FreshPorts -- security/rekor: Software Supply Chain Transparency Log (client only)

Port details on branch 2026Q3

rekor Software Supply Chain Transparency Log (client only)

1.5.3_1 security =0 1.5.3_1Version of this port present on the latest quarterly branch.

Maintainer: bofh@FreeBSD.org

Port Added: 2026-07-10 08:24:41

Last Update: 2026-07-10 08:00:52

Commit Hash: c328c3d

License: APACHE20

WWW:

https://www.sigstore.dev/

Description:

Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. Rekor will enable software maintainers and build systems to record signed metadata to an immutable record. Other parties can then query said metadata to enable them to make informed decisions on trust and non-repudiation of an object's lifecycle. The Rekor project provides a restful API based server for validation and a transparency log for storage. A CLI application is available to make and verify entries, query the transparency log for inclusion proof, integrity verification of the transparency log or retrieval of entries by either public key or artifact. Rekor fulfils the signature transparency role of sigstore's software signing infrastructure. However, Rekor can be run on its own and is designed to be extensible to working with different manifest schemas and PKI tooling.

¦ ¦ ¦ ¦

Manual pages:

FreshPorts has no man page information for this port.

pkg-plist: as obtained via: make generate-plist

There is no configure plist information for this port.

USE_RC_SUBR (Service Scripts)

no SUBR information found for this port

Dependency lines:

rekor-client>0:security/rekor

To install the port:

cd /usr/ports/security/rekor/ && make install clean

To add the package, run one of these commands:

pkg install security/rekor
pkg install rekor-client

NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.

PKGNAME: rekor-client

Package flavors (<flavor>: <package>)

client: rekor-client
server: rekor-server

distinfo:

TIMESTAMP = 1783204866 SHA256 (go/security_rekor/rekor-v1.5.3/v1.5.3.mod) = 2d2c82edd7e828e2dd3806af153e2495c9ba1311a3295595d8e9f9508fb4d235 SIZE (go/security_rekor/rekor-v1.5.3/v1.5.3.mod) = 11530

Expand this list (2 items)

Collapse this list.

SHA256 (go/security_rekor/rekor-v1.5.3/v1.5.3.zip) = f78e5fb078e3b38097395cc940bc524616c6ba597ad5d00fde022869a9985a16 SIZE (go/security_rekor/rekor-v1.5.3/v1.5.3.zip) = 1242174

Collapse this list.

Packages (timestamps in pop-ups are UTC):

rekor-client
ABI	aarch64	amd64	armv6	armv7	i386	powerpc	powerpc64	powerpc64le
FreeBSD:13:latest	1.5.1_1	1.5.1_1	-	1.3.10_5	1.5.1_1	n/a	n/a	n/a
FreeBSD:13:quarterly	1.5.1_1	1.5.1_1	-	1.3.10_2	1.5.1_1	n/a	n/a	n/a
FreeBSD:14:latest	1.5.3	1.5.3_1	-	1.3.10_4	1.5.3_1	-	-	-
FreeBSD:14:quarterly	1.5.1_3	1.5.3	-	1.3.10_2	1.5.3_1	-	-	-
FreeBSD:15:latest	1.5.3_1	1.5.3_1	n/a	-	n/a	n/a	-	-
FreeBSD:15:quarterly	1.5.3	1.5.3_1	n/a	-	n/a	n/a	-	-
FreeBSD:16:latest	1.5.2_1	1.5.3_1	n/a	-	n/a	n/a	-	-

rekor-server
ABI	aarch64	amd64	armv6	armv7	i386	powerpc	powerpc64	powerpc64le
FreeBSD:13:latest	1.5.1_1	1.5.1_1	-	1.3.10_5	1.5.1_1	n/a	n/a	n/a
FreeBSD:13:quarterly	1.5.1_1	1.5.1_1	-	1.3.10_2	1.5.1_1	n/a	n/a	n/a
FreeBSD:14:latest	1.5.3	1.5.3_1	-	1.3.10_4	1.5.3_1	-	-	-
FreeBSD:14:quarterly	1.5.1_3	1.5.3	-	1.3.10_2	1.5.3_1	-	-	-
FreeBSD:15:latest	1.5.3_1	1.5.3_1	n/a	-	n/a	n/a	-	-
FreeBSD:15:quarterly	1.5.3	1.5.3_1	n/a	-	n/a	n/a	-	-
FreeBSD:16:latest	1.5.2_1	1.5.3_1	n/a	-	n/a	n/a	-	-

Dependencies

NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.

Build dependencies:

go125 : lang/go125

Fetch dependencies:

go125 : lang/go125

There are no ports dependent upon this port

Configuration Options:

No options to configure

Options name:

security_rekor

USES:

cpe go:modules zip

FreshPorts was unable to extract/find any pkg message

Master Sites:

Expand this list (1 items)

Collapse this list.

https://proxy.golang.org/github.com/sigstore/rekor/@v/

Collapse this list.

Number of commits found: 1

Commit	Credits	Log message
Commit History - (may be incomplete: for full details, see links to repositories near top of page)
1.5.3_1 10 Jul 2026 08:00:52	Dag-Erling Smørgrav (des)	various: Bump go ports for go-1.25.12 / 1.26.5

Number of commits found: 1

Login
User Login Create account

Servers and bandwidth provided by
New York Internet, iXsystems, and RootBSD

This site
What is FreshPorts? About the authors Issues FAQ How big is it? Security Policy Privacy Blog Contact

Search
Enter Keywords: more...

Latest Vulnerabilities

ocaml-opam	Jul 14
poppler	Jul 14
poppler-glib	Jul 14
poppler-qt5	Jul 14
poppler-qt6	Jul 14
poppler-utils	Jul 14
apache-commons-httpclient	Jul 10
apache-commons-httpclient	Jul 10
httpclient	Jul 10
gitlab	Jul 09
mailpit	Jul 09
xorg-server	Jul 08
xwayland	Jul 08
emacs	Jul 06
emacs-devel	Jul 06

21 vulnerabilities affecting 314 ports have been reported in the past 14 days

^* - modified, not new

All vulnerabilities

Last processed:
2026-07-14 13:10:40 UTC

Ports
Home Categories Deleted ports Sanity Test Failures Newsfeeds

Statistics

Graphs
NEW Graphs (Javascript)

Calculated hourly:

Port count	34867
Broken	89
Deprecated	292
Ignore	205
Forbidden	0
Restricted	1
No CDROM	1
Vulnerable	45
Expired	19
Set to expire	216
Interactive	0
new 24 hours	20
new 48 hours	30
new 7 days	142
new fortnight	285
new month	430