secant This is a fork of cosign with the intention of escaping dependency hell. There are many things still wrong with this dependency graph, but it is better. The API is not stable.