Cosign
6.6#4 in code signing softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitNo prices published.
Cosign suits open-source package managers and teams that need to sign or verify artifacts in registry and CI/CD workflows. It is less suited to developers seeking a stable API for direct application integration.
You want what its maker publishes above — check its page for the details.