Repositories list

• root-signing

  Public
  TUF repository for Sigstore trust root

  Makefile

  •

  Apache License 2.0

  •81•88•18•1•Updated Nov 14, 2024Nov 14, 2024

• sigstore-ruby

  Public
  Pure-ruby implementation of sigstore verification

  Ruby

  •

  Apache License 2.0

  •1•8•1•2•Updated Nov 14, 2024Nov 14, 2024

• sigstore

  Public
  Common go library shared across sigstore services and clients

  gogolangsupply-chain+ 3cosignsigstoresecurity

  Go

  •

  Apache License 2.0

  •124•447•34•13•Updated Nov 14, 2024Nov 14, 2024

• sigstore-python

  Public
  A Sigstore client written in Python

  pythonsecuritysupply-chain+ 1codesigning

  Python

  •

  Other

  •49•227•32•2•Updated Nov 13, 2024Nov 13, 2024

• sigstore-java

  Public
  java clients for sigstore

  Java

  •

  Apache License 2.0

  •21•40•22•11•Updated Nov 13, 2024Nov 13, 2024

• root-signing-staging

  Public
  Staging TUF repository for Sigstore trust root

  Apache License 2.0

  •6•3•5•1•Updated Nov 13, 2024Nov 13, 2024

• sigstore-website

  Public
  Codebase for sigstore.dev

  Vue

  •

  Apache License 2.0

  •73•26•11•9•Updated Nov 13, 2024Nov 13, 2024

• policy-controller

  Public
  Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign

  Go

  •

  Other

  •54•123•53•6•Updated Nov 13, 2024Nov 13, 2024

• community

  Public
  General sigstore community repo

  Apache License 2.0

  •47•38•15•0•Updated Nov 13, 2024Nov 13, 2024

• sigstore-go

  Public
  Go library for Sigstore signing and verification

  gogolangsigstore

  Go

  •

  Apache License 2.0

  •26•48•17•8•Updated Nov 13, 2024Nov 13, 2024

• timestamp-authority

  Public
  RFC3161 Timestamp Authority

  Go

  •

  Apache License 2.0

  •38•66•8•1•Updated Nov 13, 2024Nov 13, 2024

• protobuf-specs

  Public
  Protocol Buffer specifications

  Rust

  •

  Apache License 2.0

  •29•23•27•7•Updated Nov 13, 2024Nov 13, 2024

• cosign

  Public
  Code signing and transparency for containers and binaries

  Go

  •

  Apache License 2.0

  •547•4.5k•223•16•Updated Nov 13, 2024Nov 13, 2024

• k8s-manifest-sigstore

  Public
  kubectl plugin for signing Kubernetes manifest YAML files with sigstore

  Go

  •

  Apache License 2.0

  •21•79•1•1•Updated Nov 12, 2024Nov 12, 2024

• model-transparency

  Public
  Supply chain security for ML

  securitymachine-learningsupply-chain+ 1sigstore

  Python

  •

  Apache License 2.0

  •30•113•24•1•Updated Nov 12, 2024Nov 12, 2024

• sigstore-rs

  Public
  An experimental Rust crate for sigstore

  rust-langrust-librariessigstore

  Rust

  •

  Apache License 2.0

  •53•168•36•6•Updated Nov 12, 2024Nov 12, 2024

• docs

  Public
  Sigstore documentation

  HTML

  •

  MIT License

  •81•73•66•3•Updated Nov 11, 2024Nov 11, 2024

• fulcio

  Public
  Sigstore OIDC PKI

  Go

  •

  Apache License 2.0

  •137•653•51•7•Updated Nov 11, 2024Nov 11, 2024

• rekor

  Public
  Software Supply Chain Transparency Log

  securitysupply-chainprovenance+ 1transparency-log

  Go

  •

  Apache License 2.0

  •164•897•70•5•Updated Nov 11, 2024Nov 11, 2024

• github-sync

  Public
  Pulumi GitHub Sync for sigstore

  automationpulumisigstore

  Go

  •

  Apache License 2.0

  •4•5•0•1•Updated Nov 11, 2024Nov 11, 2024

• gitsign

  Public
  Keyless Git signing using Sigstore

  gitsigningsigstore

  Go

  •

  Other

  •62•942•20•2•Updated Nov 11, 2024Nov 11, 2024

• sigstore-js

  Public
  Code-signing for npm packages

  javascriptsecuritynode+ 2supply-chaincodesigning

  TypeScript

  •

  Apache License 2.0

  •23•156•6•6•Updated Nov 11, 2024Nov 11, 2024

• rekor-monitor

  Public
  Log monitor for Rekor to verify immutability and monitor entries

  Go

  •

  Apache License 2.0

  •26•25•18•8•Updated Nov 11, 2024Nov 11, 2024

• scaffolding

  Public
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

  HCL

  •

  Apache License 2.0

  •57•57•11•1•Updated Nov 11, 2024Nov 11, 2024

• helm-charts

  Public
  Helm charts for sigstore project

  charthelmhelm-charts

  Smarty

  •

  Apache License 2.0

  •91•65•27•17•Updated Nov 10, 2024Nov 10, 2024

• helm-sigstore

  Public
  Plugin for Helm to integrate the sigstore ecosystem

  sigstorehelm

  Go

  •

  Apache License 2.0

  •13•60•3•0•Updated Nov 9, 2024Nov 9, 2024

• sigstore-devops-tools

  Public
  Tools & services used to help in the development flow of sigstore

  devopsautomationtools+ 1sigstore

  Go

  •

  Apache License 2.0

  •3•4•0•0•Updated Nov 9, 2024Nov 9, 2024

• sigstore-probers

  Public
  Probers for sigstore infrastructure

  Go

  •

  Apache License 2.0

  •13•4•3•1•Updated Nov 7, 2024Nov 7, 2024

• sigstore-conformance

  Public
  Conformance testing for Sigstore clients

  testsconformancesigstore

  Python

  •10•7•18•1•Updated Nov 4, 2024Nov 4, 2024

• architecture-docs

  Public
  Specification of sigstore's architecture in an IETF internet-draft format

  Other

  •61•2•19•2•Updated Oct 28, 2024Oct 28, 2024