rekor-cli

Immutable tamper resistant ledger of metadata generated within a software projects supply chain. More information: https://github.com/sigstore/rekor.

• Upload an artifact to Rekor:

rekor-cli upload --artifact {{path/to/file.ext}} --signature {{path/to/file.ext.sig}} --pki-format={{x509}} --public-key={{path/to/key.pub}}

• Get information regarding entries in the Transparency Log:

rekor-cli get --uuid={{0e81b4d9299e2609e45b5c453a4c0e7820ac74e02c4935a8b830d104632fd2d1}}

• Search the Rekor index to find entries by Artifact:

rekor-cli search --artifact {{path/to/file.ext}}

• Search the Rekor index to find entries by a specific hash:

rekor-cli search --sha {{6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b}}