Cosign

cosignSecurity & secretsBy sigstore ↗

GitHub repository ↗Read documentation ↗

Sign and verify container images and artifacts.

For your agent

Use cosign to sign and verify container images and artifacts.

Agent/AI workflow support: Not marked in source list (source list)

Example command

cosign --help

Run after following the project’s setup instructions. Local files, credentials, or a connected service may be required.

What it does

Image signing
Artifact signatures
Signature verification

Homebrew installs

cosign ↗

Explicitly requested installation events

30 days: 3,040
90 days: 10,589
365 days: 56,111

From Homebrew installations that report analytics. Includes package variants; counts are not unique users.

Checked Sep 10, 2026. Source dated Sep 10, 2026. How installs are counted ↗

Repository activity

Commits per week · GitHub snapshot

71 commits over 12 weeks

Tap, hover, or use the arrow keys to inspect weekly commits. The latest week may be incomplete.

Commands and capabilities are described from the project documentation. Repository statistics cover sigstore/cosign, which may contain more than the CLI. Listing a tool does not mean every command has been tested with every agent.