sigstore

All

63 repositories

root-signing
Public
TUF repository for Sigstore trust root
Makefile
•
Apache License 2.0
•87•105•19•2•Updated Jun 19, 2025Jun 19, 2025
sigstore
Public
Common go library shared across sigstore services and clients
go golang supply-chain cosign sigstore security
Go
•
Apache License 2.0
•135•485•18•5•Updated Jun 19, 2025Jun 19, 2025
sigstore-java
Public
java clients for sigstore
Java
•
Apache License 2.0
•24•57•28•10•Updated Jun 19, 2025Jun 19, 2025
sigstore-python
Public
A Sigstore client written in Python
python security supply-chain codesigning
Python
•
Other
•59•273•49•2•Updated Jun 19, 2025Jun 19, 2025
sigstore-conformance
Public
Conformance testing for Sigstore clients
tests conformance sigstore
Python
•13•9•25•2•Updated Jun 19, 2025Jun 19, 2025
gh-action-sigstore-python
Public
A GitHub Action for sigstore-python
supply-chain codesigning security github-actions
Python
•
Apache License 2.0
•13•52•9•0•Updated Jun 19, 2025Jun 19, 2025
gitsign
Public
Keyless Git signing using Sigstore
git signing sigstore
Go
•
Other
•69•1k•23•1•Updated Jun 19, 2025Jun 19, 2025
model-transparency
Public
Supply chain security for ML
security machine-learning supply-chain sigstore
Python
•
Apache License 2.0
•36•166•22•4•Updated Jun 19, 2025Jun 19, 2025
root-signing-staging
Public
Staging TUF repository for Sigstore trust root
Apache License 2.0
•9•9•8•2•Updated Jun 19, 2025Jun 19, 2025
sigstore-probers
Public
Probers for sigstore infrastructure
Go
•
Apache License 2.0
•13•6•29•2•Updated Jun 19, 2025Jun 19, 2025
cosign-installer
Public
Cosign Github Action
cosign
Apache License 2.0
•46•148•2•2•Updated Jun 18, 2025Jun 18, 2025
rekor
Public
Software Supply Chain Transparency Log
security supply-chain provenance transparency-log
Go
•
Apache License 2.0
•176•973•72•5•Updated Jun 18, 2025Jun 18, 2025
rekor-monitor
Public
Log monitor for Rekor to verify immutability and monitor entries
Go
•
Apache License 2.0
•32•36•13•4•Updated Jun 18, 2025Jun 18, 2025
sigstore-go
Public
Go library for Sigstore signing and verification
go golang sigstore
Go
•
Apache License 2.0
•32•68•7•1•Updated Jun 18, 2025Jun 18, 2025
timestamp-authority
Public
RFC3161 Timestamp Authority
Go
•
Apache License 2.0
•44•92•2•2•Updated Jun 18, 2025Jun 18, 2025
terraform-modules
Public
Terraform modules for Sigstore cloud infrastructure
HCL
•
Apache License 2.0
•5•0•1•1•Updated Jun 18, 2025Jun 18, 2025
sigstore-ruby
Public
Pure-ruby implementation of sigstore verification
Ruby
•
Apache License 2.0
•5•24•3•9•Updated Jun 18, 2025Jun 18, 2025
fulcio
Public
Sigstore OIDC PKI
Go
•
Apache License 2.0
•150•730•50•4•Updated Jun 17, 2025Jun 17, 2025
scaffolding
Public
Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
Go
•
Apache License 2.0
•60•66•5•2•Updated Jun 17, 2025Jun 17, 2025
cosign
Public
Code signing and transparency for containers and binaries
Go
•
Apache License 2.0
•597•5k•242•16•Updated Jun 17, 2025Jun 17, 2025
helm-sigstore
Public
Plugin for Helm to integrate the sigstore ecosystem
sigstore helm
Go
•
Apache License 2.0
•13•63•2•1•Updated Jun 17, 2025Jun 17, 2025
sigstore-js
Public
Code-signing for npm packages
javascript security node supply-chain codesigning
TypeScript
•
Apache License 2.0
•31•164•5•1•Updated Jun 16, 2025Jun 16, 2025
github-sync
Public
Pulumi GitHub Sync for sigstore
automation pulumi sigstore
Go
•
Apache License 2.0
•4•6•0•1•Updated Jun 16, 2025Jun 16, 2025
policy-controller
Public
Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
Go
•
Other
•63•133•55•11•Updated Jun 16, 2025Jun 16, 2025
sigstore-devops-tools
Public
Tools & services used to help in the development flow of sigstore
devops automation tools sigstore
Go
•
Apache License 2.0
•3•6•0•0•Updated Jun 16, 2025Jun 16, 2025
protobuf-specs
Public
Sigstore's Protocol Buffer specifications
Makefile
•
Apache License 2.0
•40•33•30•6•Updated Jun 16, 2025Jun 16, 2025
rekor-tiles
Public
Signature Transparency Log designed for ease of use, low cost, and minimal maintenance
security supply-chain provenance transparency-log
Go
•
Apache License 2.0
•9•15•71•3•Updated Jun 16, 2025Jun 16, 2025
sigstore-website
Public
Codebase for sigstore.dev
Vue
•
Apache License 2.0
•74•26•12•11•Updated Jun 13, 2025Jun 13, 2025
helm-charts
Public
Helm charts for sigstore project
chart helm helm-charts
Smarty
•
Apache License 2.0
•95•76•32•20•Updated Jun 13, 2025Jun 13, 2025
community
Public
General sigstore community repo
Apache License 2.0
•49•41•14•0•Updated Jun 12, 2025Jun 12, 2025