FreshPorts -- security/rekor: Software Supply Chain Transparency Log (client only)

Port details on branch 2025Q4

rekor Software Supply Chain Transparency Log (client only)

1.3.10_6 security =0 1.3.10_6Version of this port present on the latest quarterly branch.

Maintainer: bofh@FreeBSD.org

Port Added: 2025-11-01 15:53:31

Last Update: 2025-11-01 15:48:35

Commit Hash: ae07b4c

License: APACHE20

WWW:

https://www.sigstore.dev/

Description:

Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. Rekor will enable software maintainers and build systems to record signed metadata to an immutable record. Other parties can then query said metadata to enable them to make informed decisions on trust and non-repudiation of an object's lifecycle. The Rekor project provides a restful API based server for validation and a transparency log for storage. A CLI application is available to make and verify entries, query the transparency log for inclusion proof, integrity verification of the transparency log or retrieval of entries by either public key or artifact. Rekor fulfils the signature transparency role of sigstore's software signing infrastructure. However, Rekor can be run on its own and is designed to be extensible to working with different manifest schemas and PKI tooling.

¦ ¦ ¦ ¦

Manual pages:

FreshPorts has no man page information for this port.

pkg-plist: as obtained via: make generate-plist

There is no configure plist information for this port.

USE_RC_SUBR (Service Scripts)

no SUBR information found for this port

Dependency lines:

rekor-client>0:security/rekor

To install the port:

cd /usr/ports/security/rekor/ && make install clean

To add the package, run one of these commands:

pkg install security/rekor
pkg install rekor-client

NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.

PKGNAME: rekor-client

Package flavors (<flavor>: <package>)

client: rekor-client
server: rekor-server

distinfo:

TIMESTAMP = 1746289423 SHA256 (go/security_rekor/rekor-v1.3.10/v1.3.10.mod) = 788c563e936db5816de40e7ff4a7f58ffa8d184fbe99842eec058da0d3b8f65d SIZE (go/security_rekor/rekor-v1.3.10/v1.3.10.mod) = 11137

Expand this list (2 items)

Collapse this list.

SHA256 (go/security_rekor/rekor-v1.3.10/v1.3.10.zip) = 6a65d2c266a8ac2351061716142c9cb373abec19c892d4b5c0c83e21bf2b3789 SIZE (go/security_rekor/rekor-v1.3.10/v1.3.10.zip) = 1193215

Collapse this list.

Packages (timestamps in pop-ups are UTC):

rekor-client
ABI	aarch64	amd64	armv6	armv7	i386	powerpc	powerpc64	powerpc64le
FreeBSD:13:latest	1.3.10_7	1.3.10_8	-	1.3.10_5	1.3.10_8	n/a	n/a	n/a
FreeBSD:13:quarterly	1.3.10_5	1.3.10_6	-	1.3.10_2	1.3.10_6	n/a	n/a	n/a
FreeBSD:14:latest	1.3.10_7	1.3.10_8	-	1.3.10_4	1.3.10_8	-	-	-
FreeBSD:14:quarterly	1.3.10_6	1.3.10_6	-	1.3.10_2	1.3.10_6	-	-	-
FreeBSD:15:latest	1.3.10_8	1.3.10_8	n/a	-	n/a	n/a	-	-
FreeBSD:15:quarterly	1.3.10_6	1.3.10_6	n/a	-	n/a	n/a	-	-
FreeBSD:16:latest	1.3.10_8	1.3.10_8	n/a	-	n/a	n/a	-	-

rekor-server
ABI	aarch64	amd64	armv6	armv7	i386	powerpc	powerpc64	powerpc64le
FreeBSD:13:latest	1.3.10_7	1.3.10_8	-	1.3.10_5	1.3.10_8	n/a	n/a	n/a
FreeBSD:13:quarterly	1.3.10_5	1.3.10_6	-	1.3.10_2	1.3.10_6	n/a	n/a	n/a
FreeBSD:14:latest	1.3.10_7	1.3.10_8	-	1.3.10_4	1.3.10_8	-	-	-
FreeBSD:14:quarterly	1.3.10_6	1.3.10_6	-	1.3.10_2	1.3.10_6	-	-	-
FreeBSD:15:latest	1.3.10_8	1.3.10_8	n/a	-	n/a	n/a	-	-
FreeBSD:15:quarterly	1.3.10_6	1.3.10_6	n/a	-	n/a	n/a	-	-
FreeBSD:16:latest	1.3.10_8	1.3.10_8	n/a	-	n/a	n/a	-	-

Dependencies

NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.

Build dependencies:

go124 : lang/go124

Fetch dependencies:

go124 : lang/go124

There are no ports dependent upon this port

Configuration Options:

No options to configure

Options name:

security_rekor

USES:

cpe go:1.24,modules zip

FreshPorts was unable to extract/find any pkg message

Master Sites:

Expand this list (1 items)

Collapse this list.

https://proxy.golang.org/github.com/sigstore/rekor/@v/

Collapse this list.

Number of commits found: 1

Commit History - (may be incomplete: for full details, see links to repositories near top of page)

Commit

Credits

Log message

1.3.10_6
01 Nov 2025 15:48:35

Adam Weinberger (adamw)

various: Bump Go ports for 1.24.9

This is a direct commit to 2025Q4. It'll definitely bring things (esp.
PORTREVISION lines) out of sync with main, but trying to MFH the
associated bump commit would bring in a massive quantity of conflicts.

Number of commits found: 1

Login
User Login Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts? About the authors Issues FAQ How big is it? Security Policy Privacy Blog Contact

Search
Enter Keywords: more...

Latest Vulnerabilities

apache24	Dec 04
libvirt	Dec 04
go124	Dec 03
go125	Dec 03
mongodb70	Dec 01
mongodb70	Dec 01
mongodb70	Dec 01
mongodb80	Dec 01
mongodb80	Dec 01
mongodb80	Dec 01
wolfssl	Nov 30
mongodb70	Nov 29
mongodb80	Nov 29
gitlab	Nov 27
png	Nov 27

12 vulnerabilities affecting 110 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last processed:
2025-12-04 19:31:56 UTC

Ports
Home Categories Deleted ports Sanity Test Failures Newsfeeds

Statistics

Graphs
NEW Graphs (Javascript)

Calculated hourly:

Port count	33978
Broken	118
Deprecated	249
Ignore	234
Forbidden	0
Restricted	2
No CDROM	1
Vulnerable	38
Expired	8
Set to expire	191
Interactive	0
new 24 hours	2
new 48 hours	7
new 7 days	41
new fortnight	55
new month	133