logo
gcr.io/projectsigstore/cosign:v3.1.2
linux/amd64 gcr.io

Cosign是Sigstore项目下的工具,用于对容器镜像及其他软件工件进行签名、验证,以及存储相关签名信息,帮助保障软件供应链的安全性,确保工件的完整性与来源可信,支持OCI标准镜像格式,并与Sigstore生态中的Fulcio(证书颁发)、Rekor(透明日志)等组件集成。

32
浏览次数
143.36MB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v3.1.2
源镜像
gcr.io/projectsigstore/cosign:v3.1.2
镜像ID
sha256:7e6a32890efbe8ff48d3c9c5b476417b2cf45e3512b3a491ff900a2ff5244a78
镜像 TAG
v3.1.2
镜像大小
143.36MB
平台架构
linux/amd64
镜像源
gcr.io
CMD
启动入口
/ko-app/cosign
工作目录
/home/nonroot
OS/平台
linux/amd64
镜像创建
1970-01-01T00:00:00Z
同步时间
2026-09-14 19:24
浏览量
32 次
贡献者
⚙️ 环境变量 3
KeyValue
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/ko-app 0
SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt 1
KO_DATA_PATH=/var/run/ko 2
🏷️ 镜像标签 9
KeyValue
oci://ghcr.io/sigstore/cosign/cosign io.artifacthub.package.alternative-locations
Apache-2.0 io.artifacthub.package.license
https://raw.githubusercontent.com/sigstore/cosign/main/images/logo.svg io.artifacthub.package.logo-url
cosign io.artifacthub.package.name
https://raw.githubusercontent.com/sigstore/cosign/main/README.md io.artifacthub.package.readme-url
sigstore io.artifacthub.package.vendor
0.1.0 io.artifacthub.package.version
2026-07-17T14:32:20Z org.opencontainers.image.created
Container signing verification and storage in an OCI registry org.opencontainers.image.description
🛡️ 镜像安全扫描
debian 13.6 Trivy 2026-09-14 19:24 查看完整报告
0
低危 LOW
4
中危 MEDIUM
16
高危 HIGH
0
严重 CRITICAL
受影响目标 (2)
gcr.io/projectsigstore/cosign:v3.1.2 (debian 13.6) debian ko-app/cosign gobinary

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v3.1.2
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v3.1.2  gcr.io/projectsigstore/cosign:v3.1.2

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v3.1.2
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v3.1.2  gcr.io/projectsigstore/cosign:v3.1.2

Shell快速替换命令

sed -i 's#gcr.io/projectsigstore/cosign:v3.1.2#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v3.1.2#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v3.1.2 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v3.1.2  gcr.io/projectsigstore/cosign:v3.1.2'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v3.1.2 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v3.1.2  gcr.io/projectsigstore/cosign:v3.1.2'

镜像构建历史


# 0001-01-01 08:00:00  141.15MB 
ko build ko://github.com/sigstore/cosign/v3/cmd/cosign
                        
# 0001-01-01 08:00:00  0.00B 
ko build ko://github.com/sigstore/cosign/v3/cmd/cosign
                        
# 1970-01-01 08:00:00  243.39KB 
bazel build //common:cacerts_debian13_amd64
                        
# 1970-01-01 08:00:00  344.00B 
bazel build //common:os_release_debian13
                        
# 1970-01-01 08:00:00  497.00B 
bazel build //static:nsswitch
                        
# 1970-01-01 08:00:00  0.00B 
bazel build //common:tmp
                        
# 1970-01-01 08:00:00  64.00B 
bazel build //common:group
                        
# 1970-01-01 08:00:00  0.00B 
bazel build //common:home
                        
# 1970-01-01 08:00:00  149.00B 
bazel build //common:passwd
                        
# 1970-01-01 08:00:00  0.00B 
bazel build //common:rootfs
                        
# 1970-01-01 08:00:00  88.83KB 
bazel build @trixie//media-types/amd64:data_statusd
                        
# 1970-01-01 08:00:00  823.68KB 
bazel build @trixie//tzdata-legacy/amd64:data_statusd
                        
# 1970-01-01 08:00:00  758.65KB 
bazel build @trixie//tzdata/amd64:data_statusd
                        
# 1970-01-01 08:00:00  23.23KB 
bazel build @trixie//netbase/amd64:data_statusd
                        
# 1970-01-01 08:00:00  273.12KB 
bazel build @trixie//base-files/amd64:data_statusd
                        
                    

