Pinned Repositories
cosign
Code signing and transparency for containers and binaries
fulcio
Sigstore OIDC PKI
gitsign
Keyless Git signing using Sigstore
policy-controller
Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
rekor
Software Supply Chain Transparency Log
sigstore
Common go library shared across sigstore services and clients
sigstore-java
java clients for sigstore
sigstore-js
Code-signing for npm packages
sigstore-python
A Sigstore client for Python
sigstore-rs
An experimental Rust crate for sigstore
sigstore's Repositories
sigstore/cosign
Code signing and transparency for containers and binaries
sigstore/gitsign
Keyless Git signing using Sigstore
sigstore/rekor
Software Supply Chain Transparency Log
sigstore/fulcio
Sigstore OIDC PKI
sigstore/sigstore
Common go library shared across sigstore services and clients
sigstore/sigstore-python
A Sigstore client for Python
sigstore/sigstore-rs
An experimental Rust crate for sigstore
sigstore/sigstore-js
Code-signing for npm packages
sigstore/policy-controller
Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
sigstore/cosign-installer
Cosign Github Action
sigstore/model-transparency
Supply chain security for ML
sigstore/root-signing
A TUF repository for the trusted material of Sigstore's public-good-instance components
sigstore/k8s-manifest-sigstore
kubectl plugin for signing Kubernetes manifest YAML files with sigstore
sigstore/helm-charts
Helm charts for sigstore project
sigstore/helm-sigstore
Plugin for Helm to integrate the sigstore ecosystem
sigstore/scaffolding
Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
sigstore/timestamp-authority
RFC3161 Timestamp Authority
sigstore/gh-action-sigstore-python
A GitHub Action for sigstore-python
sigstore/community
General sigstore community repo
sigstore/sigstore-go
Go library for Sigstore signing and verification
sigstore/sigstore-java
java clients for sigstore
sigstore/sigstore-website
Codebase for sigstore.dev
sigstore/protobuf-specs
Protocol Buffer specifications
sigstore/rekor-monitor
Log monitor for Rekor to verify immutability and monitor entries
sigstore/sigstore-maven-plugin
sigstore maven plugin
sigstore/sigstore-conformance
Conformance testing for Sigstore clients
sigstore/github-sync
Pulumi GitHub Sync for sigstore
sigstore/sigstore-devops-tools
Tools & services used to help in the development flow of sigstore
sigstore/sigstore-probers
Probers for sigstore infrastructure
sigstore/root-signing-staging
Staging TUF repository for Sigstore trust root