WIEWAVE home

Cosign on Azure, AWS & Google Cloud

Sigstore tool for signing and verifying container images and artifacts, supporting keyless signing, attestations, OCI registries and transparency log lookups. Built and maintained by WIEWAVE for Azure Marketplace, AWS Marketplace and Google Cloud Marketplace, on Debian, Ubuntu and Alpine Linux.

Cosign at a glance

Key facts about Cosign
Built & maintained byWIEWAVE
CategorySecurity
Operating systemsDebian, Ubuntu, Alpine Linux
MarketplacesAzure Marketplace, AWS Marketplace and Google Cloud Marketplace
Offer typesPublic listing, with private offers on request

Availability by marketplace

Where Cosign is published
MarketplaceStatus
Azure MarketplacePublished
AWS MarketplacePublished
Google Cloud MarketplacePublished

Need it on another marketplace, or as a private offer for your organisation? cloud@wiewave.com

Operating systems

Cosign is built on 3 distributions

Each image follows its distribution's own provisioning model, package manager and security tooling — not one build relabelled several times.

  • Debian

    Stable and oldstable, with backports where a workload needs a newer runtime than the release ships.

  • Ubuntu

    LTS and interim releases, Minimal and Pro variants, built to Canonical's cloud-image conventions.

  • Alpine Linux

    musl-based and tiny, for container hosts and appliances where image size is the constraint.

How it's built

How WIEWAVE builds and maintains this image

The same four steps behind every offer we've published, including the hardening and CIS Benchmark checks every build goes through.

  1. 01

    Scoped

    The distribution, licensing model and target marketplaces are agreed before anything is built.

  2. 02

    Built & hardened as code

    Packer templates, Ansible provisioning and a pinned package set — then hardened, scanned and checked against the CIS Benchmark for its distribution.

  3. 03

    Certified & published

    Taken through each cloud's own certification pipeline before it goes live on the marketplace.

  4. 04

    Maintained

    Rebuilt on the upstream security cadence and re-published, with old versions retired without breaking deployments.

FAQ

Cosign: common questions

If yours isn't here, ask our marketplace team directly.

Security

More in Security

Secrets management, identity, VPN gateways and CIS-benchmarked hardened base images.

Security

CTFd

Capture-the-flag platform for running security competitions, providing challenge management, scoreboards, team registration and a plugin and theme system.

Available on distributions:UbuntuDebian
Published onAzure Marketplace, AWS Marketplace
Security

Data Encryption & Security Service

Image intended for encrypting data at rest and in transit and managing keys; the specific components depend on the publisher's build.

Available on distributions:UbuntuDebianRHELAlmaLinuxRocky
Published onAzure Marketplace
Security

Dex

OpenID Connect identity provider that federates authentication to LDAP, SAML and upstream OAuth providers, commonly used in front of Kubernetes clusters.

Available on distributions:DebianUbuntuAlpine
Published onAzure Marketplace, AWS Marketplace, Google Cloud Marketplace
Security

DIRB

Command-line web content scanner that brute-forces directories and files on HTTP servers using wordlists, packaged with its default dictionary set.

Available on distributions:KaliUbuntuDebian
Published onAzure Marketplace, AWS Marketplace
Security

Domain Controller

Windows Server image promoted to Active Directory Domain Services, providing Kerberos authentication, LDAP directory services, DNS and Group Policy for a domain.

Available on distributions:Windows
Published onAzure Marketplace, AWS Marketplace
Security

EveBox

EveBox is a web-based viewer for browsing and triaging Suricata EVE JSON alert and event logs from network intrusion detection systems.

Available on distributions:UbuntuDebianRHELAlmaLinuxRocky
Published onAzure Marketplace, AWS Marketplace
See all 82 products in Security

Need Cosign customised, or on another cloud?

Tell us the distribution, the marketplace and the commercial model — we'll build, certify and publish it as a public listing or a private offer.