diff --git a/app-crypt/step-cli/Manifest b/app-crypt/step-cli/Manifest
new file mode 100644
index 0000000..a4283c9
--- /dev/null
+++ b/app-crypt/step-cli/Manifest
@@ -0,0 +1,3 @@
+DIST step-cli-0.31.0.tar.gz 14882168 SHA256 2bc654b26ca467848edb764620d6f17febea9d7d3629368b76dd20ce40c6ef32 SHA512 de3c1cd3d7d7ff045d7dd26029f89255089ba12845932b383d4a421ec3996e036226d45f01368e9bcd6e8369ef550b65d34c8df6f6f33a9d02e57a12c3aa3f24 WHIRLPOOL 2509bb914ef307edae65fe20a26f2b373b69bcd3fd3e6ee34d6ef4c632e94e254002c9e0346d3744e73fc669d5088469386e20713a13e9368187ed77c61e82ae
+DIST step-cli-0.31.0.tar.gz.sigstore.json 8545 SHA256 653ee8b8f30ecf9ca2f41f6c86c23bdd21a61c71f4e8c6dfd9c8aa1b2d345009 SHA512 d299acbc1edb5347f37167d8f03c7dbc9ed3c17c900ad140f4855771c6459e865771952f3d04b422efff043308ef773928f129d7676ec444601e78f493b1156f WHIRLPOOL e44a3b297b20ff5297716561141f8ca56788b97183c8ab69e15c674d8cca0e784ce0a775721fa5cc5085df87778c8d601ce0e5887361f1aa41c65af7053dc114
+EBUILD step-cli-0.31.0.ebuild 988 SHA256 2b21bd1095c832233b17b8873f9c082ac92195799dc98aa7d7a71e2bba35a36a SHA512 dbe09d9708d574276799ec6ccfa63137457f2127a254a76ec927be6c8f4d66bbb5af32dbe63d013b5fc9d25958d40b53674d73b66cb8e5db819233da7d6cedcb WHIRLPOOL 263e77a4373cdec361d08c7f06a392db729a36d0a5946ea67d289a3ecb7985acffa32164ca15d0f12664ba6f64f268c965b5dc4e3eb5d53e685c170643ddecd1
diff --git a/app-crypt/step-cli/step-cli-0.31.0.ebuild b/app-crypt/step-cli/step-cli-0.31.0.ebuild
new file mode 100644
index 0000000..c69ccf3
--- /dev/null
+++ b/app-crypt/step-cli/step-cli-0.31.0.ebuild
@@ -0,0 +1,40 @@
+# Copyright 2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+MY_P=cli
+
+DESCRIPTION=""
+HOMEPAGE=""
+SRC_URI="https://github.com/smallstep/${MY_P}/releases/download/v${PVR}/step_linux_amd64.tar.gz -> ${P}.tar.gz
+	verify-sig? ( https://github.com/smallstep/${MY_P}/releases/download/v${PVR}/step_linux_amd64.tar.gz.sigstore.json -> ${P}.tar.gz.sigstore.json )"
+
+LICENSE=""
+SLOT="0"
+KEYWORDS="amd64"
+
+DEPEND=""
+RDEPEND="${DEPEND}"
+BDEPEND="verify-sig? ( app-containers/cosign )"
+
+IUSE="-verify-sig"
+
+S="${WORKDIR}/step_linux_amd64"
+
+src_unpack() {
+	if use verify-sig ; then
+		# Call cosign here to verify the sig
+		cosign verify-blob \
+			--bundle "${P}.sigstore.json" \
+			--certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
+			--certificate-oidc-issuer https://token.actions.githubusercontent.com \
+			"${P}.tar.gz" || die "Signature verification failed"
+	fi
+
+	unpack "${P}.tar.gz"
+}
+
+src_install() {
+	dobin bin/step
+}