Cosign

Sigstore Fulcio API (consumed)

Fulcio is the Sigstore certificate authority that issues short-lived X.509 code-signing certificates bound to OIDC identities. Cosign calls the Fulcio public CA at fulcio.sigstore.dev during keyless signing to obtain a certificate for a verified identity.

GitHub

Documentation

📖
Documentation
https://docs.sigstore.dev/certificate_authority/overview/

SDKs

📦
GitHubRepository
https://github.com/sigstore/fulcio

API entry from apis.yml

apis.yml Raw ↑ 
aid: cosign:fulcio-api
name: Sigstore Fulcio API (consumed)
description: Fulcio is the Sigstore certificate authority that issues short-lived X.509 code-signing certificates
  bound to OIDC identities. Cosign calls the Fulcio public CA at fulcio.sigstore.dev during keyless signing
  to obtain a certificate for a verified identity.
humanURL: https://docs.sigstore.dev/certificate_authority/overview/
baseURL: https://fulcio.sigstore.dev
properties:
- type: Documentation
  url: https://docs.sigstore.dev/certificate_authority/overview/
- type: GitHubRepository
  url: https://github.com/sigstore/fulcio
tags:
- CA
- Certificates
- Fulcio
- OIDC
- Sigstore