Subcommands81 subcommands
cosign attach
Provides utilities for attaching artifacts to other artifacts in a registry
cosign attach attestation
Attach attestation to the supplied container image
cosign attach sbom
Attach sbom to the supplied container image
cosign attach signature
Attach signatures to the supplied container image
cosign attest
Attest the supplied container image
cosign clean
Remove all signatures from an image
cosign completion
Generate completion script
cosign copy
Copy the supplied container image and signatures
cosign dockerfile
Provides utilities for discovering images in and performing operations on Dockerfiles
cosign dockerfile verify
Verify a signature on the base image specified in the Dockerfile
cosign download
Provides utilities for downloading artifacts and attached artifacts in a registry
cosign download attestation
Download in-toto attestations from the supplied container image
cosign download sbom
Download SBOMs from the supplied container image
cosign download signature
Download signatures from the supplied container image
cosign generate
Generates (unsigned) signature payloads from the supplied container image
cosign generate-key-pair
Generates a key-pair
cosign import-key-pair
Imports a PEM-encoded RSA or EC private key
cosign initialize
Initializes SigStore root to retrieve trusted certificate and key targets for verification
cosign load
Load a signed image on disk to a remote registry
cosign login
Log in to a registry
cosign manifest
Provides utilities for discovering images in and performing operations on Kubernetes manifests
cosign manifest verify
Verify all signatures of images specified in the manifest
cosign piv-tool
This cosign was not built with piv-tool support!
cosign pkcs11-tool
This cosign was not built with pkcs11-tool support!
cosign policy
Subcommand to manage a keyless policy
cosign policy init
Generate a new keyless policy
cosign policy sign
Sign a keyless policy
cosign public-key
Gets a public key from the key-pair
cosign save
Save the container image and associated signatures to disk at the specified directory
cosign sign
Sign the supplied container image
cosign sign-blob
Sign the supplied blob, outputting the base64-encoded signature to stdout
cosign tree
Display supply chain security related artifacts for an image such as signatures, SBOMs and attestations
cosign triangulate
Outputs the located cosign image reference. This is the location cosign stores the specified artifact type
cosign upload
Provides utilities for uploading artifacts to a registry
cosign upload blob
Upload one or more blobs to the supplied container image address
cosign upload wasm
Upload a wasm module to the supplied container image reference
cosign verify
Verify a signature on the supplied container image
cosign verify-attestation
Verify an attestation on the supplied container image
cosign verify-blob
Verify a signature on the supplied blob
cosign version
Prints the version
cosign help
Help about any command
cosign help attach
Provides utilities for attaching artifacts to other artifacts in a registry
cosign help attach attestation
Attach attestation to the supplied container image
cosign help attach sbom
Attach sbom to the supplied container image
cosign help attach signature
Attach signatures to the supplied container image
cosign help attest
Attest the supplied container image
cosign help clean
Remove all signatures from an image
cosign help completion
Generate completion script
cosign help copy
Copy the supplied container image and signatures
cosign help dockerfile
Provides utilities for discovering images in and performing operations on Dockerfiles
cosign help dockerfile verify
Verify a signature on the base image specified in the Dockerfile
cosign help download
Provides utilities for downloading artifacts and attached artifacts in a registry
cosign help download attestation
Download in-toto attestations from the supplied container image
cosign help download sbom
Download SBOMs from the supplied container image
cosign help download signature
Download signatures from the supplied container image
cosign help generate
Generates (unsigned) signature payloads from the supplied container image
cosign help generate-key-pair
Generates a key-pair
cosign help import-key-pair
Imports a PEM-encoded RSA or EC private key
cosign help initialize
Initializes SigStore root to retrieve trusted certificate and key targets for verification
cosign help load
Load a signed image on disk to a remote registry
cosign help login
Log in to a registry
cosign help manifest
Provides utilities for discovering images in and performing operations on Kubernetes manifests
cosign help manifest verify
Verify all signatures of images specified in the manifest
cosign help piv-tool
This cosign was not built with piv-tool support!
cosign help pkcs11-tool
This cosign was not built with pkcs11-tool support!
cosign help policy
Subcommand to manage a keyless policy
cosign help policy init
Generate a new keyless policy
cosign help policy sign
Sign a keyless policy
cosign help public-key
Gets a public key from the key-pair
cosign help save
Save the container image and associated signatures to disk at the specified directory
cosign help sign
Sign the supplied container image
cosign help sign-blob
Sign the supplied blob, outputting the base64-encoded signature to stdout
cosign help tree
Display supply chain security related artifacts for an image such as signatures, SBOMs and attestations
cosign help triangulate
Outputs the located cosign image reference. This is the location cosign stores the specified artifact type
cosign help upload
Provides utilities for uploading artifacts to a registry
cosign help upload blob
Upload one or more blobs to the supplied container image address
cosign help upload wasm
Upload a wasm module to the supplied container image reference
cosign help verify
Verify a signature on the supplied container image
cosign help verify-attestation
Verify an attestation on the supplied container image
cosign help verify-blob
Verify a signature on the supplied blob
cosign help version
Prints the version
