diff --git a/security/rekor/Makefile b/security/rekor/Makefile
index 85407aac7de7..67e70256f085 100644
--- a/security/rekor/Makefile
+++ b/security/rekor/Makefile
@@ -1,66 +1,65 @@
 PORTNAME=	rekor
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.4.3
-PORTREVISION=	1
+DISTVERSION=	1.5.0
 CATEGORIES=	security
 
 MAINTAINER=	bofh@FreeBSD.org
 COMMENT=	Software Supply Chain Transparency Log ${${FLAVOR}_COMMENT}
 WWW=		https://www.sigstore.dev/
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 FLAVORS=	client server
 FLAVOR?=	${FLAVORS:[1]}
 client_PKGNAMESUFFIX=	-client
 client_COMMENT=		(client only)
 client_PLIST=	${.CURDIR}/pkg-plist.client
 server_PKGNAMESUFFIX=	-server
 server_COMMENT=		(server only)
 server_PLIST=	${.CURDIR}/pkg-plist.server
 
 USES=		cpe go:modules
 CPE_VENDOR=	linuxfoundation
 .if ${FLAVOR} == server
 USE_RC_SUBR=	rekor
 .endif
 
 GO_MODULE=	github.com/sigstore/rekor
 .if ${FLAVOR} == client
 GO_TARGET=	./cmd/rekor-cli
 .elif ${FLAVOR} == server
 GO_TARGET=	./cmd/rekor-server \
 		./cmd/backfill-index \
 		./cmd/cleanup-index \
 		./cmd/copy-index
 .endif
 GO_BUILDFLAGS=	-ldflags="\
 	-X sigs.k8s.io/release-utils/version.gitVersion=$(DISTVERSION) \
 	-X sigs.k8s.io/release-utils/version.gitCommit=$(GIT_HASH) \
 	-X sigs.k8s.io/release-utils/version.gitTreeState=clean \
 	-X sigs.k8s.io/release-utils/version.buildDate=${SOURCE_DATE_EPOCH:U${SOURCE_DATE_EPOCH_CMD:sh}}"
 
 .if ${FLAVOR} == server
 USERS=		${PORTNAME}
 GROUPS=		${PORTNAME}
 .endif
 
-GIT_HASH=	cb5b1d5f364a8437e1c6c857b200283e2dcc2b29
+GIT_HASH=	fe9717fd6ee4cfecedc30e5fd64c9872bc2ac61c
 
 .include <bsd.port.pre.mk>
 
 # Bring DISTINFO_FILE into scope so we can get the timestamp.
 SOURCE_DATE_EPOCH_CMD=	date -ur \
 			$$(${GREP} -m1 TIMESTAMP ${DISTINFO_FILE} | ${SED} -e 's/[^0-9]//g') \
 			'+%Y-%m-%dT%H:%M:%SZ'
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/etc/rekor
 .if ${FLAVOR} == client
 	${INSTALL_DATA} ${WRKSRC}/config/rekor.yaml ${STAGEDIR}${PREFIX}/etc/rekor/rekor.yaml.sample
 .elif ${FLAVOR} == server
 	${INSTALL_DATA} ${WRKSRC}/rekor-server.yaml ${STAGEDIR}${PREFIX}/etc/rekor/rekor-server.yaml.sample
 .endif
 
 .include <bsd.port.post.mk>
diff --git a/security/rekor/distinfo b/security/rekor/distinfo
index 580a5eb6430d..50d2dedbc872 100644
--- a/security/rekor/distinfo
+++ b/security/rekor/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1765531221
-SHA256 (go/security_rekor/rekor-v1.4.3/v1.4.3.mod) = 58b176e1936bf2f137e19f8ec737e9a91c16d5eedb7848d2d07ce051ab630965
-SIZE (go/security_rekor/rekor-v1.4.3/v1.4.3.mod) = 11819
-SHA256 (go/security_rekor/rekor-v1.4.3/v1.4.3.zip) = 9b2b6f67515fec43cb16668de0239f5074bf0584e3f3cd0729ecf25e9a34d085
-SIZE (go/security_rekor/rekor-v1.4.3/v1.4.3.zip) = 1220674
+TIMESTAMP = 1769278120
+SHA256 (go/security_rekor/rekor-v1.5.0/v1.5.0.mod) = d82342a4adb9e8a90dfb12667d9cf235882a46f7656ee7cb7ca1728d6420429e
+SIZE (go/security_rekor/rekor-v1.5.0/v1.5.0.mod) = 11763
+SHA256 (go/security_rekor/rekor-v1.5.0/v1.5.0.zip) = f56a8e36623cc014dffd33c504eab46bc28b4b9c428619b8c30456755e0882fa
+SIZE (go/security_rekor/rekor-v1.5.0/v1.5.0.zip) = 1220905