Cosign
6.6#4 in code signing softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitCosign vs SignPath
What both publish
| Fact | Cosign | SignPath |
|---|---|---|
| Purpose | Cosign signs and verifies OCI containers and other software artifacts. | SignPath provides code signing and software integrity tools that enforce policies across software builds and releases. |
Cosign plans
- CosignFree
SignPath plans
- Open Source Code SigningFree
- Code GovernancePriced on request
- Software Integrity PlatformPriced on request
Pick Cosign if…
Cosign suits open-source package managers and teams that need to sign or verify artifacts in registry and CI/CD workflows. It is less suited to developers seeking a stable API for direct application integration.
Pick SignPath if…
SignPath suits development teams that need controls around signing and verifying software releases. Its free option is for qualifying open source projects; deployment choices also include self-hosted and hybrid.