io.github.mgerhardy.cosign

Owner: Martin Gerhardy

Manages cosign binary lifecycle and provides tasks for container image signing and attestation

https://github.com/mgerhardy/gradle-cosign

Sources: https://github.com/mgerhardy/gradle-cosign

Version 0.1.0 (latest)

Created 27 August 2026.

Manages cosign binary lifecycle and provides tasks for container image signing and attestation

Add this plugin to your build using the plugins DSL:

plugins {
  id("io.github.mgerhardy.cosign") version "0.1.0"
}

See also:

Adding the plugin to build logic for usage in precompiled script plugins.

See the relevant documentation for more information.

Add this plugin as a dependency to <convention-plugins-build>/build.gradle(.kts):
```
dependencies {
  implementation("io.github.mgerhardy.cosign:io.github.mgerhardy.cosign.gradle.plugin:0.1.0")
}
```
It can then be applied in the precompiled script plugin:
```
plugins {
  id("io.github.mgerhardy.cosign")
}
```

The legacy method of plugin application.

See the relevant documentation for more information.

buildscript {
  repositories {
    gradlePluginPortal()
  }
  dependencies {
    classpath("io.github.mgerhardy.cosign:io.github.mgerhardy.cosign.gradle.plugin:0.1.0")
  }
}

apply(plugin = "io.github.mgerhardy.cosign")

Applying plugins to all subprojects .