Skip to content

Commit

Permalink
Clarify difference between sigstore-go and cosign.
Browse files Browse the repository at this point in the history
Co-authored-by: Zach Steindler <[email protected]>
Signed-off-by: Hayley Denbraver <[email protected]>
  • Loading branch information
Hayley Denbraver and steiza authored Nov 8, 2024
1 parent c8ad268 commit 838ed10
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions content/en/language_clients/go/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,9 +5,9 @@ title: Go Client Overview
weight: 5
---

[`sigstore-go`](https://pkg.go.dev/github.com/sigstore/sigstore-go) is the Go language client for Sigstore.
[`sigstore-go`](https://pkg.go.dev/github.com/sigstore/sigstore-go) is the Go language client library for Sigstore.

[Cosign](../../cosign/signing/overview.md) is a command line utility that is used to sign software artifacts and verify signatures using Sigstore and is also written in Go. `sigstore-go` is a lighter weight tool and boasts the following benefits:
`sigstore-go` is intended as a minimal dependency library for signing and verifying. It's not intended to replace [cosign](../../cosign/signing/overview.md), which provides a CLI with many features for interacting with Sigstore. Over time, `cosign` will use `sigstore-go` for verification.

- Friendly API for integrating Go code with Sigstore
- Smaller dependency tree
Expand Down

0 comments on commit 838ed10

Please sign in to comment.