HomeServices › Sigstore

Sigstore on a Mac

Keyless signing ecosystem — Cosign, Fulcio, Rekor (self-hosted / public) · Secrets Scanning & Supply Chain Security

Sigstore is the open ecosystem for software signing — Cosign (signing CLI), Fulcio (short-lived cert authority from OIDC identity) and Rekor (tamper-evident transparency log). Use the free public-good instances or self-host Fulcio/Rekor for your org. The standard behind keyless artifact signing; cosign is the everyday entry point.

Run Sigstore with FrontierStack

FrontierStack lists Sigstore in its Secrets Scanning & Supply Chain Security catalog. Install or connect it from one place, then monitor its status, ports and certificate, secure it with the firewall and Malware Audit, and back it up.

Run it all from one Mac app.

FrontierStack installs, monitors and secures the whole stack — locally and across your fleet — from a single native macOS app.

Download FrontierStack

Related in Secrets Scanning & Supply Chain Security