Cosign (cosign)
Artefact signing.
Generated from catalog/components/cosign.yaml: do not edit by hand.
| Purpose | Artefact signing |
| Kit capability | Artefact signing |
| Plane | infrastructure and DevSecOps |
| State | integrated |
| Pinned version | 2.6.5 |
| Licence | Apache-2.0 |
| Licence text | https://raw.githubusercontent.com/sigstore/cosign/v2.6.5/LICENSE (checked on 2026-10-30) |
| Licence status | allowed |
| Licence exception | - |
| Upstream repository | https://github.com/sigstore/cosign |
| Owner | security-engineering |
| Distribution | CI tool |
Images and version pins
| Role | Kind | File | Value |
|---|---|---|---|
| CI | text | tools/oci/fetch.sh | COSIGN_VERSION="2.6.5" |
Container images
No container image is pinned by reference in this manifest.
Dependencies
This component has no dependency.
Operations
| Supported | install, configure, upgrade, rollback, decommission |
| Not supported | start, stop, restart, rolling-restart, drain, scale, backup, restore, repair, rotate |
Back to the component index.