sigstore

All

60 repositories

cosign
Public
Code signing and transparency for containers and binaries
Go
•
Apache License 2.0
•558•4.7k•235•26•Updated Feb 3, 2025Feb 3, 2025
protobuf-specs
Public
Protocol Buffer specifications
Rust
•
Apache License 2.0
•32•26•28•5•Updated Feb 3, 2025Feb 3, 2025
model-transparency
Public
Supply chain security for ML
security machine-learning supply-chain sigstore
Python
•
Apache License 2.0
•32•126•27•2•Updated Feb 3, 2025Feb 3, 2025
sigstore-go
Public
Go library for Sigstore signing and verification
go golang sigstore
Go
•
Apache License 2.0
•27•54•15•6•Updated Feb 3, 2025Feb 3, 2025
sigstore-js
Public
Code-signing for npm packages
javascript security node supply-chain codesigning
TypeScript
•
Apache License 2.0
•23•161•5•6•Updated Feb 3, 2025Feb 3, 2025
sigstore-devops-tools
Public
Tools & services used to help in the development flow of sigstore
devops automation tools sigstore
Go
•
Apache License 2.0
•3•6•0•0•Updated Feb 3, 2025Feb 3, 2025
helm-sigstore
Public
Plugin for Helm to integrate the sigstore ecosystem
sigstore helm
Go
•
Apache License 2.0
•13•60•2•0•Updated Feb 3, 2025Feb 3, 2025
root-signing-staging
Public
Staging TUF repository for Sigstore trust root
Apache License 2.0
•7•7•6•1•Updated Feb 3, 2025Feb 3, 2025
root-signing
Public
TUF repository for Sigstore trust root
Makefile
•
Apache License 2.0
•81•95•15•1•Updated Feb 3, 2025Feb 3, 2025
rekor
Public
Software Supply Chain Transparency Log
security supply-chain provenance transparency-log
Go
•
Apache License 2.0
•168•929•77•8•Updated Feb 3, 2025Feb 3, 2025
timestamp-authority
Public
RFC3161 Timestamp Authority
Go
•
Apache License 2.0
•40•78•9•3•Updated Feb 3, 2025Feb 3, 2025
rekor-monitor
Public
Log monitor for Rekor to verify immutability and monitor entries
Go
•
Apache License 2.0
•26•30•16•5•Updated Feb 3, 2025Feb 3, 2025
scaffolding
Public
Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
HCL
•
Apache License 2.0
•58•61•9•4•Updated Feb 3, 2025Feb 3, 2025
fulcio
Public
Sigstore OIDC PKI
Go
•
Apache License 2.0
•142•673•50•11•Updated Feb 3, 2025Feb 3, 2025
helm-charts
Public
Helm charts for sigstore project
chart helm helm-charts
Smarty
•
Apache License 2.0
•93•69•31•21•Updated Feb 3, 2025Feb 3, 2025
gitsign
Public
Keyless Git signing using Sigstore
git signing sigstore
Go
•
Other
•64•970•23•4•Updated Feb 3, 2025Feb 3, 2025
rekor-search-ui
Public
Search Rekor for entries
TypeScript
•
Apache License 2.0
•24•30•5•6•Updated Feb 3, 2025Feb 3, 2025
sigstore-ruby
Public
Pure-ruby implementation of sigstore verification
Ruby
•
Apache License 2.0
•2•13•2•4•Updated Feb 3, 2025Feb 3, 2025
sigstore-conformance
Public
Conformance testing for Sigstore clients
tests conformance sigstore
Python
•12•8•21•2•Updated Feb 1, 2025Feb 1, 2025
policy-controller
Public
Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
Go
•
Other
•57•126•53•16•Updated Jan 31, 2025Jan 31, 2025
sigstore-probers
Public
Probers for sigstore infrastructure
Go
•
Apache License 2.0
•13•6•4•3•Updated Jan 31, 2025Jan 31, 2025
sigstore-python
Public
A Sigstore client written in Python
python security supply-chain codesigning
Python
•
Other
•51•251•33•2•Updated Jan 30, 2025Jan 30, 2025
community
Public
General sigstore community repo
Apache License 2.0
•49•40•17•0•Updated Jan 30, 2025Jan 30, 2025
sigstore
Public
Common go library shared across sigstore services and clients
go golang supply-chain cosign sigstore security
Go
•
Apache License 2.0
•124•462•35•13•Updated Jan 29, 2025Jan 29, 2025
github-sync
Public
Pulumi GitHub Sync for sigstore
automation pulumi sigstore
Go
•
Apache License 2.0
•4•6•0•1•Updated Jan 29, 2025Jan 29, 2025
sigstore-rs
Public
An experimental Rust crate for sigstore
rust-lang rust-libraries sigstore
Rust
•
Apache License 2.0
•56•186•37•9•Updated Jan 28, 2025Jan 28, 2025
homebrew-tap
Public
Sigstore Homebrew Tap
homebrew-formula homebrew-tap cosign rekor homebrew tap
Ruby
•
Apache License 2.0
•8•7•0•0•Updated Jan 27, 2025Jan 27, 2025
cosign-installer
Public
Cosign Github Action
cosign
Apache License 2.0
•43•136•0•1•Updated Jan 27, 2025Jan 27, 2025
sigstore-java
Public
java clients for sigstore
Java
•
Apache License 2.0
•21•50•22•8•Updated Jan 24, 2025Jan 24, 2025
docs
Public
Sigstore documentation
HTML
•
MIT License
•84•81•69•4•Updated Jan 23, 2025Jan 23, 2025