sigstore

All

63 repositories

root-signing-staging
Public
Staging TUF repository for Sigstore trust root
Apache License 2.0
•9•10•7•1•Updated Aug 3, 2025Aug 3, 2025
root-signing
Public
TUF repository for Sigstore trust root
Makefile
•
Apache License 2.0
•88•107•21•0•Updated Aug 3, 2025Aug 3, 2025
terraform-modules
Public
Terraform modules for Sigstore cloud infrastructure
HCL
•
Apache License 2.0
•6•0•1•1•Updated Aug 1, 2025Aug 1, 2025
rekor
Public
Software Supply Chain Transparency Log
security supply-chain provenance transparency-log
Go
•
Apache License 2.0
•179•990•72•1•Updated Aug 1, 2025Aug 1, 2025
sigstore-java
Public
java clients for sigstore
Java
•
Apache License 2.0
•24•60•28•15•Updated Aug 1, 2025Aug 1, 2025
sigstore-go
Public
Go library for Sigstore signing and verification
go golang sigstore
Go
•
Apache License 2.0
•34•78•9•1•Updated Aug 1, 2025Aug 1, 2025
helm-charts
Public
Helm charts for sigstore project
chart helm helm-charts
Smarty
•
Apache License 2.0
•97•78•34•21•Updated Aug 1, 2025Aug 1, 2025
sigstore-devops-tools
Public
Tools & services used to help in the development flow of sigstore
devops automation tools sigstore
Go
•
Apache License 2.0
•3•6•0•0•Updated Aug 1, 2025Aug 1, 2025
sigstore-conformance
Public
Conformance testing for Sigstore clients
tests conformance sigstore
Python
•14•9•28•2•Updated Aug 1, 2025Aug 1, 2025
protobuf-specs
Public
Sigstore's Protocol Buffer specifications
Makefile
•
Apache License 2.0
•41•33•32•13•Updated Aug 1, 2025Aug 1, 2025
sigstore-ruby
Public
Pure-ruby implementation of sigstore verification
Ruby
•
Apache License 2.0
•6•24•3•8•Updated Aug 1, 2025Aug 1, 2025
sigstore-blog
Public
Codebase for blog.sigstore.dev
CSS
•
Apache License 2.0
•19•6•4•3•Updated Jul 31, 2025Jul 31, 2025
fulcio
Public
Sigstore OIDC PKI
Go
•
Apache License 2.0
•155•741•51•4•Updated Jul 31, 2025Jul 31, 2025
timestamp-authority
Public
RFC3161 Timestamp Authority
Go
•
Apache License 2.0
•44•96•5•1•Updated Jul 31, 2025Jul 31, 2025
rekor-tiles
Public
Signature Transparency Log designed for ease of use, low cost, and minimal maintenance
security supply-chain provenance transparency-log
Go
•
Apache License 2.0
•8•17•65•3•Updated Jul 31, 2025Jul 31, 2025
community
Public
General sigstore community repo
Apache License 2.0
•49•40•14•0•Updated Jul 31, 2025Jul 31, 2025
sigstore-python
Public
A Sigstore client written in Python
python security supply-chain codesigning
Python
•
Other
•62•284•55•5•Updated Jul 30, 2025Jul 30, 2025
gh-action-sigstore-python
Public
A GitHub Action for sigstore-python
supply-chain codesigning security github-actions
Python
•
Apache License 2.0
•13•54•9•0•Updated Jul 30, 2025Jul 30, 2025
model-transparency
Public
Supply chain security for ML
security machine-learning supply-chain sigstore
Python
•
Apache License 2.0
•36•181•22•2•Updated Jul 30, 2025Jul 30, 2025
scaffolding
Public
Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
Go
•
Apache License 2.0
•60•66•5•8•Updated Jul 30, 2025Jul 30, 2025
model-validation-operator
Public
Kubernetes controller to validate AI models
Go
•
Apache License 2.0
•5•22•7•2•Updated Jul 30, 2025Jul 30, 2025
sigstore
Public
Common go library shared across sigstore services and clients
go golang supply-chain cosign sigstore security
Go
•
Apache License 2.0
•137•488•19•7•Updated Jul 30, 2025Jul 30, 2025
sigstore-js
Public
Code-signing for npm packages
javascript security node supply-chain codesigning
TypeScript
•
Apache License 2.0
•30•166•5•1•Updated Jul 29, 2025Jul 29, 2025
rekor-monitor
Public
Log monitor for Rekor to verify immutability and monitor entries
Go
•
Apache License 2.0
•32•36•16•7•Updated Jul 29, 2025Jul 29, 2025
policy-controller
Public
Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
Go
•
Other
•64•140•56•8•Updated Jul 29, 2025Jul 29, 2025
cosign
Public
Code signing and transparency for containers and binaries
Go
•
Apache License 2.0
•612•5.1k•243•19•Updated Jul 29, 2025Jul 29, 2025
github-sync
Public
Pulumi GitHub Sync for sigstore
automation pulumi sigstore
Go
•
Apache License 2.0
•4•6•0•0•Updated Jul 29, 2025Jul 29, 2025
gitsign
Public
Keyless Git signing using Sigstore
git signing sigstore
Go
•
Other
•70•1k•24•1•Updated Jul 28, 2025Jul 28, 2025
rekor-search-ui
Public
Search Rekor for entries
TypeScript
•
Apache License 2.0
•29•34•5•5•Updated Jul 28, 2025Jul 28, 2025
helm-sigstore
Public
Plugin for Helm to integrate the sigstore ecosystem
sigstore helm
Go
•
Apache License 2.0
•14•65•2•0•Updated Jul 22, 2025Jul 22, 2025