Repositories list

• cosign-installer

  Public

  sigstore/cosign-installer’s past year of commit activity
  Cosign Github Action

  cosign

  Apache License 2.0

  •50•172•3•2•Updated Dec 18, 2025Dec 18, 2025

• gh-action-sigstore-python

  Public

  sigstore/gh-action-sigstore-python’s past year of commit activity
  A GitHub Action for sigstore-python

  securitysupply-chaincodesigning+ 1github-actions

  Python

  •

  Apache License 2.0

  •14•62•11•0•Updated Dec 18, 2025Dec 18, 2025

• sigstore-js

  Public

  sigstore/sigstore-js’s past year of commit activity
  Code-signing for npm packages

  javascriptsecuritynode+ 2supply-chaincodesigning

  TypeScript

  •

  Apache License 2.0

  •36•173•7•4•Updated Dec 18, 2025Dec 18, 2025

• helm-charts

  Public

  sigstore/helm-charts’s past year of commit activity
  Helm charts for sigstore project

  charthelmhelm-charts

  Smarty

  •

  Apache License 2.0

  •102•85•40•21•Updated Dec 18, 2025Dec 18, 2025

• cosign

  Public

  sigstore/cosign’s past year of commit activity
  Code signing and transparency for containers and binaries

  Go

  •

  Apache License 2.0

  •672•5.5k•262•22•Updated Dec 18, 2025Dec 18, 2025

• sigstore-probers

  Public

  sigstore/sigstore-probers’s past year of commit activity
  Probers for sigstore infrastructure

  Go

  •

  Apache License 2.0

  •15•6•4•0•Updated Dec 18, 2025Dec 18, 2025

• sigstore-rekor-types

  Public

  sigstore/sigstore-rekor-types’s past year of commit activity
  Python models for Rekor's API types

  Python

  •

  Apache License 2.0

  •4•7•1•31•Updated Dec 18, 2025Dec 18, 2025

• root-signing

  Public

  sigstore/root-signing’s past year of commit activity
  TUF repository for Sigstore trust root

  Makefile

  •

  Apache License 2.0

  •88•116•19•2•Updated Dec 18, 2025Dec 18, 2025

• scaffolding

  Public

  sigstore/scaffolding’s past year of commit activity
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

  Go

  •

  Apache License 2.0

  •63•68•9•6•Updated Dec 17, 2025Dec 17, 2025

• root-signing-staging

  Public

  sigstore/root-signing-staging’s past year of commit activity
  Staging TUF repository for Sigstore trust root

  Apache License 2.0

  •10•10•7•0•Updated Dec 17, 2025Dec 17, 2025

• docs

  Public

  sigstore/docs’s past year of commit activity
  Sigstore documentation

  HTML

  •

  MIT License

  •99•112•73•2•Updated Dec 17, 2025Dec 17, 2025

• sigstore-conformance

  Public

  sigstore/sigstore-conformance’s past year of commit activity
  Conformance testing for Sigstore clients

  testsconformancesigstore

  Python

  •17•11•31•2•Updated Dec 17, 2025Dec 17, 2025

• timestamp-authority

  Public

  sigstore/timestamp-authority’s past year of commit activity
  RFC3161 Timestamp Authority

  Go

  •

  Apache License 2.0

  •50•109•3•1•Updated Dec 17, 2025Dec 17, 2025

• sigstore-python

  Public

  sigstore/sigstore-python’s past year of commit activity
  A Sigstore client written in Python

  pythonsecuritysupply-chain+ 1codesigning

  Python

  •

  Other

  •64•300•47•1•Updated Dec 17, 2025Dec 17, 2025

• fulcio

  Public

  sigstore/fulcio’s past year of commit activity
  Sigstore OIDC PKI

  Go

  •

  Apache License 2.0

  •162•778•51•2•Updated Dec 16, 2025Dec 16, 2025

• helm-sigstore

  Public

  sigstore/helm-sigstore’s past year of commit activity
  Plugin for Helm to integrate the sigstore ecosystem

  helmsigstore

  Go

  •

  Apache License 2.0

  •14•67•2•2•Updated Dec 16, 2025Dec 16, 2025

• terraform-modules

  Public

  sigstore/terraform-modules’s past year of commit activity
  Terraform modules for Sigstore cloud infrastructure

  HCL

  •

  Apache License 2.0

  •7•4•1•2•Updated Dec 16, 2025Dec 16, 2025

• sigstore-rs

  Public

  sigstore/sigstore-rs’s past year of commit activity
  An experimental Rust crate for sigstore

  rust-langrust-librariessigstore

  Rust

  •

  Apache License 2.0

  •67•218•45•16•Updated Dec 15, 2025Dec 15, 2025

• sigstore

  Public

  sigstore/sigstore’s past year of commit activity
  Common go library shared across sigstore services and clients

  gogolangsecurity+ 3supply-chaincosignsigstore

  Go

  •

  Apache License 2.0

  •142•493•20•21•Updated Dec 15, 2025Dec 15, 2025

• policy-controller

  Public
  Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign

  Go

  •

  Other

  •68•151•61•14•Updated Dec 15, 2025Dec 15, 2025

• rekor-monitor

  Public
  Log monitor for Rekor to verify immutability and monitor entries

  Go

  •

  Apache License 2.0

  •33•41•11•2•Updated Dec 15, 2025Dec 15, 2025

• homebrew-tap

  Public
  Sigstore Homebrew Tap

  homebrewtaphomebrew-formula+ 3homebrew-tapcosignrekor

  Ruby

  •

  Apache License 2.0

  •8•8•0•0•Updated Dec 15, 2025Dec 15, 2025

• model-validation-operator

  Public

  sigstore/model-validation-operator’s past year of commit activity
  Kubernetes controller to validate AI models

  Go

  •

  Apache License 2.0

  •9•25•12•11•Updated Dec 15, 2025Dec 15, 2025

• model-transparency

  Public
  Supply chain security for ML

  securitymachine-learningsupply-chain+ 1sigstore

  Python

  •

  Apache License 2.0

  •55•211•28•9•Updated Dec 15, 2025Dec 15, 2025

• community

  Public

  sigstore/community’s past year of commit activity
  General sigstore community repo

  Apache License 2.0

  •51•44•13•2•Updated Dec 15, 2025Dec 15, 2025

• sigstore-a2a

  Public

  sigstore/sigstore-a2a’s past year of commit activity
  Sigstore A2A Agent Signing

  Python

  •

  Apache License 2.0

  •2•13•3•1•Updated Dec 15, 2025Dec 15, 2025

• rekor

  Public

  sigstore/rekor’s past year of commit activity
  Software Supply Chain Transparency Log

  securitysupply-chainprovenance+ 1transparency-log

  Go

  •

  Apache License 2.0

  •193•1k•72•10•Updated Dec 15, 2025Dec 15, 2025

• rekor-tiles

  Public

  sigstore/rekor-tiles’s past year of commit activity
  Signature Transparency Log designed for ease of use, low cost, and minimal maintenance

  securitysupply-chainprovenance+ 1transparency-log

  Go

  •

  Apache License 2.0

  •16•21•33•4•Updated Dec 15, 2025Dec 15, 2025

• sigstore-go

  Public

  sigstore/sigstore-go’s past year of commit activity
  Go library for Sigstore signing and verification

  gogolangsigstore

  Go

  •

  Apache License 2.0

  •38•80•9•1•Updated Dec 15, 2025Dec 15, 2025

• protobuf-specs

  Public
  Sigstore's Protocol Buffer specifications

  Makefile

  •

  Apache License 2.0

  •46•33•31•6•Updated Dec 15, 2025Dec 15, 2025