Package: rekor
Version: 1.5.3-2
Architecture: amd64
Architecture-Variant: amd64v3
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Original-Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Installed-Size: 28137
Depends: libc6 (>= 2.34)
Built-Using: go-containerregistry (= 0.20.7+ds1-3), golang-1.26 (= 1.26.5-1), golang-dbus (= 5.1.0-1), golang-filippo-edwards25519 (= 1.2.0-2), golang-fsnotify (= 1.10.1-1), golang-github-asaskevich-govalidator (= 11.0.1-1), golang-github-aws-aws-sdk-go-v2 (= 1.41.7-2), golang-github-aws-smithy-go (= 1.25.1-3), golang-github-blang-semver (= 4.0.0-2), golang-github-cespare-xxhash (= 2.3.0-2), golang-github-common-nighthawk-go-figure (= 0.0~git20210622.734e95f-2), golang-github-felixge-httpsnoop (= 1.0.3-3), golang-github-fxamacker-cbor (= 2.9.2-1), golang-github-go-chi-chi (= 5.3.0-1), golang-github-go-logr-logr (= 1.4.3-1), golang-github-go-logr-stdr (= 1.2.2-4), golang-github-go-openapi-analysis (= 0.25.2-1), golang-github-go-openapi-errors (= 0.22.7-1), golang-github-go-openapi-jsonpointer (= 1:0.23.1-1), golang-github-go-openapi-jsonreference (= 1:0.21.5-1), golang-github-go-openapi-loads (= 0.23.3-1), golang-github-go-openapi-runtime (= 0.32.4-1), golang-github-go-openapi-spec (= 1:0.22.4-1), golang-github-go-openapi-strfmt (= 0.26.2-1), golang-github-go-openapi-swag (= 1:0.26.0-1), golang-github-go-openapi-validate (= 0.25.2-1), golang-github-go-viper-mapstructure (= 2.5.0-2), golang-github-golang-protobuf-1-5 (= 1.5.4-2), golang-github-google-s2a-go (= 0.1.8-1), golang-github-google-uuid (= 1.6.0-1), golang-github-googleapis-enterprise-certificate-proxy (= 0.3.6-1build1), golang-github-googleapis-gax-go (= 2.14.1-2), golang-github-hashicorp-go-cleanhttp (= 0.5.2-1), golang-github-hashicorp-go-retryablehttp (= 0.7.1-1), golang-github-in-toto-attestation (= 1.2.0-1), golang-github-jedisct1-go-minisign (= 0.2.7-1), golang-github-jellydator-ttlcache (= 3.0.1-2), golang-github-oklog-ulid (= 2.0.2+ds-2build1), golang-github-opencontainers-go-digest (= 1.0.0-2), golang-github-pelletier-go-toml.v2 (= 2.4.3-2), golang-github-pkg-errors (= 0.9.1-3), golang-github-sagikazarmark-locafero (= 0.12.0-1), golang-github-secure-systems-lab-go-securesystemslib (= 0.11.0-1), golang-github-shibumi-go-pathspec (= 1.3.0-2), golang-github-sigstore-protobuf-specs (= 0.5.1-1), golang-github-sigstore-sigstore (= 1.10.9-1), golang-github-smallstep-crypto (= 0.87.0-1), golang-github-spf13-afero (= 1.15.0-3), golang-github-spf13-cast (= 1.10.0-2), golang-github-spf13-cobra (= 1.10.2-1), golang-github-spf13-pflag (= 1.0.10-1), golang-github-spf13-viper (= 1.21.0-3), golang-github-subosito-gotenv (= 1.3.0-1), golang-github-tink-crypto-tink-go (= 2.7.0-3), golang-github-tink-crypto-tink-go-awskms (= 3.0.0-2), golang-github-tink-crypto-tink-go-gcpkms (= 2.3.0-1), golang-github-transparency-dev-merkle (= 0.0.2-2), golang-github-veraison-go-cose (= 1.3.0-3), golang-github-x448-float16 (= 0.8.4-3), golang-github-youmark-pkcs8 (= 