cosign CLI reference

ModularPipelines.Cosign provides strongly typed access to the cosign CLI.

Executable prerequisite

This package does not install the cosign executable. Install it separately and ensure cosign is available on PATH.

Follow the executable's official documentation for installation instructions.

Package installation

dotnet add package ModularPipelines.Cosign

Resolve the service with context.Tools.Cosign. Projects using C# 13 or another .NET language can use context.Tools.Get<ModularPipelines.Cosign.Services.ICosign>() instead.

Module example

Resolve the service in a module, then select a command from the table below. A runnable example is omitted when no command has complete safety metadata:

var cosign = context.Tools.Cosign;

Commands

CLI command	Options record
cosign attest	CosignAttestOptions
cosign attest-blob	CosignAttestBlobOptions
cosign bundle	CosignBundleOptions
cosign bundle create	CosignBundleCreateOptions
cosign bundle inspect	CosignBundleInspectOptions
cosign bundle upgrade	CosignBundleUpgradeOptions
cosign clean	CosignCleanOptions
cosign download	CosignDownloadOptions
cosign download attestation	CosignDownloadAttestationOptions
cosign download sbom	CosignDownloadSbomOptions
cosign download signature	CosignDownloadSignatureOptions
cosign generate-key-pair	CosignGenerateKeyPairOptions
cosign import-key-pair	CosignImportKeyPairOptions
cosign initialize	CosignInitializeOptions
cosign load	CosignLoadOptions
cosign login	CosignLoginOptions
cosign public-key	CosignPublicKeyOptions
cosign save	CosignSaveOptions
cosign sign	CosignSignOptions
cosign sign-blob	CosignSignBlobOptions
cosign signing-config	CosignSigningConfigOptions
cosign signing-config create	CosignSigningConfigCreateOptions
cosign tree	CosignTreeOptions
cosign trusted-root	CosignTrustedRootOptions
cosign trusted-root create	CosignTrustedRootCreateOptions
cosign verify	CosignVerifyOptions
cosign verify-attestation	CosignVerifyAttestationOptions
cosign verify-blob	CosignVerifyBlobOptions
cosign verify-blob-attestation	CosignVerifyBlobAttestationOptions