rekor-cli sigstore
Install rekor-cli with WinGet
winget install --id=Sigstore.Rekor -e Rekor is a cryptographically secure, immutable append-only log of signatures. The rekor CLI records signed metadata to the transparency log, verifies entries and inclusion proofs, and retrieves entries by public key or artifact.