macOS
Homebrewverified · 100%
brew install sigsum-golocal Homebrew formula metadata
brew
Install sigsum-go with Homebrew, apt
Key transparency toolkit. Version 0.14.1 via Homebrew; verified 2026-06-09.
install
Additional install commands
Linux
Debian aptverified · 92%
sudo apt install golang-sigsum-sigsum-go-devDebian stable package indexes · golang-sigsum-sigsum-go-dev · source: deb.debian.org
overview
Package summary
Key transparency toolkit
Project links
Commands and aliases
- sigsum-key
- sigsum-monitor
- sigsum-submit
- sigsum-token
- sigsum-verify
- sigsum-witness
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 1 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
sigsum-key | cli | global executable | |
sigsum-monitor | cli | global executable | |
sigsum-submit | cli | global executable | |
sigsum-token | cli | global executable | |
sigsum-verify | cli | global executable | |
sigsum-witness | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version0.14.1
manager updated2026-06-09
local dataok
upstreamnot checked
latest detectednot detected
- infoRelease/tag comparison is only available for GitHub repositories.https://sigsum.orgnone confidence
install metadata
Package metadata
| Package key | brew:sigsum-go |
|---|---|
| Version | 0.14.1 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/sigsum-go |
| Homepage | https://sigsum.org |
| Repository | https://git.glasklar.is/sigsum/core/sigsum-go |
| Upstream docs | https://sigsum.org |
| License | BSD-2-Clause |
| Source archive | https://git.glasklar.is/sigsum/core/sigsum-go/-/archive/v0.14.1/sigsum-go-v0.14.1.tar.bz2 |
| Last updated | 2026-06-09T07:45:22Z |
| Pulse | updated |
| Build dependencies | go |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | sigsum-go |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
golang-sigsum-sigsum-go-dev 0.11.2-1
tools for public and transparent logging of signed checksums (library)
https://git.glasklar.is/sigsum/core/sigsum-go
sudo apt install golang-sigsum-sigsum-go-dev- Section: golang
- Architecture: all
- Source Package: sigsum-go
- normalized package name match
- Matched by: Sigsum Go
Debian apt95%
sigsum-go 0.11.2-1+b3
tools for public and transparent logging of signed checksums
https://git.glasklar.is/sigsum/core/sigsum-go
sudo apt install sigsum-go- Section: golang
- Architecture: amd64
- Source Package: sigsum-go
- 1 dependencies
- normalized package name match
- Matched by: Sigsum Go
Ubuntu apt95%
golang-sigsum-sigsum-go-dev 0.7.2-2
tools for public and transparent logging of signed checksums (library)
sudo apt install golang-sigsum-sigsum-go-dev- Section: universe/golang
- Architecture: all
- Source Package: sigsum-go
- normalized package name match
- Matched by: Sigsum Go
Ubuntu apt95%
sigsum-go 0.7.2-2
tools for public and transparent logging of signed checksums
sudo apt install sigsum-go- Section: universe/golang
- Architecture: amd64
- 1 dependencies
- normalized package name match
- Matched by: Sigsum Go
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment