Cosign
6.6#4 in code signing softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitCosign vs Signotaur
What both publish
| Fact | Cosign | Signotaur |
|---|---|---|
| Purpose | Cosign signs and verifies OCI containers and other software artifacts. | Signotaur is a self-hosted server for centralized management of signing certificates and remote code signing integrated with CI systems. |
Cosign plans
- CosignFree
Signotaur plans
- Signotaur Standard Server$199, paid once
- Signotaur Enterprise Server$399, paid once
Pick Cosign if…
Cosign suits open-source package managers and teams that need to sign or verify artifacts in registry and CI/CD workflows. It is less suited to developers seeking a stable API for direct application integration.
Pick Signotaur if…
You want what its maker publishes above — check its page for the details.