sigstore

All

65 repositories

terraform-modules
Public
Terraform modules for Sigstore cloud infrastructure
HCL
•
Apache License 2.0
•7•3•1•3•Updated Dec 15, 2025Dec 15, 2025
gh-action-sigstore-python
Public
A GitHub Action for sigstore-python
security supply-chain codesigning github-actions
Python
•
Apache License 2.0
•14•62•11•0•Updated Dec 15, 2025Dec 15, 2025
sigstore-rs
Public
An experimental Rust crate for sigstore
rust-lang rust-libraries sigstore
Rust
•
Apache License 2.0
•67•216•45•16•Updated Dec 15, 2025Dec 15, 2025
fulcio
Public
Sigstore OIDC PKI
Go
•
Apache License 2.0
•162•775•51•1•Updated Dec 15, 2025Dec 15, 2025
sigstore
Public
Common go library shared across sigstore services and clients
go golang security supply-chain cosign sigstore
Go
•
Apache License 2.0
•142•492•20•21•Updated Dec 15, 2025Dec 15, 2025
cosign-installer
Public
Cosign Github Action
cosign
Apache License 2.0
•50•172•3•4•Updated Dec 15, 2025Dec 15, 2025
policy-controller
Public
Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
Go
•
Other
•68•150•61•14•Updated Dec 15, 2025Dec 15, 2025
timestamp-authority
Public
RFC3161 Timestamp Authority
Go
•
Apache License 2.0
•50•106•3•1•Updated Dec 15, 2025Dec 15, 2025
scaffolding
Public
Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
Go
•
Apache License 2.0
•63•68•9•6•Updated Dec 15, 2025Dec 15, 2025
rekor-monitor
Public
Log monitor for Rekor to verify immutability and monitor entries
Go
•
Apache License 2.0
•33•40•11•2•Updated Dec 15, 2025Dec 15, 2025
sigstore-js
Public
Code-signing for npm packages
javascript security node supply-chain codesigning
TypeScript
•
Apache License 2.0
•36•172•10•9•Updated Dec 15, 2025Dec 15, 2025
homebrew-tap
Public
Sigstore Homebrew Tap
homebrew tap homebrew-formula homebrew-tap cosign rekor
Ruby
•
Apache License 2.0
•8•8•0•0•Updated Dec 15, 2025Dec 15, 2025
cosign
Public
Code signing and transparency for containers and binaries
Go
•
Apache License 2.0
•673•5.5k•262•26•Updated Dec 15, 2025Dec 15, 2025
model-validation-operator
Public
Kubernetes controller to validate AI models
Go
•
Apache License 2.0
•9•25•12•11•Updated Dec 15, 2025Dec 15, 2025
model-transparency
Public
Supply chain security for ML
security machine-learning supply-chain sigstore
Python
•
Apache License 2.0
•54•210•28•6•Updated Dec 15, 2025Dec 15, 2025
community
Public
General sigstore community repo
Apache License 2.0
•51•43•13•2•Updated Dec 15, 2025Dec 15, 2025
root-signing
Public
TUF repository for Sigstore trust root
Makefile
•
Apache License 2.0
•88•113•19•3•Updated Dec 15, 2025Dec 15, 2025
helm-sigstore
Public
Plugin for Helm to integrate the sigstore ecosystem
helm sigstore
Go
•
Apache License 2.0
•14•67•2•2•Updated Dec 15, 2025Dec 15, 2025
sigstore-a2a
Public
Sigstore A2A Agent Signing
Python
•
Apache License 2.0
•2•13•3•1•Updated Dec 15, 2025Dec 15, 2025
sigstore-rekor-types
Public
Python models for Rekor's API types
Python
•
Apache License 2.0
•4•7•1•28•Updated Dec 15, 2025Dec 15, 2025
root-signing-staging
Public
Staging TUF repository for Sigstore trust root
Apache License 2.0
•10•10•7•4•Updated Dec 15, 2025Dec 15, 2025
sigstore-conformance
Public
Conformance testing for Sigstore clients
tests conformance sigstore
Python
•16•11•31•1•Updated Dec 15, 2025Dec 15, 2025
rekor
Public
Software Supply Chain Transparency Log
security supply-chain provenance transparency-log
Go
•
Apache License 2.0
•193•1k•72•10•Updated Dec 15, 2025Dec 15, 2025
sigstore-python
Public
A Sigstore client written in Python
python security supply-chain codesigning
Python
•
Other
•64•299•47•0•Updated Dec 15, 2025Dec 15, 2025
sigstore-probers
Public
Probers for sigstore infrastructure
Go
•
Apache License 2.0
•15•6•1•2•Updated Dec 15, 2025Dec 15, 2025
rekor-tiles
Public
Signature Transparency Log designed for ease of use, low cost, and minimal maintenance
security supply-chain provenance transparency-log
Go
•
Apache License 2.0
•16•20•33•4•Updated Dec 15, 2025Dec 15, 2025
sigstore-go
Public
Go library for Sigstore signing and verification
go golang sigstore
Go
•
Apache License 2.0
•39•79•9•1•Updated Dec 15, 2025Dec 15, 2025
protobuf-specs
Public
Sigstore's Protocol Buffer specifications
Makefile
•
Apache License 2.0
•46•33•31•6•Updated Dec 15, 2025Dec 15, 2025
gitsign
Public
Keyless Git signing using Sigstore
git signing sigstore
Go
•
Other
•73•1k•28•8•Updated Dec 15, 2025Dec 15, 2025
rekor-search-ui
Public
Search Rekor for entries
TypeScript
•
Apache License 2.0
•34•37•6•10•Updated Dec 15, 2025Dec 15, 2025