Cosign vs DigiCert Software Trust Manager

Cosign

7.6 #5 in Code Signing Software

About Cosign

DigiCert Software Trust Manager

7.6 #4 in Code Signing Software

About DigiCert Software Trust Manager
CosignDigiCert Software Trust Manager
Free planYesNo
Free trialNoNo
Paid fromFree—
Open sourceNoNo
PlatformsLinux, macOS, self-hosted, Windowsapi, Linux, macOS, Web, Windows
Free planYes—
Supported targetsOCI container images, blobs, binaries, scripts, configuration files, SBOMs, WASM modules, Tekton bundles, eBPF modules, and In-Toto attestationsWindows binaries and packages; Java archives; Android APK/AAB; macOS APP/DMG/PKG; Linux binaries; NuGet packages; containers; firmware and other artifacts
Certificate providedYesYes
Cloud signingNoYes
HSM key protectionYesYes
Trusted timestampingYesYes
CI/CD signingYesYes
Approval workflows—Yes

Both are listed in Best Code Signing Software. On Samsung Mobile US Press, Cosign scores higher on our published basis.