# Cosign CLI

**Canonical:** https://apis.io/apis/cosign/cosign-cli/  
**Provider:** Cosign — https://apis.io/providers/cosign/  
**Documentation:** https://docs.sigstore.dev/cosign/

Cosign CLI is one of 3 APIs that [Cosign](https://apis.io/providers/cosign/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include CLI, Containers, Keyless, OCI, and Signing. The published artifact set on APIs.io includes API documentation, a getting-started guide, a GitHub repository, and an API reference.

Cosign is a command-line tool for signing, verifying, and storing container images and OCI artifacts. It supports keyless signing, hardware-backed keys, KMS providers, in-toto and SLSA attestations, and transparency log inclusion. The CLI is the primary user interface and does not expose its own HTTP API.

## Machine-readable artifacts (6)

- **Documentation** — https://docs.sigstore.dev/cosign/
- **GettingStarted** — https://docs.sigstore.dev/quickstart/quickstart-cosign/
- **Installation** — https://docs.sigstore.dev/cosign/system_config/installation/
- **GitHubRepository** — https://github.com/sigstore/cosign
- **Reference** — https://docs.sigstore.dev/cosign/reference/cosign/
- **APIsJSON** — https://raw.githubusercontent.com/api-evangelist/cosign/refs/heads/main/apis.yml

## Other Cosign APIs (2)

- [Sigstore Rekor API (consumed)](https://apis.io/apis/cosign/rekor-api/)
- [Sigstore Fulcio API (consumed)](https://apis.io/apis/cosign/fulcio-api/)

## Tags

CLI, Containers, Keyless, OCI, Signing

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/cosign/cosign-cli/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/cosign/.