Repositories list

• root-signing

  Public
  TUF repository for Sigstore trust root

  Makefile

  •

  Apache License 2.0

  •88•112•18•0•Updated Dec 6, 2025Dec 6, 2025

• sigstore-rekor-types

  Public
  Python models for Rekor's API types

  Python

  •

  Apache License 2.0

  •3•7•1•19•Updated Dec 6, 2025Dec 6, 2025

• model-validation-operator

  Public
  Kubernetes controller to validate AI models

  Go

  •

  Apache License 2.0

  •8•25•12•7•Updated Dec 6, 2025Dec 6, 2025

• scaffolding

  Public

  sigstore/scaffolding’s past year of commit activity
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

  Go

  •

  Apache License 2.0

  •63•68•8•6•Updated Dec 6, 2025Dec 6, 2025

• sigstore-conformance

  Public
  Conformance testing for Sigstore clients

  testsconformancesigstore

  Python

  •15•11•30•3•Updated Dec 6, 2025Dec 6, 2025

• sigstore-js

  Public
  Code-signing for npm packages

  javascriptsecuritynode+ 2supply-chaincodesigning

  TypeScript

  •

  Apache License 2.0

  •35•172•9•4•Updated Dec 5, 2025Dec 5, 2025

• gh-action-sigstore-python

  Public
  A GitHub Action for sigstore-python

  securitysupply-chaincodesigning+ 1github-actions

  Python

  •

  Apache License 2.0

  •14•62•11•0•Updated Dec 5, 2025Dec 5, 2025

• cosign

  Public
  Code signing and transparency for containers and binaries

  Go

  •

  Apache License 2.0

  •669•5.5k•261•20•Updated Dec 5, 2025Dec 5, 2025

• sigstore-python

  Public

  sigstore/sigstore-python’s past year of commit activity
  A Sigstore client written in Python

  pythonsecuritysupply-chain+ 1codesigning

  Python

  •

  Other

  •64•299•47•0•Updated Dec 5, 2025Dec 5, 2025

• helm-charts

  Public
  Helm charts for sigstore project

  charthelmhelm-charts

  Smarty

  •

  Apache License 2.0

  •102•83•34•21•Updated Dec 5, 2025Dec 5, 2025

• root-signing-staging

  Public
  Staging TUF repository for Sigstore trust root

  Apache License 2.0

  •10•10•7•2•Updated Dec 5, 2025Dec 5, 2025

• sigstore-probers

  Public
  Probers for sigstore infrastructure

  Go

  •

  Apache License 2.0

  •15•6•1•1•Updated Dec 5, 2025Dec 5, 2025

• gitsign

  Public
  Keyless Git signing using Sigstore

  gitsigningsigstore

  Go

  •

  Other

  •73•1k•28•8•Updated Dec 5, 2025Dec 5, 2025

• k8s-manifest-sigstore

  Public
  kubectl plugin for signing Kubernetes manifest YAML files with sigstore

  Go

  •

  Apache License 2.0

  •23•85•3•8•Updated Dec 5, 2025Dec 5, 2025

• sigstore-java

  Public
  java clients for sigstore

  Java

  •

  Apache License 2.0

  •25•68•24•6•Updated Dec 5, 2025Dec 5, 2025

• sigstore-devops-tools

  Public
  Tools & services used to help in the development flow of sigstore

  devopsautomationtools+ 1sigstore

  Go

  •

  Apache License 2.0

  •3•6•0•1•Updated Dec 5, 2025Dec 5, 2025

• timestamp-authority

  Public
  RFC3161 Timestamp Authority

  Go

  •

  Apache License 2.0

  •49•106•3•1•Updated Dec 5, 2025Dec 5, 2025

• fulcio

  Public
  Sigstore OIDC PKI

  Go

  •

  Apache License 2.0

  •162•771•50•1•Updated Dec 4, 2025Dec 4, 2025

• cosign-gatekeeper-provider

  Public
  🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their signatures

  opagatekeeperkeyless+ 4cosignsigstorerekorfulcio

  Go

  •

  Apache License 2.0

  •23•79•8•14•Updated Dec 4, 2025Dec 4, 2025

• sigstore-a2a

  Public
  Sigstore A2A Agent Signing

  Python

  •

  Apache License 2.0

  •2•13•3•1•Updated Dec 3, 2025Dec 3, 2025

• community

  Public
  General sigstore community repo

  Apache License 2.0

  •51•43•13•2•Updated Dec 3, 2025Dec 3, 2025

• model-transparency

  Public
  Supply chain security for ML

  securitymachine-learningsupply-chain+ 1sigstore

  Python

  •

  Apache License 2.0

  •53•210•25•6•Updated Dec 3, 2025Dec 3, 2025

• helm-sigstore

  Public
  Plugin for Helm to integrate the sigstore ecosystem

  helmsigstore

  Go

  •

  Apache License 2.0

  •14•67•2•3•Updated Dec 3, 2025Dec 3, 2025

• terraform-modules

  Public
  Terraform modules for Sigstore cloud infrastructure

  HCL

  •

  Apache License 2.0

  •7•3•1•1•Updated Dec 2, 2025Dec 2, 2025

• sigstore-rs

  Public
  An experimental Rust crate for sigstore

  rust-langrust-librariessigstore

  Rust

  •

  Apache License 2.0

  •66•215•45•14•Updated Dec 1, 2025Dec 1, 2025

• sigstore

  Public
  Common go library shared across sigstore services and clients

  gogolangsecurity+ 3supply-chaincosignsigstore

  Go

  •

  Apache License 2.0

  •142•491•20•18•Updated Dec 1, 2025Dec 1, 2025

• policy-controller

  Public
  Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign

  Go

  •

  Other

  •68•149•61•15•Updated Dec 1, 2025Dec 1, 2025

• github-sync

  Public
  Pulumi GitHub Sync for sigstore

  automationpulumisigstore

  Go

  •

  Apache License 2.0

  •4•6•0•1•Updated Dec 1, 2025Dec 1, 2025

• architecture-docs

  Public
  Specification of sigstore's architecture in an IETF internet-draft format

  Other

  •103•5•25•1•Updated Dec 1, 2025Dec 1, 2025

• rekor

  Public
  Software Supply Chain Transparency Log

  securitysupply-chainprovenance+ 1transparency-log

  Go

  •

  Apache License 2.0

  •193•1k•72•5•Updated Dec 1, 2025Dec 1, 2025