Repositories list

• sigstore-python

  Public
  A Sigstore client written in Python

  pythonsecuritysupply-chain+ 1codesigning

  Python

  •

  Other

  •58•271•46•3•Updated Jun 7, 2025Jun 7, 2025

• sigstore-java

  Public
  java clients for sigstore

  Java

  •

  Apache License 2.0

  •24•57•24•8•Updated Jun 6, 2025Jun 6, 2025

• protobuf-specs

  Public
  Sigstore's Protocol Buffer specifications

  Makefile

  •

  Apache License 2.0

  •39•33•31•16•Updated Jun 6, 2025Jun 6, 2025

• root-signing

  Public
  TUF repository for Sigstore trust root

  Makefile

  •

  Apache License 2.0

  •85•103•19•0•Updated Jun 6, 2025Jun 6, 2025

• sigstore-blog

  Public
  Codebase for blog.sigstore.dev

  CSS

  •

  Apache License 2.0

  •19•6•4•2•Updated Jun 6, 2025Jun 6, 2025

• rekor-tiles

  Public
  Signature Transparency Log designed for ease of use, low cost, and minimal maintenance

  securitysupply-chainprovenance+ 1transparency-log

  Go

  •

  Apache License 2.0

  •8•13•72•4•Updated Jun 6, 2025Jun 6, 2025

• model-transparency

  Public
  Supply chain security for ML

  securitymachine-learningsupply-chain+ 1sigstore

  Python

  •

  Apache License 2.0

  •36•162•22•2•Updated Jun 6, 2025Jun 6, 2025

• gh-action-sigstore-python

  Public
  A GitHub Action for sigstore-python

  supply-chaincodesigningsecurity+ 1github-actions

  Python

  •

  Apache License 2.0

  •13•52•9•0•Updated Jun 6, 2025Jun 6, 2025

• timestamp-authority

  Public
  RFC3161 Timestamp Authority

  Go

  •

  Apache License 2.0

  •43•90•1•1•Updated Jun 6, 2025Jun 6, 2025

• root-signing-staging

  Public
  Staging TUF repository for Sigstore trust root

  Apache License 2.0

  •8•8•8•0•Updated Jun 6, 2025Jun 6, 2025

• sigstore-probers

  Public
  Probers for sigstore infrastructure

  Go

  •

  Apache License 2.0

  •13•6•2•1•Updated Jun 6, 2025Jun 6, 2025

• sigstore-go

  Public
  Go library for Sigstore signing and verification

  gogolangsigstore

  Go

  •

  Apache License 2.0

  •32•68•7•1•Updated Jun 5, 2025Jun 5, 2025

• sigstore-devops-tools

  Public
  Tools & services used to help in the development flow of sigstore

  devopsautomationtools+ 1sigstore

  Go

  •

  Apache License 2.0

  •3•6•0•0•Updated Jun 5, 2025Jun 5, 2025

• sigstore-rs

  Public
  An experimental Rust crate for sigstore

  rust-langrust-librariessigstore

  Rust

  •

  Apache License 2.0

  •58•190•39•9•Updated Jun 5, 2025Jun 5, 2025

• sigstore-ruby

  Public
  Pure-ruby implementation of sigstore verification

  Ruby

  •

  Apache License 2.0

  •5•24•3•9•Updated Jun 5, 2025Jun 5, 2025

• cosign

  Public
  Code signing and transparency for containers and binaries

  Go

  •

  Apache License 2.0

  •596•5k•242•22•Updated Jun 4, 2025Jun 4, 2025

• community

  Public
  General sigstore community repo

  Apache License 2.0

  •49•41•14•0•Updated Jun 3, 2025Jun 3, 2025

• sigstore-conformance

  Public
  Conformance testing for Sigstore clients

  testsconformancesigstore

  Python

  •13•9•21•0•Updated Jun 3, 2025Jun 3, 2025

• model-validation-operator

  Public
  Kubernetes controller to validate AI models

  Go

  •

  Apache License 2.0

  •3•20•8•0•Updated Jun 3, 2025Jun 3, 2025

• sigstore

  Public
  Common go library shared across sigstore services and clients

  gogolangsupply-chain+ 3cosignsigstoresecurity

  Go

  •

  Apache License 2.0

  •136•486•18•10•Updated Jun 3, 2025Jun 3, 2025

• policy-controller

  Public
  Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign

  Go

  •

  Other

  •63•134•55•10•Updated Jun 2, 2025Jun 2, 2025

• rekor-monitor

  Public
  Log monitor for Rekor to verify immutability and monitor entries

  Go

  •

  Apache License 2.0

  •31•34•13•4•Updated Jun 2, 2025Jun 2, 2025

• sigstore-js

  Public
  Code-signing for npm packages

  javascriptsecuritynode+ 2supply-chaincodesigning

  TypeScript

  •

  Apache License 2.0

  •30•162•5•5•Updated Jun 2, 2025Jun 2, 2025

• rekor

  Public
  Software Supply Chain Transparency Log

  securitysupply-chainprovenance+ 1transparency-log

  Go

  •

  Apache License 2.0

  •176•967•72•3•Updated Jun 2, 2025Jun 2, 2025

• fulcio

  Public
  Sigstore OIDC PKI

  Go

  •

  Apache License 2.0

  •149•728•49•4•Updated Jun 2, 2025Jun 2, 2025

• scaffolding

  Public
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

  Go

  •

  Apache License 2.0

  •60•64•5•1•Updated Jun 2, 2025Jun 2, 2025

• terraform-modules

  Public
  Terraform modules for Sigstore cloud infrastructure

  HCL

  •

  Apache License 2.0

  •4•0•1•2•Updated Jun 1, 2025Jun 1, 2025

• helm-charts

  Public
  Helm charts for sigstore project

  charthelmhelm-charts

  Smarty

  •

  Apache License 2.0

  •95•76•32•20•Updated May 31, 2025May 31, 2025

• docs

  Public
  Sigstore documentation

  HTML

  •

  MIT License

  •91•90•70•2•Updated May 29, 2025May 29, 2025

• architecture-docs

  Public
  Specification of sigstore's architecture in an IETF internet-draft format

  Other

  •77•4•25•1•Updated May 27, 2025May 27, 2025