Issues

• rekor.sigstore.dev resolves to 18.204.152.241 for some US clients; HTTPS connection refused (v1 uploads fail)

  sigstore/rekor#3010 · Filter by author petebytes opened on Oct 11, 2026
  1

• Acceptable use of the public good Rekor v1 instance for a non-software audit workload

  sigstore/rekor#2993 · Filter by author LouVanGestel opened on Sep 27, 2026

• cannot upload our gpg signed entries anymore

  bug
  sigstore/rekor#2948 · Filter by author msmeissn opened on Aug 24, 2026
  7

• Add bundle output to rekor-cli

  enhancement
  sigstore/rekor#2776 · Filter by author davidcorrigan714 opened on Mar 14, 2026
  2

• Intended usage of rekor

  question
  sigstore/rekor#2528 · Filter by author arewm opened on Jul 3, 2025
  3

  

• MPL-licensed github.com/hashicorp/go-retryablehttp is not allowed in CNCF

  enhancement
  sigstore/rekor#2342 · Filter by author saschagrunert opened on Jan 21, 2025
  3

• Proposal: Deprecate rekor-cli

  enhancementrekor-v2
  sigstore/rekor#2290 · Filter by author Hayden-IO opened on Dec 6, 2024
  3

• Avoid reprocessing data in backfill-index.

  enhancement
  sigstore/rekor#2279 · Filter by author JasonPowr opened on Nov 20, 2024

• Add TLE response media type

  enhancementrekor-v2
  sigstore/rekor#2218 · Filter by author Hayden-IO opened on Aug 26, 2024
  2

• SBOMs report all-zero SHA1 hash for release binaries

  bug
  sigstore/rekor#2175 · Filter by author hidde-jan opened on Jul 11, 2024
  2

• Error while using file as artifact with rekor-cli upload.

  bug
  sigstore/rekor#2138 · Filter by author rajeev-0 opened on Jun 4, 2024
  4

• Incorrect schema definition for LogEntry.body

  bugrekor-v2
  sigstore/rekor#2097 · Filter by author woodruffw opened on Apr 23, 2024

• Proposal to deprecate unused Rekor kinds in public instance: alpine, rpm, rfc3161, jar, tuf

  enhancementrekor-v2
  sigstore/rekor#2080 · Filter by author Hayden-IO opened on Apr 12, 2024
  4

• Checkpoint spec compliance: Mismatched origin string with signature

  enhancementrekor-v2
  sigstore/rekor#2069 · Filter by author Hayden-IO opened on Apr 4, 2024
  2

• Checkpoint spec compliance: Incorrect key ID for non-ECDSA keys

  enhancementrekor-v2
  sigstore/rekor#2062 · Filter by author Hayden-IO opened on Mar 28, 2024
  17

• Output content differs between --format tle and --format json

  enhancement
  sigstore/rekor#2052 · Filter by author lkatalin opened on Mar 18, 2024
  1

• Proposal to deprecate: Removing support for certificate chain on entry upload

  enhancementrekor-v2
  sigstore/rekor#1944 · Filter by author Hayden-IO opened on Jan 9, 2024
  9

• Better docs on how to verify signedEntryTimestamp

  enhancement
  sigstore/rekor#1943 · Filter by author ernoc opened on Jan 9, 2024
  10

• Manual rekor upload with cosign public key

  question
  sigstore/rekor#1899 · Filter by author lkatalin opened on Dec 11, 2023
  2

• docker-compose invalid for GCR images

  enhancement
  sigstore/rekor#1864 · Filter by author cwhiting-fusable opened on Nov 30, 2023
  2

• Search function not returning entries when they are in an inactive shard

  bug
  sigstore/rekor#1825 · Filter by author lkatalin opened on Nov 13, 2023
  1

• Investigate using custom JSON parser

  enhancement
  sigstore/rekor#1812 · Filter by author Hayden-IO opened on Nov 6, 2023
  1

• OpenAPI 3.0 for openapi.yaml?

  enhancementrekor-v2
  sigstore/rekor#1729 · Filter by author woodruffw opened on Oct 3, 2023
  7

• Proposal: Use GCP Datastream to ensure consistency of Redis entries

  enhancement
  sigstore/rekor#1633 · Filter by author jalseth opened on Aug 13, 2023
  3

• Implment details of adding rpm file as pluggable types

  question
  sigstore/rekor#1606 · Filter by author TommyLike opened on Aug 1, 2023
  3