1.3-1), golang-github-zalando-go-keyring (= 0.2.4-1), golang-go.crypto (= 1:0.53.0-1), golang-go.uber-multierr (= 1.11.0-1), golang-go.uber-zap (= 1.27.0-2), golang-golang-x-mod (= 0.37.0-1), golang-golang-x-net (= 1:0.57.0-1), golang-golang-x-oauth2 (= 0.27.0-1), golang-golang-x-sync (= 0.20.0-1), golang-golang-x-sys (= 0.47.0+dfsg-1), golang-golang-x-term (= 0.45.0-1), golang-golang-x-text (= 0.40.0-1), golang-golang-x-time (= 0.15.0-1), golang-google-api (= 0.288.0-1), golang-google-cloud (= 0.123.0-4), golang-google-genproto (= 0.0~git20260414.afd174a-2), golang-google-grpc (= 1.81.1-1build1), golang-google-protobuf (= 1.36.10-2), golang-gopkg-ini.v1 (= 1.67.0-1), golang-gopkg-yaml.v3 (= 3.0.4-3), golang-k8s-klog (= 2.130.1-1), golang-k8s-sigs-release-utils (= 0.12.2-1), golang-k8s-sigs-yaml (= 1.4.0-2), golang-opentelemetry-contrib (= 1.43.0-1), golang-opentelemetry-otel (= 1.43.0-4build1), golang-sslmate-src-go-pkcs12 (= 0.7.3-1), golang-webpki-org-jsoncanonicalizer (= 1.0.1-3), in-toto-golang (= 0.11.0+ds-1), relic (= 7.6.1-3), trillian (= 1.7.3-1)
Static-Built-Using: go-containerregistry (= 0.20.7+ds1-3), golang-1.26 (= 1.26.5-1), golang-dbus (= 5.1.0-1), golang-filippo-edwards25519 (= 1.2.0-2), golang-fsnotify (= 1.10.1-1), golang-github-asaskevich-govalidator (= 11.0.1-1), golang-github-aws-aws-sdk-go-v2 (= 1.41.7-2), golang-github-aws-smithy-go (= 1.25.1-3), golang-github-blang-semver (= 4.0.0-2), golang-github-cespare-xxhash (= 2.3.0-2), golang-github-common-nighthawk-go-figure (= 0.0~git20210622.734e95f-2), golang-github-felixge-httpsnoop (= 1.0.3-3), golang-github-fxamacker-cbor (= 2.9.2-1), golang-github-go-chi-chi (= 5.3.0-1), golang-github-go-logr-logr (= 1.4.3-1), golang-github-go-logr-stdr (= 1.2.2-4), golang-github-go-openapi-analysis (= 0.25.2-1), golang-github-go-openapi-errors (= 0.22.7-1), golang-github-go-openapi-jsonpointer (= 1:0.23.1-1), golang-github-go-openapi-jsonreference (= 1:0.21.5-1), golang-github-go-openapi-loads (= 0.23.3-1), golang-github-go-openapi-runtime (= 0.32.4-1), golang-github-go-openapi-spec (= 1:0.22.4-1), golang-github-go-openapi-strfmt (= 0.26.2-1), golang-github-go-openapi-swag (= 1:0.26.0-1), golang-github-go-openapi-validate (= 0.25.2-1), golang-github-go-viper-mapstructure (= 2.5.0-2), golang-github-golang-protobuf-1-5 (= 1.5.4-2), golang-github-google-s2a-go (= 0.1.8-1), golang-github-google-uuid (= 1.6.0-1), golang-github-googleapis-enterprise-certificate-proxy (= 0.3.6-1build1), golang-github-googleapis-gax-go (= 2.14.1-2), golang-github-hashicorp-go-cleanhttp (= 0.5.2-1), golang-github-hashicorp-go-retryablehttp (= 0.7.1-1), golang-github-in-toto-attestation (= 1.2.0-1), golang-github-jedisct1-go-minisign (= 0.2.7-1), golang-github-jellydator-ttlcache (= 3.0.1-2), golang-github-oklog-ulid (= 2.0.2+ds-2build1), golang-github-opencontainers-go-digest (= 1.0.0-2), golang-github-pelletier-go-toml.v2 (= 2.4.3-2), golang-github-pkg-errors (= 0.9.1-3), golang-github-sagikazarmark-locafero (= 