DepKeep

OSS Support Hub / Security

Go Security Apache-2.0 Latest: v3.0.6

Cosign

Container signing, verification, and storage in an OCI registry — part of the Sigstore project

GitHub
Health Metrics

Project Health at a Glance

Live data from GitHub, updated daily.

⭐
5.9K
GitHub Stars
📦
v3.0.6
Latest Release · 1 months ago
🔄
23d
Avg. Release Cadence
🐛
156
Open Issues
📅
4 days ago
Last Commit
🔒
✓ Clean
No Active CVEs

Data last fetched: 2026-05-15

Security

Known Vulnerabilities

✓ No active CVEs found for Cosign in OSV.dev

Ecosystem

Alternatives to Cosign

Other Security projects in the Go ecosystem worth evaluating.

notary → in-toto → slsa →
Get Help

Support Options for Cosign

Enterprise Support via DepKeep

Get SLA-backed support, security patches, and direct access to senior engineers for Cosign — without relying on volunteer maintainers.

Talk to an Expert →

Community Channels

GitHub Discussions →Slack →