BSD Ports

security/cosign 3.1.4 FreeBSD

Signing OCI containers and other artifacts using Sigstore

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
355a486ec3
License
APACHE20
Categories
security
Package size
18872.0 KiB, 90256.3 KiB installed

Description

Cosign aims to make signatures invisible infrastructure.

Cosign supports:

  • "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log (default)
  • Hardware and KMS signing
  • Signing with a cosign generated encrypted private/public keypair
  • Container Signing, Verification and Storage in an OCI registry.
  • Bring-your-own PKI

In the other systems

SystemPortVersion
FreeBSDsecurity/cosign3.1.4
OpenBSDsecurity/cosign3.1.2

Install

Binary package:

pkg install cosign

From the ports tree:

cd /usr/ports/security/cosign/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	cosign>0:security/cosign

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest3.1.3_43.1.3_4-2.5.3_13.1.3_4
FreeBSD:14:quarterly3.1.3_43.1.3_4n/a2.5.13.1.3_4
FreeBSD:15:latest3.1.3_43.1.3_4n/a-2.5.3_1
FreeBSD:15:quarterly3.1.3_43.1.3_4n/an/an/a
FreeBSD:16:latest3.1.3_33.1.3_4n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

Build dependencies 1

No port depends on this one.

Configuration

No options to configure.

USES
cpe go:modules
Service scripts
none

Files

distinfo 2
FileSizeSHA256
go/security_cosign/cosign-v3.1.4/v3.1.4.mod158183ab9456629ccb0af80e0f2c5b197a0f09b9d83bfcc0152ec9add1e3499d86327
go/security_cosign/cosign-v3.1.4/v3.1.4.zip1.377315e+0698b7e685c7f7c3567a895d0cc7393747174419b4751855df6c9e4c52c9e94720

Commit history 10

DateCommitCreditsLog message
355a486ec3 Muhammad Moinur Rahman security/cosign: Update version 3.1.3=>3.1.4
Changelog: https://github.com/sigstore/cosign/releases/tag/v3.1.4
d81b7ba3c3 Dag-Erling Smørgrav various: Bump Go ports for Go 1.26.10 / 1.27.3
031fc6bfbf Dag-Erling Smørgrav various: Bump Go ports
2c73fa4d6e Dag-Erling Smørgrav various: Drop Go 1.26+ version pin
This is a nop since 1.26 is the oldest supported version.
dd0905142a Adam Weinberger many: Bump go ports for 1.26.8 and 1.27.1

The latest 5 of 10 in the history this site was built from.