OSS Support Hub / Security

Go Security Apache-2.0 Latest: v3.1.1

Cosign

Container signing, verification, and storage in an OCI registry — part of the Sigstore project

Project Health at a Glance

Live data from GitHub, updated daily.

6.1K+101
GitHub Stars
📦
v3.1.1
Latest Release · 20 days ago
🔄
28d
Avg. Release Cadence
🐛
152
Open Issues
📅
6 days ago
Last Commit
🔒
✓ Clean
No Active CVEs

Data last fetched: 2026-06-29

Known Vulnerabilities

✓ No active CVEs found for Cosign in OSV.dev

Alternatives to Cosign

Other Security projects in the Go ecosystem worth evaluating.

Support Options for Cosign

Enterprise Support via DepKeep

Get SLA-backed support, security patches, and direct access to senior engineers for Cosign — without relying on volunteer maintainers.

Community Channels