notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC		 Ukraine
The recently imposed "must be logged in" restriction is a response to increased bot traffic on the site. This affects search, commits, and vuxml pages.
Search engines are not blocked. Try using "site:www.freshports.org" and your search terms.
Port details on branch 2026Q2
cosign Signing OCI containers and other artifacts using Sigstore
3.0.5_3 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 3.0.5_3Version of this port present on the latest quarterly branch.
Maintainer: bofh@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2026-04-10 17:07:00
Last Update: 2026-06-03 18:00:48
Commit Hash: 3d69120
License: APACHE20
WWW:
https://www.sigstore.dev/
Description:
Cosign aims to make signatures invisible infrastructure. Cosign supports: - "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log (default) - Hardware and KMS signing - Signing with a cosign generated encrypted private/public keypair - Container Signing, Verification and Storage in an OCI registry. - Bring-your-own PKI
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (4 items)
Collapse this list.
  1. bin/cosign
  2. /usr/local/share/licenses/cosign-3.0.5_3/catalog.mk
  3. /usr/local/share/licenses/cosign-3.0.5_3/LICENSE
  4. /usr/local/share/licenses/cosign-3.0.5_3/APACHE20
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • cosign>0:security/cosign
To install the port:
cd /usr/ports/security/cosign/ && make install clean
To add the package, run one of these commands:
  • pkg install security/cosign
  • pkg install cosign
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: cosign
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1774009048 SHA256 (go/security_cosign/cosign-v3.0.5/v3.0.5.mod) = 0599cd8250bf549694b42169a6ba0f382844daaa36c47c8c1b151d02564d0d79 SIZE (go/security_cosign/cosign-v3.0.5/v3.0.5.mod) = 16368

Expand this list (2 items)

Collapse this list.

SHA256 (go/security_cosign/cosign-v3.0.5/v3.0.5.zip) = 194de9853f2eb11ea5e2004ff16c2dcc9994a1e3297b1ec661decd5afba4e7c3 SIZE (go/security_cosign/cosign-v3.0.5/v3.0.5.zip) = 1342881

Collapse this list.

Packages (timestamps in pop-ups are UTC):
cosign
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest3.0.6_13.0.6_1-2.6.03.0.6_1n/an/an/a
FreeBSD:13:quarterly3.0.5_13.0.5_1-2.5.13.0.5_1n/an/an/a
FreeBSD:14:latest3.0.6_23.0.6_3-2.5.3_13.0.6_3---
FreeBSD:14:quarterly3.0.5_23.0.5_3-2.5.13.0.5_3---
FreeBSD:15:latest3.0.6_23.0.6_3n/a-n/an/a--
FreeBSD:15:quarterly3.0.5_33.0.5_3n/a-n/an/a--
FreeBSD:16:latest3.0.6_23.0.6_3n/a-n/an/a--
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. go125 : lang/go125
Fetch dependencies:
  1. go125 : lang/go125
There are no ports dependent upon this port
Configuration Options:
No options to configure
Options name:
security_cosign
USES:
cpe go:modules zip
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://proxy.golang.org/github.com/sigstore/cosign/v3/@v/
Collapse this list.

Number of commits found: 3

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
3.0.5_3
03 Jun 2026 18:00:48
commit hash: 3d69120c306222a137dfeae569a2da22bc33239ccommit hash: 3d69120c306222a137dfeae569a2da22bc33239ccommit hash: 3d69120c306222a137dfeae569a2da22bc33239ccommit hash: 3d69120c306222a137dfeae569a2da22bc33239c files touched by this commit		 Dag-Erling Smørgrav (des) search for other commits by this committer 
various: Bump go ports for go-1.25.11 / go-1.26.4
3.0.5_2
09 May 2026 17:30:33
commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654commit hash: a67ac1c1ac354b79ab6fab7d07a32be91e2c3654 files touched by this commit		 Adam Weinberger (adamw) search for other commits by this committer 
various: Bump ports for Go 1.25.10
3.0.5_1
10 Apr 2026 16:19:03
commit hash: 9c91901491db265de51255eeec8093989f724305commit hash: 9c91901491db265de51255eeec8093989f724305commit hash: 9c91901491db265de51255eeec8093989f724305commit hash: 9c91901491db265de51255eeec8093989f724305 files touched by this commit		 Dag-Erling Smørgrav (des) search for other commits by this committer 
various: Bump go ports for go-1.25.9 / 1.26.2

Number of commits found: 3
Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts?
About the authors
Issues
FAQ
How big is it?
Security Policy
Privacy
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
mariadb1011-server*Jun 30
mariadb106-server*Jun 30
mariadb114-server*Jun 30
mariadb118-server*Jun 30
gitlabJun 06
apache24Jun 04
powerdnsJun 04
xorg-serverJun 01
xwaylandJun 01
chromiumMay 30
ungoogled-chromiumMay 30
gohugoMay 29
erlangMay 28
erlangMay 28
erlang-runtime27May 28

24 vulnerabilities affecting 284 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities

Last processed:
2026-06-06 05:11:57 UTC


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds

Statistics
Graphs
NEW Graphs (Javascript)

Calculated hourly:
Port count 34560
Broken 101
Deprecated 260
Ignore 215
Forbidden 0
Restricted 1
No CDROM 1
Vulnerable 40
Expired 15
Set to expire 193
Interactive 0
new 24 hours 3
new 48 hours6
new 7 days31
new fortnight79
new month159
Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD 		Valid HTML, CSS, and RSS. Copyright © 2000-2026 Dan Langille. All rights reserved.