otty / apps
All apps/Rekor CLI

Rekor CLI

rekor-cli

Command-line client for the Rekor transparency log.

Runs as rekor-cli|macOS, Linux, Windows|github.com
Open form in Otty otty.toml

Command form

ai-draft · 2 tasks · 12 fields

Look up entries in a Rekor log with search or get. Upload and verify, tree-state options and the format option are not covered.

Opens the form; the finished command lands at your prompt, unrun
Run in Otty
otty gui rekor-cli
Query the Rekor transparency logExample values, fixed in this page — nothing here reaches a terminal
Basic
Rekor server
url
HTTP timeout
string
ParametersOnly these flags are editable in the form
Rekor server
url
--rekor_server
HTTP timeout
string
--timeout30s2m

rekor-cli search

Search entries

Find entries by artifact, hash, key or email. Give at least one of them.

Search entriesExample values, fixed in this page — nothing here reaches a terminal
Basic
Artifact file or URL
file
Artifact SHA sum
string
Public key file or URL
file
Key/signature format
string
Subject email
string
Combine criteria with
2 choicesenum
TasksEach one presets the form for one job
Search entries
artifactshapublic_keypki_formatemailoperator
ParametersOnly these flags are editable in the form
Rekor server
url
--rekor_server
Artifact file or URL
path
--artifact
Artifact SHA sum
string
--sha
Public key file or URL
path
--public-key
Key/signature format
string
--pki-formatx509minisignsshpgp
Subject email
string
--email
Combine criteria with
enum
--operatorandor

rekor-cli get

Get an entry

Fetch one entry by UUID or log index.

Get an entryExample values, fixed in this page — nothing here reaches a terminal
Basic
Entry UUID
string
Log index
integer
TasksEach one presets the form for one job
Get an entry
uuidlog_index
ParametersOnly these flags are editable in the form
Rekor server
url
--rekor_server
Entry UUID
string
--uuid
Log index
integer
--log-index
SourcesEvery flag above is checked against these
man
--rekor_server url Server address:port (default https://rekor.sigstore.dev) --timeout format HTTP timeout (default 30s) --retry uint Number of times to retry HTTP requests (default 3) --format format Command output format (default default)
manual1.5.3-2

manpages.debian.org

src
--pki-format format of the signature and/or public key --public-key path or URL to public key file --artifact path or URL to artifact file --sha the SHA512, SHA256 or SHA1 sum of the artifact --email email associated with the public key's subject --operator operator to use for the search. supported values are 'and' and 'or'
helpmain 2026-10-27

github.com

root
--rekor_server url Server address:port (default https://rekor.sigstore.dev) --timeout format HTTP timeout (default 30s) --retry uint Number of times to retry HTTP requests (default 3) --format format Command output format (default default)
manual1.5.3-2

manpages.debian.org

src
rekor-cli get --log-index 0 return nil, errors.New("either --uuid or --log-index must be specified")
helpmain 2026-10-27

github.com

root
--rekor_server url Server address:port (default https://rekor.sigstore.dev) --timeout format HTTP timeout (default 30s) --retry uint Number of times to retry HTTP requests (default 3) --format format Command output format (default default)
manual1.5.3-2

manpages.debian.org

Before it fills your prompt, Otty checks the installed rekor-cli against its version. A form that does not match your version is not offered.