smallstep/step-cli repository overview

⁠Step CLI

The step command is an easy-to-use CLI tool for building, operating, and automating Public Key Infrastructure (PKI) systems and workflows. step acts as front-end interface to step-ca, an online X.509 and SSH Certificate Authority (CA)⁠. step is also a general-purpose PKI toolkit: You can use it to run a minimalist, offline X.509 CA and to perform many basic crypto operations.

• step Documentation⁠
• Getting Started⁠
• GitHub Repository⁠

⁠Tags

• Alpine-based images: latest and naked versions eg. 0.23.0, 0.23.1, ...
• Bullseye-based images: bullseye and bullseye- versions eg. bullseye-0.23.0, bullseye-0.23.1, ...

⁠Signatures

step-cli uses sigstore/cosign⁠ for signing and verifying containers. Here is an example of how to use cosign to verify a container:

cosign verify smallstep/step-cli:0.23.0 \
--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com

Questions? Ask us on GitHub Discussions⁠ or Discord⁠.