# Install sigsum-go with Homebrew, apt

Key transparency toolkit. Version 0.14.1 via Homebrew; verified 2026-06-09.

## Install

```sh
sudo av install brew:sigsum-go
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install sigsum-go
```

  Evidence: local Homebrew formula metadata

### Linux

- Debian apt (92%):

```sh
sudo apt install golang-sigsum-sigsum-go-dev
```

  Evidence: Debian stable package indexes: golang-sigsum-sigsum-go-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

## Package facts

- **Package key:** brew:sigsum-go
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/sigsum-go>
- **Version:** 0.14.1
- **Source summary:** Key transparency toolkit
- **Homepage:** <https://sigsum.org>
- **Repository:** <https://git.glasklar.is/sigsum/core/sigsum-go>
- **Upstream docs:** <https://sigsum.org>
- **License:** BSD-2-Clause
- **Source archive:** <https://git.glasklar.is/sigsum/core/sigsum-go/-/archive/v0.14.1/sigsum-go-v0.14.1.tar.bz2>
- **Last updated:** 2026-06-09T07:45:22Z
- **Generated:** 2026-07-08T18:08:21+00:00

## Executables

- sigsum-key (cli)
- sigsum-monitor (cli)
- sigsum-submit (cli)
- sigsum-token (cli)
- sigsum-verify (cli)
- sigsum-witness (cli)
- sigsum-key (alias)
- sigsum-monitor (alias)
- sigsum-submit (alias)
- sigsum-token (alias)
- sigsum-verify (alias)
- sigsum-witness (alias)

## Build dependencies

- go

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 0.14.1
- Package-manager updated: 2026-06-09
- Local data: ok
- Upstream repository: https://sigsum.org
- info: Release/tag comparison is only available for GitHub repositories.

## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals

## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** sigsum-go
- **Version Scheme:** 0
- **Revision:** 0
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable

## Other Package-Manager Records

- Debian apt - golang-sigsum-sigsum-go-dev - 0.11.2-1: normalized package name match | Debian stable package indexes: golang-sigsum-sigsum-go-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | tools for public and transparent logging of signed checksums (library) | https://git.glasklar.is/sigsum/core/sigsum-go
- Debian apt - sigsum-go - 0.11.2-1+b3: normalized package name match | Debian stable package indexes: sigsum-go from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | tools for public and transparent logging of signed checksums | https://git.glasklar.is/sigsum/core/sigsum-go
- Ubuntu apt - golang-sigsum-sigsum-go-dev - 0.7.2-2: normalized package name match | Ubuntu 24.04 LTS package indexes: golang-sigsum-sigsum-go-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | tools for public and transparent logging of signed checksums (library) | https://www.sigsum.org/
- Ubuntu apt - sigsum-go - 0.7.2-2: normalized package name match | Ubuntu 24.04 LTS package indexes: sigsum-go from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | tools for public and transparent logging of signed checksums | https://www.sigsum.org/


## Related links

- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Security and crypto packages](https://www.automicvault.com/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata.
- [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider.
- [go](https://www.automicvault.com/pkg/brew/go/) - Build dependency declared by Homebrew.
- [clamav](https://www.automicvault.com/pkg/brew/clamav/) - Shares av.db curated category or tags: cli, security, signatures.
- [aide](https://www.automicvault.com/pkg/brew/aide/) - Shares av.db curated category or tags: cli, security.
- [aircrack-ng](https://www.automicvault.com/pkg/brew/aircrack-ng/) - Shares av.db curated category or tags: cli, security.
- [amass](https://www.automicvault.com/pkg/brew/amass/) - Shares av.db curated category or tags: cli, security.
- [anubis](https://www.automicvault.com/pkg/brew/anubis/) - Shares av.db curated category or tags: cli, security.
- [authoscope](https://www.automicvault.com/pkg/brew/authoscope/) - Shares av.db curated category or tags: cli, security.
- [azurehound](https://www.automicvault.com/pkg/brew/azurehound/) - Shares av.db curated category or tags: cli, security.
- [bagel](https://www.automicvault.com/pkg/brew/bagel/) - Shares av.db curated category or tags: cli, security.
- [rekor-cli](https://www.automicvault.com/pkg/brew/rekor-cli/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, log, security, transparency, transparency-log.
- [jwt-hack](https://www.automicvault.com/pkg/brew/jwt-hack/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, security, token, toolkit.

## Combined YAML source

View the package source record on GitHub. [combined/sigsum-go.yml](https://github.com/automic-vault/db/blob/main/combined/sigsum-go.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
