logo
gcr.io/projectsigstore/cosign:v2.5.2
linux/amd64 gcr.io

Cosign是Sigstore项目下的工具,用于对容器镜像及其他软件工件进行签名、验证,以及存储相关签名信息,帮助保障软件供应链的安全性,确保工件的完整性与来源可信,支持OCI标准镜像格式,并与Sigstore生态中的Fulcio(证书颁发)、Rekor(透明日志)等组件集成。

21
浏览次数
134.56MB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v2.5.2
源镜像
gcr.io/projectsigstore/cosign:v2.5.2
镜像ID
sha256:c31bd295bee36d3c0585c4bd71feab5150837f1e6c3951742a0983bde6b33350
镜像 TAG
v2.5.2
镜像大小
134.56MB
平台架构
linux/amd64
镜像源
gcr.io
CMD
启动入口
/ko-app/cosign
工作目录
/home/nonroot
OS/平台
linux/amd64
镜像创建
0001-01-01T00:00:00Z
同步时间
2026-08-14 15:53
浏览量
21 次
贡献者
⚙️ 环境变量 3
KeyValue
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/ko-app 0
SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt 1
KO_DATA_PATH=/var/run/ko 2
🏷️ 镜像标签 9
KeyValue
oci://ghcr.io/sigstore/cosign/cosign io.artifacthub.package.alternative-locations
Apache-2.0 io.artifacthub.package.license
https://raw.githubusercontent.com/sigstore/cosign/main/images/logo.svg io.artifacthub.package.logo-url
cosign io.artifacthub.package.name
https://raw.githubusercontent.com/sigstore/cosign/main/README.md io.artifacthub.package.readme-url
sigstore io.artifacthub.package.vendor
0.1.0 io.artifacthub.package.version
2025-06-17T20:03:14Z org.opencontainers.image.created
Container signing verification and storage in an OCI registry org.opencontainers.image.description
🛡️ 镜像安全扫描
debian 12.11 Trivy 2026-08-14 15:53 查看完整报告
3
低危 LOW
47
中危 MEDIUM
41
高危 HIGH
2
严重 CRITICAL
受影响目标 (2)
gcr.io/projectsigstore/cosign:v2.5.2 (debian 12.11) debian ko-app/cosign gobinary

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v2.5.2
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v2.5.2  gcr.io/projectsigstore/cosign:v2.5.2

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v2.5.2
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v2.5.2  gcr.io/projectsigstore/cosign:v2.5.2

Shell快速替换命令

sed -i 's#gcr.io/projectsigstore/cosign:v2.5.2#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v2.5.2#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v2.5.2 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v2.5.2  gcr.io/projectsigstore/cosign:v2.5.2'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v2.5.2 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v2.5.2  gcr.io/projectsigstore/cosign:v2.5.2'

镜像构建历史


# 0001-01-01 08:00:00  132.56MB 
ko build ko://github.com/sigstore/cosign/v2/cmd/cosign
                        
# 0001-01-01 08:00:00  0.00B 
ko build ko://github.com/sigstore/cosign/v2/cmd/cosign
                        
# 0001-01-01 08:00:00  235.53KB 

                        
# 0001-01-01 08:00:00  346.00B 

                        
# 0001-01-01 08:00:00  497.00B 

                        
# 0001-01-01 08:00:00  0.00B 

                        
# 0001-01-01 08:00:00  64.00B 

                        
# 0001-01-01 08:00:00  0.00B 

                        
# 0001-01-01 08:00:00  149.00B 

                        
# 0001-01-01 08:00:00  0.00B 

                        
# 0001-01-01 08:00:00  1.47MB 

                        
# 0001-01-01 08:00:00  22.89KB 

                        
# 0001-01-01 08:00:00  270.73KB 

                        
                    

镜像信息

{
    "Id": "sha256:c31bd295bee36d3c0585c4bd71feab5150837f1e6c3951742a0983bde6b33350",
    "RepoTags": [
        "gcr.io/projectsigstore/cosign:v2.5.2",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v2.5.2"
    ],
    "RepoDigests": [
        "gcr.io/projectsigstore/cosign@sha256:23d07b53d59a1233e1ab5e7d082cf4182fc90067d2f86a662ba3003215cb0c95",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign@sha256:98c564461d8f784600b03c7e7ab33d52a6bf80133d4e3e3af67b31afa25d37de"
    ],
    "Parent": "",
    "Comment": "go build output, at /ko-app/cosign",
    "Created": "0001-01-01T00:00:00Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "github.com/ko-build/ko",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "65532",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/ko-app",
            "SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt",
            "KO_DATA_PATH=/var/run/ko"
        ],
        "Cmd": null,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/home/nonroot",
        "Entrypoint": [
            "/ko-app/cosign"
        ],
        "OnBuild": null,
        "Labels": {
            "io.artifacthub.package.alternative-locations": "oci://ghcr.io/sigstore/cosign/cosign",
            "io.artifacthub.package.license": "Apache-2.0",
            "io.artifacthub.package.logo-url": "https://raw.githubusercontent.com/sigstore/cosign/main/images/logo.svg",
            "io.artifacthub.package.name": "cosign",
            "io.artifacthub.package.readme-url": "https://raw.githubusercontent.com/sigstore/cosign/main/README.md",
            "io.artifacthub.package.vendor": "sigstore",
            "io.artifacthub.package.version": "0.1.0",
            "org.opencontainers.image.created": "2025-06-17T20:03:14Z",
            "org.opencontainers.image.description": "Container signing verification and storage in an OCI registry"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 134557585,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/df8bfed19454b856f77c2ae73a00fae6fe8edd12145e03958ec20bc0d8be1628/diff:/var/lib/docker/overlay2/995d50ee8317e3aeea026fd4ff99cfb47b7f6c5b3f37403ca7957e243b0a5762/diff:/var/lib/docker/overlay2/cef7ea961226720ff13c01095d852010c2fc325a22b6f4a3cc01129b9720d09f/diff:/var/lib/docker/overlay2/fab22faa0622c375cd3bd3d0cc98a3da1bd39f7fe77c13a2ce12cd333a553e0e/diff:/var/lib/docker/overlay2/d0899c34819806fee70e445e5dc1fd76704a61b3ee0320911a50aec1bb7c2c4f/diff:/var/lib/docker/overlay2/522c446a7ca5a14e11e23f1fa75852df024b128ff2878b0324cad66e47feab1c/diff:/var/lib/docker/overlay2/983cd8c1c118124ed885ca5c9483eb1ff4267352404cf4d9854ee8e4be980733/diff:/var/lib/docker/overlay2/a4ce2f376c8c8f2979c745e71c82729ec0fa26fd0533d4bae8cbf85a9c39117f/diff:/var/lib/docker/overlay2/950abcd3f0188d59f8f5bc6672af229c1f4799281a9af4b156789bd69723e36a/diff:/var/lib/docker/overlay2/a8b6c31b5f21b729715c6017055c2f14ba09b2380e900543253aa01589686958/diff:/var/lib/docker/overlay2/b2f77a06ece515c3d6dbfcb686baf3322a9191ece68379c0cb36a614d5c4764b/diff:/var/lib/docker/overlay2/72aadfcc74406e20c6afb2822570f1acd0b99377e79a10125fe5d6e8d7f11cfe/diff",
            "MergedDir": "/var/lib/docker/overlay2/481c97f622fe6d8f02a0f66f5c78caf8c77ec20497d502c7f6900eb49770c2ce/merged",
            "UpperDir": "/var/lib/docker/overlay2/481c97f622fe6d8f02a0f66f5c78caf8c77ec20497d502c7f6900eb49770c2ce/diff",
            "WorkDir": "/var/lib/docker/overlay2/481c97f622fe6d8f02a0f66f5c78caf8c77ec20497d502c7f6900eb49770c2ce/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:f464af4b9b251ebe8a7c2f186aff656f0892f6cb159837a6ce8fd63842e83e35",
            "sha256:8fa10c0194df9b7c054c90dbe482585f768a54428fc90a5b78a0066a123b1bba",
            "sha256:48c0fb67386ed713921fcc0468be23231d0872fa67ccc8ea3929df4656b6ddfc",
            "sha256:4d049f83d9cf21d1f5cc0e11deaf36df02790d0e60c1a3829538fb4b61685368",
            "sha256:af5aa97ebe6ce1604747ec1e21af7136ded391bcabe4acef882e718a87c86bcc",
            "sha256:6f1cdceb6a3146f0ccb986521156bef8a422cdbb0863396f7f751f575ba308f4",
            "sha256:bbb6cacb8c82e4da4e8143e03351e939eab5e21ce0ef333c42e637af86c5217b",
            "sha256:2a92d6ac9e4fcc274d5168b217ca4458a9fec6f094ead68d99c77073f08caac1",
            "sha256:1a73b54f556b477f0a8b939d13c504a3b4f4db71f7a09c63afbc10acb3de5849",
            "sha256:f4aee9e53c42a22ed82451218c3ea03d1eea8d6ca8fbe8eb4e950304ba8a8bb3",
            "sha256:bfe9137a1b044e8097cdfcb6899137a8a984ed70931ed1e8ef0cf7e023a139fc",
            "sha256:ffe56a1c5f3878e9b5f803842adb9e2ce81584b6bd027e8599582aefe14a975b",
            "sha256:d1759fcee0e7bda2e389fe7b4f720d627128f31d8fb2db820e53234b68274cb5"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-08-14T15:53:35.07090552+08:00"
    }
}

更多版本

gcr.io/projectsigstore/cosign:v2.5.2

linux/amd64 gcr.io134.56MB2026-08-14 15:53
20
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×