Skip to content

@sigstore sigstore

Change the repository type filter

All

    Repositories list

    65 repositories

    • gh-action-sigstore-python

      Public
      A GitHub Action for sigstore-python
      securitysupply-chaincodesigninggithub-actions
      Python
      •
      Apache License 2.0
      •15•65•12•0•Updated Feb 4, 2026Feb 4, 2026

    • fulcio

      Public
      Sigstore OIDC PKI
      Go
      •
      Apache License 2.0
      •168•796•49•1•Updated Feb 4, 2026Feb 4, 2026

    • protobuf-specs

      Public
      Sigstore's Protocol Buffer specifications
      Makefile
      •
      Apache License 2.0
      •48•34•31•7•Updated Feb 4, 2026Feb 4, 2026

    • sigstore-python

      Public
      A Sigstore client written in Python
      pythonsecuritysupply-chaincodesigning
      Python
      •
      Other
      •72•310•49•2•Updated Feb 4, 2026Feb 4, 2026

    • community

      Public
      General sigstore community repo
      Apache License 2.0
      •51•44•13•2•Updated Feb 4, 2026Feb 4, 2026

    • sigstore-rs

      Public
      An experimental Rust crate for sigstore
      rust-langrust-librariessigstore
      Rust
      •
      Apache License 2.0
      •71•220•45•11•Updated Feb 4, 2026Feb 4, 2026

    • gitsign

      Public
      Keyless Git signing using Sigstore
      gitsigningsigstore
      Go
      •
      Other
      •75•1.1k•27•3•Updated Feb 4, 2026Feb 4, 2026

    • cosign

      Public
      Code signing and transparency for containers and binaries
      Go
      •
      Apache License 2.0
      •687•5.6k•272•27•Updated Feb 3, 2026Feb 3, 2026

    • sigstore-probers

      Public
      Probers for sigstore infrastructure
      Go
      •
      Apache License 2.0
      •16•6•9•1•Updated Feb 3, 2026Feb 3, 2026

    • model-validation-operator

      Public
      Kubernetes controller to validate AI models
      Go
      •
      Apache License 2.0
      •10•25•10•3•Updated Feb 3, 2026Feb 3, 2026

    • policy-controller

      Public
      Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from …
      Go
      •
      Other
      •70•153•60•15•Updated Feb 3, 2026Feb 3, 2026

    • sigstore-conformance

      Public
      Conformance testing for Sigstore clients
      testsconformancesigstore
      Python
      •18•12•31•3•Updated Feb 3, 2026Feb 3, 2026

    • sigstore-ruby

      Public
      Pure-ruby implementation of sigstore verification
      Ruby
      •
      Apache License 2.0
      •10•28•4•10•Updated Feb 3, 2026Feb 3, 2026

    • sigstore-website

      Public
      Codebase for sigstore.dev
      Vue
      •
      Apache License 2.0
      •75•28•16•11•Updated Feb 3, 2026Feb 3, 2026

    • root-signing

      Public
      TUF repository for Sigstore trust root
      Makefile
      •
      Apache License 2.0
      •91•117•19•0•Updated Feb 3, 2026Feb 3, 2026

    • root-signing-staging

      Public
      Staging TUF repository for Sigstore trust root
      Apache License 2.0
      •11•10•7•1•Updated Feb 3, 2026Feb 3, 2026

    • rekor

      Public
      Software Supply Chain Transparency Log
      securitysupply-chainprovenancetransparency-log
      Go
      •
      Apache License 2.0
      •197•1.1k•72•5•Updated Feb 3, 2026Feb 3, 2026

    • timestamp-authority

      Public
      RFC3161 Timestamp Authority
      Go
      •
      Apache License 2.0
      •54•113•4•5•Updated Feb 3, 2026Feb 3, 2026

    • rekor-tiles

      Public
      Signature Transparency Log designed for ease of use, low cost, and minimal maintenance
      securitysupply-chainprovenancetransparency-log
      Go
      •
      Apache License 2.0
      •17•28•34•3•Updated Feb 3, 2026Feb 3, 2026

    • terraform-modules

      Public
      Terraform modules for Sigstore cloud infrastructure
      HCL
      •
      Apache License 2.0
      •7•4•1•2•Updated Feb 3, 2026Feb 3, 2026

    • sigstore-rekor-types

      Public
      Python models for Rekor's API types
      Python
      •
      Apache License 2.0
      •4•7•1•3•Updated Feb 3, 2026Feb 3, 2026

    • k8s-manifest-sigstore

      Public
      kubectl plugin for signing Kubernetes manifest YAML files with sigstore
      Go
      •
      Apache License 2.0
      •28•85•3•1•Updated Feb 3, 2026Feb 3, 2026

    • sigstore

      Public
      Common go library shared across sigstore services and clients
      gogolangsecuritysupply-chaincosignsigstore
      Go
      •
      Apache License 2.0
      •144•499•20•25•Updated Feb 3, 2026Feb 3, 2026

    • github-sync

      Public
      Pulumi GitHub Sync for sigstore
      automationpulumisigstore
      Go
      •
      Apache License 2.0
      •4•6•0•1•Updated Feb 3, 2026Feb 3, 2026

    • homebrew-tap

      Public
      Sigstore Homebrew Tap
      homebrewtaphomebrew-formulahomebrew-tapcosignrekor
      Ruby
      •
      Apache License 2.0
      •9•8•0•1•Updated Feb 2, 2026Feb 2, 2026

    • sigstore-java

      Public
      java clients for sigstore
      Java
      •
      Apache License 2.0
      •25•72•23•7•Updated Feb 2, 2026Feb 2, 2026

    • sigstore-js

      Public
      Code-signing for npm packages
      javascriptsecuritynodesupply-chaincodesigning
      TypeScript
      •
      Apache License 2.0
      •39•178•5•8•Updated Feb 2, 2026Feb 2, 2026

    • rekor-monitor

      Public
      Log monitor for Rekor to verify immutability and monitor entries
      Go
      •
      Apache License 2.0
      •34•45•10•0•Updated Feb 2, 2026Feb 2, 2026

    • model-transparency

      Public
      Supply chain security for ML
      securitymachine-learningsupply-chainsigstore
      Python
      •
      Apache License 2.0
      •58•218•30•7•Updated Feb 2, 2026Feb 2, 2026

    • sigstore-a2a

      Public
      Sigstore A2A Agent Signing
      agentsecuritycryptographysigstore
      Python
      •
      Apache License 2.0
      •2•15•4•2•Updated Feb 2, 2026Feb 2, 2026