sigstore

All

60 repositories

root-signing-staging
Public
Staging TUF repository for Sigstore trust root
Apache License 2.0
•7•7•6•1•Updated Feb 9, 2025Feb 9, 2025
root-signing
Public
TUF repository for Sigstore trust root
Makefile
•
Apache License 2.0
•83•96•15•0•Updated Feb 8, 2025Feb 8, 2025
rekor
Public
Software Supply Chain Transparency Log
security supply-chain provenance transparency-log
Go
•
Apache License 2.0
•167•930•77•8•Updated Feb 8, 2025Feb 8, 2025
helm-charts
Public
Helm charts for sigstore project
chart helm helm-charts
Smarty
•
Apache License 2.0
•93•70•31•20•Updated Feb 8, 2025Feb 8, 2025
cosign
Public
Code signing and transparency for containers and binaries
Go
•
Apache License 2.0
•557•4.7k•235•18•Updated Feb 8, 2025Feb 8, 2025
fulcio
Public
Sigstore OIDC PKI
Go
•
Apache License 2.0
•141•674•49•11•Updated Feb 8, 2025Feb 8, 2025
sigstore-python
Public
A Sigstore client written in Python
python security supply-chain codesigning
Python
•
Other
•51•251•33•3•Updated Feb 7, 2025Feb 7, 2025
sigstore-go
Public
Go library for Sigstore signing and verification
go golang sigstore
Go
•
Apache License 2.0
•27•54•16•7•Updated Feb 7, 2025Feb 7, 2025
sigstore
Public
Common go library shared across sigstore services and clients
go golang supply-chain cosign sigstore security
Go
•
Apache License 2.0
•124•462•36•10•Updated Feb 7, 2025Feb 7, 2025
community
Public
General sigstore community repo
Apache License 2.0
•49•41•17•0•Updated Feb 7, 2025Feb 7, 2025
timestamp-authority
Public
RFC3161 Timestamp Authority
Go
•
Apache License 2.0
•39•79•8•1•Updated Feb 7, 2025Feb 7, 2025
protobuf-specs
Public
Protocol Buffer specifications
Rust
•
Apache License 2.0
•32•27•28•5•Updated Feb 7, 2025Feb 7, 2025
architecture-docs
Public
Specification of sigstore's architecture in an IETF internet-draft format
Other
•67•4•21•0•Updated Feb 6, 2025Feb 6, 2025
sigstore-rs
Public
An experimental Rust crate for sigstore
rust-lang rust-libraries sigstore
Rust
•
Apache License 2.0
•56•186•37•7•Updated Feb 6, 2025Feb 6, 2025
sigstore-devops-tools
Public
Tools & services used to help in the development flow of sigstore
devops automation tools sigstore
Go
•
Apache License 2.0
•3•6•0•1•Updated Feb 6, 2025Feb 6, 2025
sigstore-ruby
Public
Pure-ruby implementation of sigstore verification
Ruby
•
Apache License 2.0
•2•14•2•5•Updated Feb 6, 2025Feb 6, 2025
scaffolding
Public
Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
HCL
•
Apache License 2.0
•57•61•9•0•Updated Feb 5, 2025Feb 5, 2025
policy-controller
Public
Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
Go
•
Other
•57•126•53•16•Updated Feb 5, 2025Feb 5, 2025
TSC
Public
sigstore Technical Steering Committee
5•7•2•0•Updated Feb 5, 2025Feb 5, 2025
helm-sigstore
Public
Plugin for Helm to integrate the sigstore ecosystem
sigstore helm
Go
•
Apache License 2.0
•13•60•2•0•Updated Feb 5, 2025Feb 5, 2025
cosign-installer
Public
Cosign Github Action
cosign
Apache License 2.0
•43•137•0•0•Updated Feb 5, 2025Feb 5, 2025
sigstore-probers
Public
Probers for sigstore infrastructure
Go
•
Apache License 2.0
•13•6•4•4•Updated Feb 5, 2025Feb 5, 2025
homebrew-tap
Public
Sigstore Homebrew Tap
homebrew-formula homebrew-tap cosign rekor homebrew tap
Ruby
•
Apache License 2.0
•8•7•0•0•Updated Feb 4, 2025Feb 4, 2025
docs
Public
Sigstore documentation
HTML
•
MIT License
•84•81•68•4•Updated Feb 4, 2025Feb 4, 2025
sigstore-js
Public
Code-signing for npm packages
javascript security node supply-chain codesigning
TypeScript
•
Apache License 2.0
•23•161•5•1•Updated Feb 4, 2025Feb 4, 2025
rekor-monitor
Public
Log monitor for Rekor to verify immutability and monitor entries
Go
•
Apache License 2.0
•26•30•14•3•Updated Feb 4, 2025Feb 4, 2025
gh-action-sigstore-python
Public
A GitHub Action for sigstore-python
supply-chain codesigning security github-actions
Python
•
Apache License 2.0
•12•49•7•0•Updated Feb 4, 2025Feb 4, 2025
github-sync
Public
Pulumi GitHub Sync for sigstore
automation pulumi sigstore
Go
•
Apache License 2.0
•4•6•0•1•Updated Feb 3, 2025Feb 3, 2025
model-transparency
Public
Supply chain security for ML
security machine-learning supply-chain sigstore
Python
•
Apache License 2.0
•32•128•26•2•Updated Feb 3, 2025Feb 3, 2025
gitsign
Public
Keyless Git signing using Sigstore
git signing sigstore
Go
•
Other
•63•972•23•4•Updated Feb 3, 2025Feb 3, 2025