sigstore

All

60 repositories

community
Public
General sigstore community repo
Apache License 2.0
•49•41•17•0•Updated Feb 6, 2025Feb 6, 2025
scaffolding
Public
Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
HCL
•
Apache License 2.0
•58•61•9•0•Updated Feb 5, 2025Feb 5, 2025
policy-controller
Public
Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
Go
•
Other
•57•126•53•16•Updated Feb 5, 2025Feb 5, 2025
architecture-docs
Public
Specification of sigstore's architecture in an IETF internet-draft format
Other
•67•4•22•1•Updated Feb 5, 2025Feb 5, 2025
TSC
Public
sigstore Technical Steering Committee
5•7•1•0•Updated Feb 5, 2025Feb 5, 2025
root-signing
Public
TUF repository for Sigstore trust root
Makefile
•
Apache License 2.0
•83•96•18•4•Updated Feb 5, 2025Feb 5, 2025
helm-sigstore
Public
Plugin for Helm to integrate the sigstore ecosystem
sigstore helm
Go
•
Apache License 2.0
•13•60•2•0•Updated Feb 5, 2025Feb 5, 2025
timestamp-authority
Public
RFC3161 Timestamp Authority
Go
•
Apache License 2.0
•40•79•8•1•Updated Feb 5, 2025Feb 5, 2025
root-signing-staging
Public
Staging TUF repository for Sigstore trust root
Apache License 2.0
•7•7•6•1•Updated Feb 5, 2025Feb 5, 2025
cosign-installer
Public
Cosign Github Action
cosign
Apache License 2.0
•43•136•0•0•Updated Feb 5, 2025Feb 5, 2025
rekor
Public
Software Supply Chain Transparency Log
security supply-chain provenance transparency-log
Go
•
Apache License 2.0
•168•930•77•8•Updated Feb 5, 2025Feb 5, 2025
fulcio
Public
Sigstore OIDC PKI
Go
•
Apache License 2.0
•142•674•49•11•Updated Feb 5, 2025Feb 5, 2025
protobuf-specs
Public
Protocol Buffer specifications
Rust
•
Apache License 2.0
•32•26•28•5•Updated Feb 5, 2025Feb 5, 2025
sigstore-ruby
Public
Pure-ruby implementation of sigstore verification
Ruby
•
Apache License 2.0
•2•14•2•4•Updated Feb 5, 2025Feb 5, 2025
sigstore-probers
Public
Probers for sigstore infrastructure
Go
•
Apache License 2.0
•13•6•4•4•Updated Feb 5, 2025Feb 5, 2025
sigstore
Public
Common go library shared across sigstore services and clients
go golang supply-chain cosign sigstore security
Go
•
Apache License 2.0
•124•462•36•12•Updated Feb 4, 2025Feb 4, 2025
cosign
Public
Code signing and transparency for containers and binaries
Go
•
Apache License 2.0
•558•4.7k•235•18•Updated Feb 4, 2025Feb 4, 2025
helm-charts
Public
Helm charts for sigstore project
chart helm helm-charts
Smarty
•
Apache License 2.0
•93•69•31•21•Updated Feb 4, 2025Feb 4, 2025
homebrew-tap
Public
Sigstore Homebrew Tap
homebrew-formula homebrew-tap cosign rekor homebrew tap
Ruby
•
Apache License 2.0
•8•7•0•0•Updated Feb 4, 2025Feb 4, 2025
docs
Public
Sigstore documentation
HTML
•
MIT License
•84•81•68•4•Updated Feb 4, 2025Feb 4, 2025
sigstore-js
Public
Code-signing for npm packages
javascript security node supply-chain codesigning
TypeScript
•
Apache License 2.0
•23•161•5•1•Updated Feb 4, 2025Feb 4, 2025
rekor-monitor
Public
Log monitor for Rekor to verify immutability and monitor entries
Go
•
Apache License 2.0
•26•30•14•2•Updated Feb 4, 2025Feb 4, 2025
sigstore-devops-tools
Public
Tools & services used to help in the development flow of sigstore
devops automation tools sigstore
Go
•
Apache License 2.0
•3•6•0•0•Updated Feb 4, 2025Feb 4, 2025
gh-action-sigstore-python
Public
A GitHub Action for sigstore-python
supply-chain codesigning security github-actions
Python
•
Apache License 2.0
•12•48•8•0•Updated Feb 4, 2025Feb 4, 2025
sigstore-rs
Public
An experimental Rust crate for sigstore
rust-lang rust-libraries sigstore
Rust
•
Apache License 2.0
•56•186•37•10•Updated Feb 3, 2025Feb 3, 2025
github-sync
Public
Pulumi GitHub Sync for sigstore
automation pulumi sigstore
Go
•
Apache License 2.0
•4•6•0•1•Updated Feb 3, 2025Feb 3, 2025
model-transparency
Public
Supply chain security for ML
security machine-learning supply-chain sigstore
Python
•
Apache License 2.0
•32•127•26•2•Updated Feb 3, 2025Feb 3, 2025
sigstore-go
Public
Go library for Sigstore signing and verification
go golang sigstore
Go
•
Apache License 2.0
•27•54•15•6•Updated Feb 3, 2025Feb 3, 2025
gitsign
Public
Keyless Git signing using Sigstore
git signing sigstore
Go
•
Other
•64•971•23•4•Updated Feb 3, 2025Feb 3, 2025
rekor-search-ui
Public
Search Rekor for entries
TypeScript
•
Apache License 2.0
•24•31•5•6•Updated Feb 3, 2025Feb 3, 2025