Repositories list

• cosign

  Public
  Code signing and transparency for containers and binaries

  Go

  •

  Apache License 2.0

  •702•5.7k•231•30•Updated Mar 12, 2026Mar 12, 2026

• protobuf-specs

  Public

  sigstore/protobuf-specs’s past year of commit activity
  Sigstore's Protocol Buffer specifications

  Makefile

  •

  Apache License 2.0

  •50•34•31•10•Updated Mar 11, 2026Mar 11, 2026

• docs

  Public
  Sigstore documentation

  HTML

  •

  MIT License

  •105•129•75•8•Updated Mar 11, 2026Mar 11, 2026

• gh-action-sigstore-python

  Public
  A GitHub Action for sigstore-python

  securitysupply-chaincodesigning+ 1

  securitysupply-chaincodesigninggithub-actions

  Python

  •

  Apache License 2.0

  •14•64•12•1•Updated Mar 11, 2026Mar 11, 2026

• sigstore-python

  Public
  A Sigstore client written in Python

  pythonsecuritysupply-chain+ 1

  pythonsecuritysupply-chaincodesigning

  Python

  •

  Other

  •76•314•49•4•Updated Mar 11, 2026Mar 11, 2026

• sigstore-probers

  Public

  sigstore/sigstore-probers’s past year of commit activity
  Probers for sigstore infrastructure

  Go

  •

  Apache License 2.0

  •17•6•2•0•Updated Mar 11, 2026Mar 11, 2026

• root-signing

  Public

  sigstore/root-signing’s past year of commit activity
  TUF repository for Sigstore trust root

  Makefile

  •

  Apache License 2.0

  •92•120•20•2•Updated Mar 11, 2026Mar 11, 2026

• scaffolding

  Public
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

  Go

  •

  Apache License 2.0

  •64•75•9•3•Updated Mar 11, 2026Mar 11, 2026

• root-signing-staging

  Public
  Staging TUF repository for Sigstore trust root

  Apache License 2.0

  •11•10•7•2•Updated Mar 11, 2026Mar 11, 2026

• sigstore-rs

  Public
  An experimental Rust crate for sigstore

  rust-langrust-librariessigstore

  rust-langrust-librariessigstore

  Rust

  •

  Apache License 2.0

  •70•224•45•13•Updated Mar 11, 2026Mar 11, 2026

• sigstore-ruby

  Public
  Pure-ruby implementation of sigstore verification

  Ruby

  •

  Apache License 2.0

  •11•28•4•10•Updated Mar 10, 2026Mar 10, 2026

• model-validation-operator

  Public
  Kubernetes controller to validate AI models

  Go

  •

  Apache License 2.0

  •11•27•9•0•Updated Mar 10, 2026Mar 10, 2026

• sigstore-java

  Public
  java clients for sigstore

  Java

  •

  Apache License 2.0

  •26•74•23•11•Updated Mar 10, 2026Mar 10, 2026

• helm-sigstore

  Public
  Plugin for Helm to integrate the sigstore ecosystem

  helmsigstore

  helmsigstore

  Go

  •

  Apache License 2.0

  •14•68•2•8•Updated Mar 10, 2026Mar 10, 2026

• sigstore-rekor-types

  Public
  Python models for Rekor's API types

  Python

  •

  Apache License 2.0

  •4•7•1•5•Updated Mar 10, 2026Mar 10, 2026

• timestamp-authority

  Public
  RFC3161 Timestamp Authority

  Go

  •

  Apache License 2.0

  •54•120•4•6•Updated Mar 10, 2026Mar 10, 2026

• terraform-modules

  Public
  Terraform modules for Sigstore cloud infrastructure

  HCL

  •

  Apache License 2.0

  •7•5•1•0•Updated Mar 10, 2026Mar 10, 2026

• helm-charts

  Public
  Helm charts for sigstore project

  charthelmhelm-charts

  charthelmhelm-charts

  Go Template

  •

  Apache License 2.0

  •102•90•45•21•Updated Mar 9, 2026Mar 9, 2026

• rekor

  Public
  Software Supply Chain Transparency Log

  securitysupply-chainprovenance+ 1

  securitysupply-chainprovenancetransparency-log

  Go

  •

  Apache License 2.0

  •196•1.1k•69•7•Updated Mar 9, 2026Mar 9, 2026

• sigstore

  Public
  Common go library shared across sigstore services and clients

  gogolangsecurity+ 3

  gogolangsecuritysupply-chaincosignsigstore

  Go

  •

  Apache License 2.0

  •148•503•21•19•Updated Mar 9, 2026Mar 9, 2026

• cosign-installer

  Public
  Cosign Github Action

  cosign

  cosign

  Apache License 2.0

  •54•191•5•1•Updated Mar 9, 2026Mar 9, 2026

• sigstore-js

  Public
  Code-signing for npm packages

  javascriptsecuritynode+ 2

  javascriptsecuritynodesupply-chaincodesigning

  TypeScript

  •

  Apache License 2.0

  •41•178•5•10•Updated Mar 9, 2026Mar 9, 2026

• sigstore-devops-tools

  Public
  Tools & services used to help in the development flow of sigstore

  devopsautomationtools+ 1

  devopsautomationtoolssigstore

  Go

  •

  Apache License 2.0

  •3•7•0•2•Updated Mar 9, 2026Mar 9, 2026

• model-transparency

  Public
  Supply chain security for ML

  securitymachine-learningsupply-chain+ 1

  securitymachine-learningsupply-chainsigstore

  Python

  •

  Apache License 2.0

  •60•226•31•9•Updated Mar 9, 2026Mar 9, 2026

• rekor-monitor

  Public
  Log monitor for Rekor to verify immutability and monitor entries

  Go

  •

  Apache License 2.0

  •34•48•10•0•Updated Mar 9, 2026Mar 9, 2026

• sigstore-conformance

  Public
  Conformance testing for Sigstore clients

  testsconformancesigstore

  testsconformancesigstore

  Python

  •18•13•29•1•Updated Mar 9, 2026Mar 9, 2026

• rekor-tiles

  Public
  Signature Transparency Log designed for ease of use, low cost, and minimal maintenance

  securitysupply-chainprovenance+ 1

  securitysupply-chainprovenancetransparency-log

  Go

  •

  Apache License 2.0

  •18•33•33•2•Updated Mar 9, 2026Mar 9, 2026

• sigstore-go

  Public
  Go library for Sigstore signing and verification

  gogolangsigstore

  gogolangsigstore

  Go

  •

  Apache License 2.0

  •45•86•10•4•Updated Mar 9, 2026Mar 9, 2026

• sigstore-a2a

  Public
  Sigstore A2A Agent Signing

  agentsecuritycryptography+ 1

  agentsecuritycryptographysigstore

  Python

  •

  Apache License 2.0

  •4•16•4•2•Updated Mar 9, 2026Mar 9, 2026

• gitsign

  Public
  Keyless Git signing using Sigstore

  gitsigningsigstore

  gitsigningsigstore

  Go

  •

  Other

  •74•1.1k•27•12•Updated Mar 9, 2026Mar 9, 2026