026

    Authoritative source; repository metadata signature verified, revision leap-16-0-oss-multiarch:271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    271b36d440253edf9871ac0c100319fc7443d8f2d54b6b449a72e9414c51577c
    Signer fingerprint
    AD485664E901B867051AB15F35A2F86E29B700A4
    Keyring revision
    opensuse-project-signing-key.asc
    SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified