sigstore

All

63 repositories

root-signing
Public
TUF repository for Sigstore trust root
Makefile
•
Apache License 2.0
•88•107•21•3•Updated Jul 13, 2025Jul 13, 2025
root-signing-staging
Public
Staging TUF repository for Sigstore trust root
Apache License 2.0
•9•9•7•1•Updated Jul 13, 2025Jul 13, 2025
sigstore-ruby
Public
Pure-ruby implementation of sigstore verification
Ruby
•
Apache License 2.0
•6•24•3•7•Updated Jul 12, 2025Jul 12, 2025
sigstore-python
Public
A Sigstore client written in Python
python security supply-chain codesigning
Python
•
Other
•61•277•50•2•Updated Jul 12, 2025Jul 12, 2025
model-transparency
Public
Supply chain security for ML
security machine-learning supply-chain sigstore
Python
•
Apache License 2.0
•36•173•22•3•Updated Jul 11, 2025Jul 11, 2025
sigstore-go
Public
Go library for Sigstore signing and verification
go golang sigstore
Go
•
Apache License 2.0
•34•74•7•0•Updated Jul 11, 2025Jul 11, 2025
sigstore-java
Public
java clients for sigstore
Java
•
Apache License 2.0
•24•57•30•15•Updated Jul 11, 2025Jul 11, 2025
terraform-modules
Public
Terraform modules for Sigstore cloud infrastructure
HCL
•
Apache License 2.0
•6•0•1•2•Updated Jul 11, 2025Jul 11, 2025
sigstore-devops-tools
Public
Tools & services used to help in the development flow of sigstore
devops automation tools sigstore
Go
•
Apache License 2.0
•3•6•0•0•Updated Jul 11, 2025Jul 11, 2025
timestamp-authority
Public
RFC3161 Timestamp Authority
Go
•
Apache License 2.0
•44•92•4•2•Updated Jul 11, 2025Jul 11, 2025
sigstore-conformance
Public
Conformance testing for Sigstore clients
tests conformance sigstore
Python
•13•9•26•1•Updated Jul 10, 2025Jul 10, 2025
protobuf-specs
Public
Sigstore's Protocol Buffer specifications
Makefile
•
Apache License 2.0
•40•33•32•6•Updated Jul 10, 2025Jul 10, 2025
fulcio
Public
Sigstore OIDC PKI
Go
•
Apache License 2.0
•152•734•51•6•Updated Jul 10, 2025Jul 10, 2025
cosign
Public
Code signing and transparency for containers and binaries
Go
•
Apache License 2.0
•603•5.1k•246•17•Updated Jul 9, 2025Jul 9, 2025
sigstore-rs
Public
An experimental Rust crate for sigstore
rust-lang rust-libraries sigstore
Rust
•
Apache License 2.0
•60•191•39•9•Updated Jul 9, 2025Jul 9, 2025
sigstore-probers
Public
Probers for sigstore infrastructure
Go
•
Apache License 2.0
•14•6•35•2•Updated Jul 9, 2025Jul 9, 2025
community
Public
General sigstore community repo
Apache License 2.0
•49•40•14•0•Updated Jul 8, 2025Jul 8, 2025
helm-charts
Public
Helm charts for sigstore project
chart helm helm-charts
Smarty
•
Apache License 2.0
•96•77•33•21•Updated Jul 8, 2025Jul 8, 2025
policy-controller
Public
Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
Go
•
Other
•64•136•55•8•Updated Jul 8, 2025Jul 8, 2025
sigstore
Public
Common go library shared across sigstore services and clients
go golang supply-chain cosign sigstore security
Go
•
Apache License 2.0
•136•487•18•7•Updated Jul 8, 2025Jul 8, 2025
rekor-monitor
Public
Log monitor for Rekor to verify immutability and monitor entries
Go
•
Apache License 2.0
•32•36•14•5•Updated Jul 7, 2025Jul 7, 2025
sigstore-js
Public
Code-signing for npm packages
javascript security node supply-chain codesigning
TypeScript
•
Apache License 2.0
•31•165•5•4•Updated Jul 7, 2025Jul 7, 2025
rekor
Public
Software Supply Chain Transparency Log
security supply-chain provenance transparency-log
Go
•
Apache License 2.0
•179•981•72•13•Updated Jul 7, 2025Jul 7, 2025
rekor-tiles
Public
Signature Transparency Log designed for ease of use, low cost, and minimal maintenance
security supply-chain provenance transparency-log
Go
•
Apache License 2.0
•9•15•70•4•Updated Jul 7, 2025Jul 7, 2025
gitsign
Public
Keyless Git signing using Sigstore
git signing sigstore
Go
•
Other
•70•1k•23•1•Updated Jul 7, 2025Jul 7, 2025
rekor-search-ui
Public
Search Rekor for entries
TypeScript
•
Apache License 2.0
•29•34•5•4•Updated Jul 7, 2025Jul 7, 2025
scaffolding
Public
Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
Go
•
Apache License 2.0
•60•66•5•4•Updated Jul 7, 2025Jul 7, 2025
cosign-installer
Public
Cosign Github Action
cosign
Apache License 2.0
•45•149•2•1•Updated Jul 3, 2025Jul 3, 2025
helm-sigstore
Public
Plugin for Helm to integrate the sigstore ecosystem
sigstore helm
Go
•
Apache License 2.0
•14•64•2•0•Updated Jul 3, 2025Jul 3, 2025
gh-action-sigstore-python
Public
A GitHub Action for sigstore-python
supply-chain codesigning security github-actions
Python
•
Apache License 2.0
•13•53•9•0•Updated Jul 1, 2025Jul 1, 2025