A CLI tool to sign and verify artifacts
Signs and verifies OCI artifacts using X.509 certificates and a trust policy.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 502
- Latest
- v1.3.2
- Last push
- 2026-09-25
alternatives to
Cosign
Code signing and transparency for containers and binaries
Notation. 1 alternatives to Cosign, in Go. Compare fit, licence, stars and the latest signed release.
Side by side
| Tool | Fit | Stars | Licence | Terms | Self-hosted | Language | Latest | Last push |
|---|---|---|---|---|---|---|---|---|
| Notation | Full replacement | 502 | Apache-2.0 | Open source | No | Go | v1.3.2 | 2026-09-25 |
Every alternative
1 alternative
About Cosign
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 6.4k
- Last push
- 2026-10-16