notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
I started running short on disk space for the non-production FreshPorts hosts. This time, I have decided to ask for donations. See my recent blog post which points to my Patreon account.
Port details
rekor Software Supply Chain Transparency Log (client only)
1.3.10_7 security on this many watch lists=0 search for ports that depend on this port Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 1.3.10_5Version of this port present on the latest quarterly branch.
Maintainer: bofh@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2025-05-04 18:50:05
Last Update: 2025-10-14 15:13:55
Commit Hash: 90f9766
License: APACHE20
WWW:
https://www.sigstore.dev/
Description:
Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. Rekor will enable software maintainers and build systems to record signed metadata to an immutable record. Other parties can then query said metadata to enable them to make informed decisions on trust and non-repudiation of an object's lifecycle. The Rekor project provides a restful API based server for validation and a transparency log for storage. A CLI application is available to make and verify entries, query the transparency log for inclusion proof, integrity verification of the transparency log or retrieval of entries by either public key or artifact. Rekor fulfils the signature transparency role of sigstore's software signing infrastructure. However, Rekor can be run on its own and is designed to be extensible to working with different manifest schemas and PKI tooling.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
There is no configure plist information for this port.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • rekor-client>0:security/rekor
To install the port:
cd /usr/ports/security/rekor/ && make install clean
To add the package, run one of these commands:
  • pkg install security/rekor
  • pkg install rekor-client
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: rekor-client
Package flavors (<flavor>: <package>)
  • client: rekor-client
  • server: rekor-server
distinfo:
TIMESTAMP = 1746289423 SHA256 (go/security_rekor/rekor-v1.3.10/v1.3.10.mod) = 788c563e936db5816de40e7ff4a7f58ffa8d184fbe99842eec058da0d3b8f65d SIZE (go/security_rekor/rekor-v1.3.10/v1.3.10.mod) = 11137

Expand this list (2 items)

Collapse this list.

SHA256 (go/security_rekor/rekor-v1.3.10/v1.3.10.zip) = 6a65d2c266a8ac2351061716142c9cb373abec19c892d4b5c0c83e21bf2b3789 SIZE (go/security_rekor/rekor-v1.3.10/v1.3.10.zip) = 1193215

Collapse this list.


Packages (timestamps in pop-ups are UTC):
rekor-client
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest1.3.10_51.3.10_6-1.3.10_51.3.10_6n/an/an/a
FreeBSD:13:quarterly1.3.10_21.3.10_5-1.3.10_21.3.10_5n/an/an/a
FreeBSD:14:latest1.3.10_41.3.10_6-1.3.10_41.3.10_6---
FreeBSD:14:quarterly1.3.10_21.3.10_5-1.3.10_21.3.10_5---
FreeBSD:15:latest1.3.10_51.3.10_6n/a-n/an/a--
FreeBSD:15:quarterly-1.3.10_5n/a-n/an/a--
FreeBSD:16:latest-1.3.10_6n/a-n/an/a--
 

rekor-server
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest1.3.10_51.3.10_6-1.3.10_51.3.10_6n/an/an/a
FreeBSD:13:quarterly1.3.10_21.3.10_5-1.3.10_21.3.10_5n/an/an/a
FreeBSD:14:latest1.3.10_41.3.10_6-1.3.10_41.3.10_6---
FreeBSD:14:quarterly1.3.10_21.3.10_5-1.3.10_21.3.10_5---
FreeBSD:15:latest1.3.10_51.3.10_6n/a-n/an/a--
FreeBSD:15:quarterly-1.3.10_5n/a-n/an/a--
FreeBSD:16:latest-1.3.10_6n/a-n/an/a--
 

Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. go124 : lang/go124
Fetch dependencies:
  1. go124 : lang/go124
There are no ports dependent upon this port

Configuration Options:
No options to configure
Options name:
security_rekor
USES:
cpe go:1.24,modules zip
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://proxy.golang.org/github.com/sigstore/rekor/@v/
Collapse this list.

