Rekor

## Rekor - Sigstore's Signature Transparency Log Rekor official website: https://github.com/sigstore/rekor Rekor is Sigstore's signature transparency log service, providing an immutable, tamper-resistant ledger for recording software signatures and other metadata. Rekor makes the software supply chain more transparent and verifiable. This application provides a complete Rekor service environment, including Trillian log server, signing service, and search index, supporting the recording, querying, and verification of software signatures. **Note**: In the default community configuration, previously saved data appears to be lost after each restart. This adaptation has resolved the issue by implementing data persistence to ensure that original data remains accessible after application restarts. ## Main Features - 📝 Record and verify software signatures - 🔒 Immutable transparency log based on Trillian - 🔍 Support for multiple types of signatures and attestations - 🔗 Integration with Sigstore ecosystem - 📊 Provides RESTful API interface - 🔐 Support for various cryptographic signature formats ## Usage Instructions 1. After starting the application, Rekor service will automatically initialize and run 2. Submit signature records through RESTful API interface 3. Query and verify signatures using Rekor CLI or API 4. Integrate with other Sigstore tools (such as Cosign, Fulcio) For more usage details, see: https://github.com/lazycatapps/rekor/blob/lazycat-main/USAGE_GUIDE.md