Repositories list

• rekor-monitor

  Public
  Log monitor for Rekor to verify immutability and monitor entries

  Go

  •

  Apache License 2.0

  •33•37•8•1•Updated Nov 3, 2025Nov 3, 2025

• sigstore-go

  Public
  Go library for Sigstore signing and verification

  gogolangsigstore

  Go

  •

  Apache License 2.0

  •37•80•9•3•Updated Nov 3, 2025Nov 3, 2025

• rekor-tiles

  Public
  Signature Transparency Log designed for ease of use, low cost, and minimal maintenance

  securitysupply-chainprovenance+ 1transparency-log

  Go

  •

  Apache License 2.0

  •14•20•33•7•Updated Nov 3, 2025Nov 3, 2025

• root-signing-staging

  Public

  sigstore/root-signing-staging’s past year of commit activity
  Staging TUF repository for Sigstore trust root

  Apache License 2.0

  •10•10•7•3•Updated Nov 3, 2025Nov 3, 2025

• helm-charts

  Public

  sigstore/helm-charts’s past year of commit activity
  Helm charts for sigstore project

  charthelmhelm-charts

  Smarty

  •

  Apache License 2.0

  •99•82•34•22•Updated Nov 3, 2025Nov 3, 2025

• sigstore-ruby

  Public
  Pure-ruby implementation of sigstore verification

  Ruby

  •

  Apache License 2.0

  •8•28•4•6•Updated Nov 3, 2025Nov 3, 2025

• cosign

  Public
  Code signing and transparency for containers and binaries

  Go

  •

  Apache License 2.0

  •648•5.4k•255•17•Updated Nov 3, 2025Nov 3, 2025

• model-transparency

  Public

  sigstore/model-transparency’s past year of commit activity
  Supply chain security for ML

  securitymachine-learningsupply-chain+ 1sigstore

  Python

  •

  Apache License 2.0

  •50•200•20•2•Updated Nov 3, 2025Nov 3, 2025

• scaffolding

  Public

  sigstore/scaffolding’s past year of commit activity
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

  Go

  •

  Apache License 2.0

  •63•68•5•6•Updated Nov 3, 2025Nov 3, 2025

• fulcio

  Public

  sigstore/fulcio’s past year of commit activity
  Sigstore OIDC PKI

  Go

  •

  Apache License 2.0

  •160•765•50•6•Updated Nov 3, 2025Nov 3, 2025

• root-signing

  Public
  TUF repository for Sigstore trust root

  Makefile

  •

  Apache License 2.0

  •88•109•18•0•Updated Nov 3, 2025Nov 3, 2025

• sigstore-rekor-types

  Public

  sigstore/sigstore-rekor-types’s past year of commit activity
  Python models for Rekor's API types

  Python

  •

  Apache License 2.0

  •4•6•1•4•Updated Nov 3, 2025Nov 3, 2025

• gh-action-sigstore-python

  Public
  A GitHub Action for sigstore-python

  securitysupply-chaincodesigning+ 1github-actions

  Python

  •

  Apache License 2.0

  •13•62•14•2•Updated Nov 2, 2025Nov 2, 2025

• sigstore-python

  Public
  A Sigstore client written in Python

  pythonsecuritysupply-chain+ 1codesigning

  Python

  •

  Other

  •63•296•47•0•Updated Nov 2, 2025Nov 2, 2025

• sigstore-conformance

  Public
  Conformance testing for Sigstore clients

  testsconformancesigstore

  Python

  •15•10•27•3•Updated Nov 2, 2025Nov 2, 2025

• terraform-modules

  Public
  Terraform modules for Sigstore cloud infrastructure

  HCL

  •

  Apache License 2.0

  •7•3•1•2•Updated Nov 1, 2025Nov 1, 2025

• protobuf-specs

  Public
  Sigstore's Protocol Buffer specifications

  Makefile

  •

  Apache License 2.0

  •45•33•32•21•Updated Nov 1, 2025Nov 1, 2025

• community

  Public
  General sigstore community repo

  Apache License 2.0

  •48•42•13•0•Updated Oct 31, 2025Oct 31, 2025

• sigstore-a2a

  Public

  sigstore/sigstore-a2a’s past year of commit activity
  Sigstore A2A Agent Signing

  Python

  •

  Apache License 2.0

  •2•12•5•1•Updated Oct 30, 2025Oct 30, 2025

• sigstore-rs

  Public

  sigstore/sigstore-rs’s past year of commit activity
  An experimental Rust crate for sigstore

  rust-langrust-librariessigstore

  Rust

  •

  Apache License 2.0

  •66•208•43•13•Updated Oct 30, 2025Oct 30, 2025

• rekor

  Public
  Software Supply Chain Transparency Log

  securitysupply-chainprovenance+ 1transparency-log

  Go

  •

  Apache License 2.0

  •187•1k•72•3•Updated Oct 29, 2025Oct 29, 2025

• .github

  Public
  Default community health files for the Sigstore organization.

  19•7•3•0•Updated Oct 28, 2025Oct 28, 2025

• sigstore-probers

  Public
  Probers for sigstore infrastructure

  Go

  •

  Apache License 2.0

  •15•6•2•0•Updated Oct 28, 2025Oct 28, 2025

• sigstore

  Public
  Common go library shared across sigstore services and clients

  gogolangsecurity+ 3supply-chaincosignsigstore

  Go

  •

  Apache License 2.0

  •142•490•19•7•Updated Oct 28, 2025Oct 28, 2025

• docs

  Public
  Sigstore documentation

  HTML

  •

  MIT License

  •96•109•73•1•Updated Oct 28, 2025Oct 28, 2025

• homebrew-tap

  Public
  Sigstore Homebrew Tap

  homebrewtaphomebrew-formula+ 3homebrew-tapcosignrekor

  Ruby

  •

  Apache License 2.0

  •8•8•0•1•Updated Oct 27, 2025Oct 27, 2025

• cosign-installer

  Public

  sigstore/cosign-installer’s past year of commit activity
  Cosign Github Action

  cosign

  Apache License 2.0

  •49•169•2•1•Updated Oct 27, 2025Oct 27, 2025

• sigstore-js

  Public
  Code-signing for npm packages

  javascriptsecuritynode+ 2supply-chaincodesigning

  TypeScript

  •

  Apache License 2.0

  •32•171•8•6•Updated Oct 27, 2025Oct 27, 2025

• sigstore-devops-tools

  Public
  Tools & services used to help in the development flow of sigstore

  devopsautomationtools+ 1sigstore

  Go

  •

  Apache License 2.0

  •3•6•0•1•Updated Oct 27, 2025Oct 27, 2025

• rekor-search-ui

  Public
  Search Rekor for entries

  TypeScript

  •

  Apache License 2.0

  •33•38•6•6•Updated Oct 27, 2025Oct 27, 2025