Unverified50% confidenceFactExact time
cosign is an open-source tool under the Sigstore project, designed specifically for signing, verifying, and attesting OCI container images and artifacts.
1
Sources
50%
Confidence
Long-term
Relevance
10/8/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe SLSA framework and the Sigstore project are dedicated to providing verifiable provenance attestations for build and release pipelines.69% similarUnverifiedCorsair is an open-source application integration framework written in TypeScript, used to connect users to their third-party applications.68% similarUnverifiedSigstore is an open-source project backed by the Linux Foundation, designed to provide a keyless signing mechanism for software packages based on OpenID Connect.65% similarVerifiedThe OCI (Open Container Initiative) specification was established in 2015, separately defining the image format and the runtime interface.62% similarUnverifiedOCI (Open Container Initiative) is no longer limited to containers; model files, Helm Charts, and other artifacts can all be packaged as OCI artifacts and stored in standard registries.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/988189API
curl https://kongchang.com/api/v1/knowledge/claims/988189MCP
get_claim(id=988189)