Rekor is a cryptographically secure, immutable append-only log of signatures. The rekor CLI records signed metadata to the transparency log, verifies entries and inclusion proofs, and retrieves entries by public key or artifact.
Publisher’s description
What is rekor-cli?
rekor-cli is an open-source program for Windows from sigstore.
Installation and requirements
Official installers exist for 64-bit as Portable. It runs without installation (portable).
Popularity and file types
The Chocolatey package has been downloaded 266 times.
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Portable: runs without installation
- Updated in the last two months
Cons
- No native ARM64 build
In short: rekor-cli is an open-source Windows tool for 64-bit PCs.
Is rekor-cli safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
23A8CEC923418881A88F270788AFE78A6EF86E631750CCA9E26B22685EFD94FE· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 1 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 1.5.5Latest | October 21, 2026 | — | 64-bit Portable |
Install from the command line
Silent install ›winget install --id Sigstore.Rekor -echoco install rekor-cli -yProgram files (.exe): rekor-cli.exe
Related guide: How to use winget: install and update apps
Information
- Publisher
- sigstore
- Licence
- Apache-2.0
- Price
- Free
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- Portable
- Version
- 1.5.5
- Released
- October 21, 2026
- Added to the catalogue
- November 10, 2026
- Versions listed
- 1
- Chocolatey downloads
- 266
- Website
- github.com
- winget ID
- Sigstore.Rekor
- Chocolatey package
- rekor-cli
Ratings and reviews
No reviews yet. Be the first to rate it.
Frequently asked questions
Is rekor-cli free?
Yes. rekor-cli is open-source software under the Apache-2.0 licence.
Is rekor-cli safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install rekor-cli with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does rekor-cli run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Can I use rekor-cli without administrator rights?
Yes, it is portable: unpack and run it.
