GitHub approval workflow
Capture compliant approvals before the record changes.
Cosign is a GitHub App for engineering teams that need approvals that remain defensible under 21 CFR Part 11, eIDAS, and ESIGN/UETA. It freezes the exact issue or pull request content, re-authenticates each signer, and generates a tamper-evident PDF manifest that lives in GitHub rather than in a shadow system.
Why Cosign
GitHub approvals without the legal ambiguity.
Issue comments and PR merges are easy to edit after the fact. Cosign keeps the original approval record tied to an immutable snapshot, a declared intent, and a verifiable audit trail — so teams can show exactly what was approved and by whom.
Built for regulated engineering workflows
From design review to release signoff, Cosign gives your team a consistent approval path that is anchored to the precise GitHub content being reviewed.
Pricing
Simple pricing is coming soon.
We are finalizing the subscription model for GitHub organizations, pilot cohorts, and enterprise rollouts. If you want early access or want to understand the roadmap, contact us below.
Support
Talk with the Innershell team.
Ask about the product, ask about pricing, or request a pilot to evaluate Cosign in your own GitHub workflow.
Product overview
Learn how Cosign works for issue approvals, PR signoff, audit integrity, and compliance-friendly filing.
Pricing & pilots
Ask about the coming subscription model, trial access, or early access for a pilot implementation.