镜像信息

{
    "Id": "sha256:7e6a32890efbe8ff48d3c9c5b476417b2cf45e3512b3a491ff900a2ff5244a78",
    "RepoTags": [
        "gcr.io/projectsigstore/cosign:v3.1.2",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign:v3.1.2"
    ],
    "RepoDigests": [
        "gcr.io/projectsigstore/cosign@sha256:d91bc4e7e95e8d2f549c747a72dc174f90579e410a1695f57f686674f84ce849",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/gcr.io/projectsigstore/cosign@sha256:5b6f29c6e0d43aa88ffba2b15d124b49e2fba9ccbf0437c8de992f3ded28506a"
    ],
    "Parent": "",
    "Comment": "go build output, at /ko-app/cosign",
    "Created": "1970-01-01T00:00:00Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "github.com/ko-build/ko",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "65532",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/ko-app",
            "SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt",
            "KO_DATA_PATH=/var/run/ko"
        ],
        "Cmd": null,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/home/nonroot",
        "Entrypoint": [
            "/ko-app/cosign"
        ],
        "OnBuild": null,
        "Labels": {
            "io.artifacthub.package.alternative-locations": "oci://ghcr.io/sigstore/cosign/cosign",
            "io.artifacthub.package.license": "Apache-2.0",
            "io.artifacthub.package.logo-url": "https://raw.githubusercontent.com/sigstore/cosign/main/images/logo.svg",
            "io.artifacthub.package.name": "cosign",
            "io.artifacthub.package.readme-url": "https://raw.githubusercontent.com/sigstore/cosign/main/README.md",
            "io.artifacthub.package.vendor": "sigstore",
            "io.artifacthub.package.version": "0.1.0",
            "org.opencontainers.image.created": "2026-07-17T14:32:20Z",
            "org.opencontainers.image.description": "Container signing verification and storage in an OCI registry"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 143357973,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/ec68b5674fa371518ba9db06154253acdb9b01310ddb19e8326ee4b3ab731a18/diff:/var/lib/docker/overlay2/7f6b115f499da06ddc2643fe067e0a590c1e96f277f0e7198f58e253a86ccb12/diff:/var/lib/docker/overlay2/9ef0efc412a8e8bf84842bba332fab39786a0114cff70d9fcda7536770b32262/diff:/var/lib/docker/overlay2/f7adebd4db6fc1a722f7453574e1cd7c57516c5e3e1e6d1e8be9d5aac81ea717/diff:/var/lib/docker/overlay2/3e66060751556d648a46bc45e76bb57eb9726b3f6dfc199c557780d14980f3f9/diff:/var/lib/docker/overlay2/be4344dd3a3e988c7a37af111c9576bf635e2bf88dbe9e0b82de0c78230cfa3a/diff:/var/lib/docker/overlay2/5a248447221a60579542f9af8cf36e0e238ea460e2626f35c190795ebcfbf288/diff:/var/lib/docker/overlay2/55bcabc0a97cdc732cf30228116636a1fa199fa6fb91e9686880f90b67b8a84b/diff:/var/lib/docker/overlay2/7563619b55956c03eef7eabfbbb6b0182a588a95ba539ab398dd40186f3d2c91/diff:/var/lib/docker/overlay2/fb8c9b1acf7987a4e9cff891ac2feedd3d352458a23d06057911fec88df12e69/diff:/var/lib/docker/overlay2/3a861afbf97dcc8438fd80f5e39035670693f5c000dd27070989718dc3e00696/diff:/var/lib/docker/overlay2/c9c527af7e3556c076d06f24c76db4c26cbe34885bd067d0d160298691fc00db/diff:/var/lib/docker/overlay2/4206ca16bf2b520f1d20ab5b1780fd5a86218a094a970a773b5acaad097fc91d/diff:/var/lib/docker/overlay2/1f8e4d275edd7ba18f61d99f33124b5e44be8c42b11f8ce6b20486a05d00e223/diff",
            "MergedDir": "/var/lib/docker/overlay2/1b445e40f4195b9eef121cc781db81205516a6b175ef8f05b765c3fdc9ec2d4b/merged",
            "UpperDir": "/var/lib/docker/overlay2/1b445e40f4195b9eef121cc781db81205516a6b175ef8f05b765c3fdc9ec2d4b/diff",
            "WorkDir": "/var/lib/docker/overlay2/1b445e40f4195b9eef121cc781db81205516a6b175ef8f05b765c3fdc9ec2d4b/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:50abe06dfc0957e14cb8332ed242e8b884ef2563a9eb202e5172f243f62792f7",
            "sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda",
            "sha256:c8b007d0206e4b10ed4d3b3d99dfeab47c2648e82011989fd78a5731baf33fc3",
            "sha256:bec7e6bb35e05d1284f28b10d2150c259717d91c658c4c10c08424bb9466caba",
            "sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412",
            "sha256:4d049f83d9cf21d1f5cc0e11deaf36df02790d0e60c1a3829538fb4b61685368",
            "sha256:af5aa97ebe6ce1604747ec1e21af7136ded391bcabe4acef882e718a87c86bcc",
            "sha256:6f1cdceb6a3146f0ccb986521156bef8a422cdbb0863396f7f751f575ba308f4",
            "sha256:bd3cdfae1d3fdd83a2231d608969b38b82349777c2fff9a7c12d54f8ac5c9b38",
            "sha256:4cde6b0bb6f50a5f255eef7b2a42162c661cf776b803225dcac9a659e396bb6b",
            "sha256:ad51d0769d16ba578106a177987dfe3d2e02c1668c852b795b2f6b024068242a",
            "sha256:187cfc6d1e3e8a40a5e64653bcd3239c140807dcf1c09e48021178705a5a6139",
            "sha256:5fd2536c39c0700be8b7b4344e375196da2f126842fd8ede66996a18860a3890",
            "sha256:ffe56a1c5f3878e9b5f803842adb9e2ce81584b6bd027e8599582aefe14a975b",
            "sha256:80ac89d06962000e5c02943650849c7515f6783be4f98de3e0c2e8b830ff0a7d"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-09-14T19:24:29.848357973+08:00"
    }
}

更多版本

gcr.io/projectsigstore/cosign:v2.5.2

linux/amd64 gcr.io134.56MB2026-08-14 15:53
89

gcr.io/projectsigstore/cosign:v3.1.2

linux/amd64 gcr.io143.36MB2026-09-14 19:24
31
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×