0.12.0-1), golang-github-secure-systems-lab-go-securesystemslib (= 0.11.0-1), golang-github-shibumi-go-pathspec (= 1.3.0-2), golang-github-sigstore-protobuf-specs (= 0.5.1-1), golang-github-sigstore-sigstore (= 1.10.9-1), golang-github-smallstep-crypto (= 0.87.0-1), golang-github-spf13-afero (= 1.15.0-3), golang-github-spf13-cast (= 1.10.0-2), golang-github-spf13-cobra (= 1.10.2-1), golang-github-spf13-pflag (= 1.0.10-1), golang-github-spf13-viper (= 1.21.0-3), golang-github-subosito-gotenv (= 1.3.0-1), golang-github-tink-crypto-tink-go (= 2.7.0-3), golang-github-tink-crypto-tink-go-awskms (= 3.0.0-2), golang-github-tink-crypto-tink-go-gcpkms (= 2.3.0-1), golang-github-transparency-dev-merkle (= 0.0.2-2), golang-github-veraison-go-cose (= 1.3.0-3), golang-github-x448-float16 (= 0.8.4-3), golang-github-youmark-pkcs8 (= 1.3-1), golang-github-zalando-go-keyring (= 0.2.4-1), golang-go.crypto (= 1:0.53.0-1), golang-go.uber-multierr (= 1.11.0-1), golang-go.uber-zap (= 1.27.0-2), golang-golang-x-mod (= 0.37.0-1), golang-golang-x-net (= 1:0.57.0-1), golang-golang-x-oauth2 (= 0.27.0-1), golang-golang-x-sync (= 0.20.0-1), golang-golang-x-sys (= 0.47.0+dfsg-1), golang-golang-x-term (= 0.45.0-1), golang-golang-x-text (= 0.40.0-1), golang-golang-x-time (= 0.15.0-1), golang-google-api (= 0.288.0-1), golang-google-cloud (= 0.123.0-4), golang-google-genproto (= 0.0~git20260414.afd174a-2), golang-google-grpc (= 1.81.1-1build1), golang-google-protobuf (= 1.36.10-2), golang-gopkg-ini.v1 (= 1.67.0-1), golang-gopkg-yaml.v3 (= 3.0.4-3), golang-k8s-klog (= 2.130.1-1), golang-k8s-sigs-release-utils (= 0.12.2-1), golang-k8s-sigs-yaml (= 1.4.0-2), golang-opentelemetry-contrib (= 1.43.0-1), golang-opentelemetry-otel (= 1.43.0-4build1), golang-sslmate-src-go-pkcs12 (= 0.7.3-1), golang-webpki-org-jsoncanonicalizer (= 1.0.1-3), in-toto-golang (= 0.11.0+ds-1), relic (= 7.6.1-3), trillian (= 1.7.3-1)
Section: golang
Priority: optional
Homepage: https://github.com/sigstore/rekor
Description: Software Supply Chain Transparency Log (program)
 Rekor's goals are to provide an immutable tamper resistant ledger of
 metadata generated within a software projects supply chain. Rekor will
 enable software maintainers and build systems to record signed metadata
 to an immutable record. Other parties can then query said metadata to
 enable them to make informed decisions on trust and non-repudiation of an
 object's lifecycle.
 .
 The Rekor project provides a restful API based server for validation and
 a transparency log for storage. A CLI application is available to make
 and verify entries, query the transparency log for inclusion proof,
 integrity verification of the transparency log or retrieval of entries
 by either public key or artifact.
 .
 Rekor fulfils the signature transparency role of sigstore's software
 signing infrastructure. However, Rekor can be run on its own and is
 designed to be extensible to working with different manifest schemas and
 PKI tooling.
 .
 This package contains the command-line tool rekor-cli.
