macOS
Homebrew已验证 · 100%
brew install signify-osxlocal Homebrew formula metadata
MacPorts已验证 · 94%
sudo port install signifyMacPorts ports tree · security/signify/Portfile · 来源: api.github.com
安装
其他安装命令
Linux
Alpine Linux apk已验证 · 92%
sudo apk add signifyAlpine Linux edge package indexes · signify · 来源: dl-cdn.alpinelinux.org
Debian apt已验证 · 92%
sudo apt install signifyDebian stable package indexes · signify · 来源: deb.debian.org
Fedora dnf已验证 · 92%
sudo dnf install signifyFedora Rawhide package metadata · signify · 来源: dl.fedoraproject.org
Nix已验证 · 92%
nix profile install nixpkgs#signifynixpkgs package indexes · pkgs/by-name/si/signify/package.nix · 来源: api.github.com
Arch Linux pacman已验证 · 92%
sudo pacman -S signifyArch Linux sync databases · signify · 来源: geo.mirror.pkgbuild.com
openSUSE zypper已验证 · 92%
sudo zypper install signifyopenSUSE Tumbleweed package metadata · signify · 来源: download.opensuse.org
概览
软件包摘要
Cryptographically sign and verify files
历史
项目历史与用法
signify-osx is a small, audit-oriented macOS port of OpenBSD's signify file-signing utility.
项目历史
signify-osx ports OpenBSD's signify(1) utility to macOS. The maintainer states that it tracks upstream OpenBSD sources directly and minimizes portability changes to preserve auditability.
采用历史
The port is available through Homebrew and MacPorts. Comparable signify implementations are also packaged across several Unix-like operating systems, reflecting the utility's role in lightweight package and artifact verification.
使用方式
Users generate or supply signify key pairs, sign files with a secret key, and verify signatures with a public key. Package-oriented use centers on authenticating release manifests and downloaded artifacts.
为什么软件包爱好者会关心
signify is closely associated with OpenBSD's minimalist approach to signed releases and packages. The macOS port deliberately keeps its portability layer small so users can compare and audit it against upstream OpenBSD sources.
时间线
- 2014: OpenBSD introduced signify for signing and verifying releases.
- 2015: signify-osx began providing the utility to OS X users.
- 2019: The port documented testing through macOS 10.14 and continued direct tracking of OpenBSD sources.
Related projects
- OpenBSD signify(1) is the authoritative upstream utility.
- The portable `signify` implementations packaged by other operating systems serve the same signing and verification format.
来源
- Authoritative OpenBSD manual: https://man.openbsd.org/signify.1
- Official signify-osx repository and README: https://github.com/jpouellet/signify-osx
安全态势
风险级别：绿色
narrow executable package without higher-risk signals.
风险分类器
绿色 风险 · 低 置信度 · appliance
原因
- narrow executable package without higher-risk signals
信号
- metadata:no-higher-risk-signals
安装行为
- formula 元数据中未记录 Homebrew post-install 钩子。
- Homebrew bottle 元数据适用于 11 个平台目标。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
signify | cli | 全局可执行文件 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-11-04
管理器版本1.4
管理器更新时间2026-09-13
本地数据OK
上游当前
检测到的最新版本1.4
https://github.com/jpouellet/signify-osx
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:signify-osx |
|---|---|
| 版本 | 1.4 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/signify-osx |
| 主页 | https://man.openbsd.org/signify.1 |
| 仓库 | https://github.com/jpouellet/signify-osx |
| 上游文档 | https://man.openbsd.org/signify.1 |
| 许可证 | ISC |
| 源码归档 | https://github.com/jpouellet/signify-osx/archive/refs/tags/1.4.tar.gz |
| 最后更新 | 2026-09-13T02:25:45Z |
| Pulse | updated |
| Bottle | 可用 (于 arm64_big_sur, arm64_golden_gate, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, monterey, sonoma, ventura) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | signify-osx |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Requirements |
|
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
MacPorts94%
signify
sudo port install signify- installed executable or alias match
- 匹配方式：Signify
Debian apt92%
signify 1.14-7
Automatic, semi-random ".signature" rotator/generator
sudo apt install signify- Section: mail
- Architecture: all
- 1 依赖
- installed executable or alias match
- 匹配方式：Signify
Nix92%
signify
nix profile install nixpkgs#signify- installed executable or alias match
- 匹配方式：Signify
Ubuntu apt92%
signify 1.14-7
Automatic, semi-random ".signature" rotator/generator
sudo apt install signify- Section: universe/mail
- Architecture: all
- 1 依赖
- installed executable or alias match
- 匹配方式：Signify
apk92%
signify 32-r1
OpenBSD tool to sign and verify signatures on files
https://github.com/aperezdc/signify
sudo apk add signify- License: ISC
- Architecture: x86_64
- Source Package: signify
- 1 依赖
- 1 提供
- installed executable or alias match
- 匹配方式：Signify
apk92%
signify-doc 32-r1
OpenBSD tool to sign and verify signatures on files (documentation)
https://github.com/aperezdc/signify
sudo apk add signify-doc- License: ISC
- Architecture: x86_64
- Source Package: signify
- installed executable or alias match
- 匹配方式：Signify
dnf92%
signify 33-2.fc45
Sign and verify signatures on files
https://codeberg.org/aperezdc/signify
sudo dnf install signify- License: ISC AND Beerware AND BSD-3-Clause AND MIT AND LicenseRef-Fedora-Public-Domain
- Category: Unspecified
- Architecture: x86_64
- Source Package: signify
- 3 依赖
- 1 提供
- installed executable or alias match
- 匹配方式：Signify
pacman92%
signify 33-1
OpenBSD tool to cryptographically sign and verify files
https://codeberg.org/aperezdc/signify
sudo pacman -S signify- License: BSD
- Architecture: x86_64
- 2 依赖
- installed executable or alias match
- 匹配方式：Signify
zypper92%
signify 33-1.3
OpenBSD tool to sign and verify signatures on files (portable version)
https://codeberg.org/aperezdc/signify
sudo zypper install signify- License: BSD-3-Clause
- Category: Productivity/Networking/Security
- Architecture: x86_64
- Source Package: signify
- 2 依赖
- 1 提供
- installed executable or alias match
- 匹配方式：Signify
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation