diff --git a/pkgs/tools/security/rekor/default.nix b/pkgs/tools/security/rekor/default.nix
new file mode 100644
index 00000000000..a1470e78058
--- /dev/null
+++ b/pkgs/tools/security/rekor/default.nix
@@ -0,0 +1,31 @@
+{ lib, buildGoModule, fetchFromGitHub }:
+
+buildGoModule rec {
+  pname = "rekor-cli";
+  version = "0.1.1";
+
+  src = fetchFromGitHub {
+    owner = "sigstore";
+    repo = "rekor";
+    rev = "v${version}";
+    sha256 = "1hvkfvc747g5r4h8vb1d8ikqxmlyxsycnlh78agmmjpxlasspmbk";
+  };
+
+  vendorSha256 = "0vdir9ia3hv27rkm6jnvhsfc3mxw36xfvwqnfd34rgzmzcfxlrbv";
+
+  subPackages = [ "cmd/cli" ];
+
+  # Will not be needed with the next version as the package as been renamed upstream
+  postInstall = ''
+    if [ -f "$out/bin/cli" ]; then
+      mv "$out/bin/cli" "$out/bin/rekor-client"
+    fi
+  '';
+
+  meta = with lib; {
+    description = "CLI client for Sigstore, the Signature Transparency Log";
+    homepage = "https://github.com/sigstore/rekor";
+    license = licenses.asl20;
+    maintainers = with maintainers; [ lesuisse ];
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index e71c6a7d3a2..ac0083ceac1 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -7679,6 +7679,8 @@ in
 
   retext = libsForQt5.callPackage ../applications/editors/retext { };
 
+  rekor-cli = callPackage ../tools/security/rekor { };
+
   richgo = callPackage ../development/tools/richgo {  };
 
   rs = callPackage ../tools/text/rs { };