Number of commits found: 8

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
1.3.10_7
14 Oct 2025 15:13:55
commit hash: 90f976619bf883b36d921c6ab89ffc5ff156b391commit hash: 90f976619bf883b36d921c6ab89ffc5ff156b391commit hash: 90f976619bf883b36d921c6ab89ffc5ff156b391commit hash: 90f976619bf883b36d921c6ab89ffc5ff156b391 files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
various: Bump go ports for go-1.24.9
1.3.10_6
08 Oct 2025 00:41:39
commit hash: 2e7587aaf8e7f893fd2025d55f66de088427b180commit hash: 2e7587aaf8e7f893fd2025d55f66de088427b180commit hash: 2e7587aaf8e7f893fd2025d55f66de088427b180commit hash: 2e7587aaf8e7f893fd2025d55f66de088427b180 files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
many: Bump dependent ports after go124 update
1.3.10_5
04 Sep 2025 17:53:24
commit hash: 31a5a229a778dc5f458cb8887954f192d846e0e3commit hash: 31a5a229a778dc5f458cb8887954f192d846e0e3commit hash: 31a5a229a778dc5f458cb8887954f192d846e0e3commit hash: 31a5a229a778dc5f458cb8887954f192d846e0e3 files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
many: Bump go ports for go-1.24.7
1.3.10_4
07 Aug 2025 00:02:46
commit hash: 53610681ea46b375186fc68723dcc335051ef9b4commit hash: 53610681ea46b375186fc68723dcc335051ef9b4commit hash: 53610681ea46b375186fc68723dcc335051ef9b4commit hash: 53610681ea46b375186fc68723dcc335051ef9b4 files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
go ports: Bump for 1.24.6
1.3.10_3
09 Jul 2025 16:11:00
commit hash: 275975297bc1002e96f88f503cf18dea17df847ecommit hash: 275975297bc1002e96f88f503cf18dea17df847ecommit hash: 275975297bc1002e96f88f503cf18dea17df847ecommit hash: 275975297bc1002e96f88f503cf18dea17df847e files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
many: Bump PORTREVISION for go-1.24.5 update
1.3.10_2
06 Jun 2025 20:00:53
commit hash: 94be418de3de0b9beea03165f868b89b524b2c23commit hash: 94be418de3de0b9beea03165f868b89b524b2c23commit hash: 94be418de3de0b9beea03165f868b89b524b2c23commit hash: 94be418de3de0b9beea03165f868b89b524b2c23 files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
various: Bump PORTREVISION after go124-1.24.4 update
1.3.10_1
21 May 2025 19:58:15
commit hash: 0bdd2ad334c94bfa4d976a8dde6e0ebc432f2a52commit hash: 0bdd2ad334c94bfa4d976a8dde6e0ebc432f2a52commit hash: 0bdd2ad334c94bfa4d976a8dde6e0ebc432f2a52commit hash: 0bdd2ad334c94bfa4d976a8dde6e0ebc432f2a52 files touched by this commit
Adam Weinberger (adamw) search for other commits by this committer
go: Bump go124-dependent ports

Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
1.3.10
04 May 2025 18:44:56
commit hash: fd18edcfedc3e98872e5a066702568bfa4bdc799commit hash: fd18edcfedc3e98872e5a066702568bfa4bdc799commit hash: fd18edcfedc3e98872e5a066702568bfa4bdc799commit hash: fd18edcfedc3e98872e5a066702568bfa4bdc799 files touched by this commit
Muhammad Moinur Rahman (bofh) search for other commits by this committer
security/rekor: New port

Software Supply Chain Transparency Log

Rekor's goals are to provide an immutable tamper resistant ledger of
metadata generated within a software projects supply chain. Rekor will
enable software maintainers and build systems to record signed metadata
to an immutable record.  Other parties can then query said metadata to
enable them to make informed decisions on trust and non-repudiation of
an object's lifecycle.

The Rekor project provides a restful API based server for validation and
a transparency log for storage. A CLI application is available to make
and verify entries, query the transparency log for inclusion proof,
integrity verification of the transparency log or retrieval of entries
by either public key or artifact.

Rekor fulfils the signature transparency role of sigstore's software
signing infrastructure. However, Rekor can be run on its own and is
designed to be extensible to working with different manifest schemas and
PKI tooling.

WWW: https://www.sigstore.dev/

Number of commits found: 8