Repositories list

• sigstore-java

  Public
  java clients for sigstore

  Java

  •

  Apache License 2.0

  •21•51•22•12•Updated Feb 19, 2025Feb 19, 2025

• community

  Public
  General sigstore community repo

  Apache License 2.0

  •49•41•16•1•Updated Feb 19, 2025Feb 19, 2025

• gitsign

  Public
  Keyless Git signing using Sigstore

  gitsigningsigstore

  Go

  •

  Other

  •64•972•23•2•Updated Feb 19, 2025Feb 19, 2025

• timestamp-authority

  Public
  RFC3161 Timestamp Authority

  Go

  •

  Apache License 2.0

  •39•80•8•4•Updated Feb 19, 2025Feb 19, 2025

• root-signing-staging

  Public
  Staging TUF repository for Sigstore trust root

  Apache License 2.0

  •7•7•6•0•Updated Feb 19, 2025Feb 19, 2025

• sigstore-ruby

  Public
  Pure-ruby implementation of sigstore verification

  Ruby

  •

  Apache License 2.0

  •2•15•2•5•Updated Feb 19, 2025Feb 19, 2025

• root-signing

  Public
  TUF repository for Sigstore trust root

  Makefile

  •

  Apache License 2.0

  •83•96•15•0•Updated Feb 18, 2025Feb 18, 2025

• sigstore-go

  Public
  Go library for Sigstore signing and verification

  gogolangsigstore

  Go

  •

  Apache License 2.0

  •27•55•15•7•Updated Feb 18, 2025Feb 18, 2025

• github-sync

  Public
  Pulumi GitHub Sync for sigstore

  automationpulumisigstore

  Go

  •

  Apache License 2.0

  •4•6•0•1•Updated Feb 18, 2025Feb 18, 2025

• sigstore-rs

  Public
  An experimental Rust crate for sigstore

  rust-langrust-librariessigstore

  Rust

  •

  Apache License 2.0

  •56•185•38•9•Updated Feb 18, 2025Feb 18, 2025

• sigstore

  Public
  Common go library shared across sigstore services and clients

  gogolangsupply-chain+ 3cosignsigstoresecurity

  Go

  •

  Apache License 2.0

  •124•461•36•14•Updated Feb 18, 2025Feb 18, 2025

• scaffolding

  Public
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

  HCL

  •

  Apache License 2.0

  •58•61•10•1•Updated Feb 18, 2025Feb 18, 2025

• sigstore-probers

  Public
  Probers for sigstore infrastructure

  Go

  •

  Apache License 2.0

  •13•6•4•3•Updated Feb 18, 2025Feb 18, 2025

• cosign

  Public
  Code signing and transparency for containers and binaries

  Go

  •

  Apache License 2.0

  •560•4.7k•234•23•Updated Feb 17, 2025Feb 17, 2025

• rekor

  Public
  Software Supply Chain Transparency Log

  securitysupply-chainprovenance+ 1transparency-log

  Go

  •

  Apache License 2.0

  •171•932•77•6•Updated Feb 17, 2025Feb 17, 2025

• protobuf-specs

  Public
  Protocol Buffer specifications

  Rust

  •

  Apache License 2.0

  •32•27•28•6•Updated Feb 17, 2025Feb 17, 2025

• rekor-monitor

  Public
  Log monitor for Rekor to verify immutability and monitor entries

  Go

  •

  Apache License 2.0

  •26•30•11•3•Updated Feb 17, 2025Feb 17, 2025

• helm-sigstore

  Public
  Plugin for Helm to integrate the sigstore ecosystem

  sigstorehelm

  Go

  •

  Apache License 2.0

  •13•60•2•1•Updated Feb 17, 2025Feb 17, 2025

• sigstore-devops-tools

  Public
  Tools & services used to help in the development flow of sigstore

  devopsautomationtools+ 1sigstore

  Go

  •

  Apache License 2.0

  •3•6•0•0•Updated Feb 17, 2025Feb 17, 2025

• sigstore-js

  Public
  Code-signing for npm packages

  javascriptsecuritynode+ 2supply-chaincodesigning

  TypeScript

  •

  Apache License 2.0

  •23•160•5•8•Updated Feb 17, 2025Feb 17, 2025

• fulcio

  Public
  Sigstore OIDC PKI

  Go

  •

  Apache License 2.0

  •142•678•50•6•Updated Feb 17, 2025Feb 17, 2025

• rekor-search-ui

  Public
  Search Rekor for entries

  TypeScript

  •

  Apache License 2.0

  •24•31•5•6•Updated Feb 17, 2025Feb 17, 2025

• sigstore-python

  Public
  A Sigstore client written in Python

  pythonsecuritysupply-chain+ 1codesigning

  Python

  •

  Other

  •52•252•33•1•Updated Feb 14, 2025Feb 14, 2025

• helm-charts

  Public
  Helm charts for sigstore project

  charthelmhelm-charts

  Smarty

  •

  Apache License 2.0

  •94•70•31•20•Updated Feb 13, 2025Feb 13, 2025

• policy-controller

  Public
  Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign

  Go

  •

  Other

  •58•126•53•16•Updated Feb 13, 2025Feb 13, 2025

• docs

  Public
  Sigstore documentation

  HTML

  •

  MIT License

  •84•81•68•3•Updated Feb 10, 2025Feb 10, 2025

• architecture-docs

  Public
  Specification of sigstore's architecture in an IETF internet-draft format

  Other

  •67•4•21•0•Updated Feb 6, 2025Feb 6, 2025

• TSC

  Public
  sigstore Technical Steering Committee

  5•7•2•0•Updated Feb 5, 2025Feb 5, 2025

• cosign-installer

  Public
  Cosign Github Action

  cosign

  Apache License 2.0

  •43•136•0•0•Updated Feb 5, 2025Feb 5, 2025

• homebrew-tap

  Public
  Sigstore Homebrew Tap

  homebrew-formulahomebrew-tapcosign+ 3rekorhomebrewtap

  Ruby

  •

  Apache License 2.0

  •8•7•0•0•Updated Feb 4, 2025Feb 4, 2025