SIGSTORE-GO-SIGNING(1)

📦
version 1.3.0 · 4 versions
, in ubuntu stonking

🦋 NAME 🦋

sigstore-go-signing — the Sigstore signing tool, bestie. it signs stuff. that's the whole vibe 💅

✨ DESCRIPTION ✨

okay so here's the thing — this is sigstore-go-signing, living its best life in section 1 of the manual (User Commands, iykyk). it's a Sigstore signing tool, and honestly? iconic behavior 🌈

🎀 Usage of /build/sigstore-go-NaHzIh/sigstore-go-1.3.0/debian/tmp/usr/bin/sigstore-go-signing:

this is literally the exact path it's chilling at, no cap. here's every single flag, and yes i'm listing all of them because we don't skip parts in this house 👑

  • -id-token string — the OIDC token you wanna send over to Fulcio. it's giving "here's my id, let me in" 🪪✨
  • -in-toto — tells it the content you're signing is an in-toto document. slay, supply chain, slay 🧚
  • -rekor — turns on including a transparency log entry from Rekor. very "post it publicly so everyone knows" energy 📢
  • -s string — path to the signingconfig JSON file. the short king of the signing-config flags 👑
  • -signing-config string — path to the signingconfig JSON file. same job, but spelled all the way out, and that's valid 💖
  • -t string — path to the trusted root JSON file. short version, still trustworthy fr fr 🫶
  • -trusted-root string — path to the trusted root JSON file. the long-form twin, equally valid, equally trusted ✨
  • -tsa — include the signed timestamp from the timestamp authority. because time is real and we need receipts ⏰
ngl bestie, two of these flags do the same thing as two other flags — -s is -signing-config and -t is -trusted-root. that's not a typo, that's literally what the manpage says 🙈

okay that's the whole entire page, you read it all, i'm so proud of you 🥹💜

this beauty is sigstore-go-signing 1.3.0-1, dated August 2026, and yes the version number ate. periodt. 💅🌸

📦 where this page comes from