FreshPorts -- security/rekor: Software Supply Chain Transparency Log (client only)

Port details on branch 2026Q1

rekor Software Supply Chain Transparency Log (client only)

1.4.3_3 security =0 1.5.1_3Version of this port present on the latest quarterly branch.

Maintainer: bofh@FreeBSD.org

Port Added: 2026-01-25 01:42:26

Last Update: 2026-03-06 03:52:43

Commit Hash: ef8f442

License: APACHE20

WWW:

https://www.sigstore.dev/

Description:

Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. Rekor will enable software maintainers and build systems to record signed metadata to an immutable record. Other parties can then query said metadata to enable them to make informed decisions on trust and non-repudiation of an object's lifecycle. The Rekor project provides a restful API based server for validation and a transparency log for storage. A CLI application is available to make and verify entries, query the transparency log for inclusion proof, integrity verification of the transparency log or retrieval of entries by either public key or artifact. Rekor fulfils the signature transparency role of sigstore's software signing infrastructure. However, Rekor can be run on its own and is designed to be extensible to working with different manifest schemas and PKI tooling.

¦ ¦ ¦ ¦

Manual pages:

FreshPorts has no man page information for this port.

pkg-plist: as obtained via: make generate-plist

There is no configure plist information for this port.

USE_RC_SUBR (Service Scripts)

no SUBR information found for this port

Dependency lines:

rekor-client>0:security/rekor

To install the port:

cd /usr/ports/security/rekor/ && make install clean

To add the package, run one of these commands:

pkg install security/rekor
pkg install rekor-client

NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.

PKGNAME: rekor-client

Package flavors (<flavor>: <package>)

client: rekor-client
server: rekor-server

distinfo:

TIMESTAMP = 1765531221 SHA256 (go/security_rekor/rekor-v1.4.3/v1.4.3.mod) = 58b176e1936bf2f137e19f8ec737e9a91c16d5eedb7848d2d07ce051ab630965 SIZE (go/security_rekor/rekor-v1.4.3/v1.4.3.mod) = 11819

Expand this list (2 items)

Collapse this list.

SHA256 (go/security_rekor/rekor-v1.4.3/v1.4.3.zip) = 9b2b6f67515fec43cb16668de0239f5074bf0584e3f3cd0729ecf25e9a34d085 SIZE (go/security_rekor/rekor-v1.4.3/v1.4.3.zip) = 1220674

Collapse this list.

No package information for this port in our database: Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link:

Dependencies

NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.

Build dependencies:

go124 : lang/go124

Fetch dependencies:

go124 : lang/go124

There are no ports dependent upon this port

Configuration Options:

No options to configure

Options name:

security_rekor

USES:

cpe go:modules zip

FreshPorts was unable to extract/find any pkg message

Master Sites:

Expand this list (1 items)

Collapse this list.

https://proxy.golang.org/github.com/sigstore/rekor/@v/

Collapse this list.

Number of commits found: 3

Commit	Credits	Log message
Commit History - (may be incomplete: for full details, see links to repositories near top of page)
1.4.3_3 06 Mar 2026 03:52:43	Adam Weinberger (adamw)	various: Bump ports for Go 1.25.8 This is a direct commit to 2026Q1.
1.4.3_2 05 Feb 2026 18:02:36	Adam Weinberger (adamw)	various: Bump Go ports for 1.24.13 This is a direct commit to 2026Q1.
1.4.3_1 25 Jan 2026 01:35:05	Adam Weinberger (adamw)	various: Bump dependent ports for Go 1.24.12. This is a direct commit to 2026Q1.

Number of commits found: 3

Login
User Login Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts? About the authors Issues FAQ How big is it? Security Policy Privacy Blog Contact

Search
Enter Keywords: more...

Latest Vulnerabilities

python310^*	Jun 19
python310^*	Jun 19
python310^*	Jun 19
python310^*	Jun 19
python311^*	Jun 19
python311^*	Jun 19
python311^*	Jun 19
python311^*	Jun 19
python312^*	Jun 19
python312^*	Jun 19
python312^*	Jun 19
python312^*	Jun 19
python313^*	Jun 19
python313^*	Jun 19
python313^*	Jun 19

39 vulnerabilities affecting 421 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last processed:
2026-06-21 13:04:26 UTC

Ports
Home Categories Deleted ports Sanity Test Failures Newsfeeds

Statistics

Graphs
NEW Graphs (Javascript)

Calculated hourly:

Port count	34591
Broken	78
Deprecated	324
Ignore	194
Forbidden	0
Restricted	1
No CDROM	1
Vulnerable	41
Expired	14
Set to expire	251
Interactive	0
new 24 hours	1
new 48 hours	6
new 7 days	36
new fortnight	58
new month	142