Skip to content

@securesign Red Hat Trusted Artifact Signer

Change the repository type filter

All

    Repositories list

    41 repositories

    • timestamp-authority

      Public
      RFC3161 Timestamp Authority
      Go
      •
      Apache License 2.0
      •52•0•0•6•Updated Jan 11, 2026Jan 11, 2026

    • fulcio

      Public
      Sigstore OIDC PKI
      Go
      •
      Apache License 2.0
      •164•1•0•5•Updated Jan 11, 2026Jan 11, 2026

    • secure-sign-operator

      Public
      Kubernetes Operator for deploying and managing Sigstore components like Fulcio, Rekor, TSA, and TUF.
      certificate-transparencyoperatorsigstorerekor
      Go
      •
      Apache License 2.0
      •23•8•0•27•Updated Jan 11, 2026Jan 11, 2026

    • rekor-search-ui

      Public
      Search Rekor for entries
      transparency-logrekorsecure-supply-chain
      TypeScript
      •
      Apache License 2.0
      •34•0•0•8•Updated Jan 11, 2026Jan 11, 2026

    • rhtas-console

      Public
      Go
      •
      Apache License 2.0
      •2•1•0•2•Updated Jan 11, 2026Jan 11, 2026

    • rekor

      Public
      Software Supply Chain Transparency Log
      Go
      •
      Apache License 2.0
      •196•0•0•7•Updated Jan 11, 2026Jan 11, 2026

    • certificate-transparency-go

      Public
      Auditing for TLS certificates (Go code)
      Go
      •
      Apache License 2.0
      •285•0•0•4•Updated Jan 11, 2026Jan 11, 2026

    • policy-controller-operator

      Public
      A helm based operator for deploying and managing instances of the sigstore policy controller on kubernetes
      Go
      •
      Apache License 2.0
      •0•0•0•3•Updated Jan 11, 2026Jan 11, 2026

    • pipelines

      Public
      Red Hat Trusted Artifact Signer's Konflux Build Pipelines
      Dockerfile
      •
      Apache License 2.0
      •4•0•0•6•Updated Jan 11, 2026Jan 11, 2026

    • artifact-signer-ansible

      Public
      Ansible Collection for RHTAS
      Jinja
      •
      Apache License 2.0
      •6•6•0•3•Updated Jan 11, 2026Jan 11, 2026

    • trillian

      Public
      A transparent, highly scalable and cryptographically verifiable data store.
      Go
      •
      Apache License 2.0
      •426•0•0•10•Updated Jan 11, 2026Jan 11, 2026

    • rekor-monitor

      Public
      Log monitor for Rekor to verify immutability and monitor entries
      Go
      •
      Apache License 2.0
      •34•0•0•8•Updated Jan 10, 2026Jan 10, 2026

    • gitsign

      Public
      Keyless Git signing using Sigstore
      Go
      •
      Apache License 2.0
      •73•0•1•4•Updated Jan 10, 2026Jan 10, 2026

    • cosign

      Public
      Container Signing
      Go
      •
      Apache License 2.0
      •677•0•2•4•Updated Jan 10, 2026Jan 10, 2026

    • rhtas-console-ui

      Public
      A web-based UI for interacting with the Red Hat Trusted Artifact Signer (TAS) ecosystem. It provides user-friendly workflows for retrieving, verifying, and monitoring signed software artifacts, integrating with Sigstore services like Rekor, Fulcio, and TUF.
      software-supply-chainsigstoresoftware-supply-chain-security
      TypeScript
      •
      Apache License 2.0
      •4•0•1•3•Updated Jan 10, 2026Jan 10, 2026

    • policy-controller

      Public
      Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
      Go
      •
      Other
      •69•0•0•2•Updated Jan 10, 2026Jan 10, 2026

    • segment-backup-job

      Public
      Python
      •8•0•0•13•Updated Jan 9, 2026Jan 9, 2026

    • tough

      Public
      Rust libraries and tools for using and generating TUF repositories
      Rust
      •65•0•0•10•Updated Jan 9, 2026Jan 9, 2026

    • model-validation-operator

      Public
      Kubernetes controller to validate AI models
      Go
      •
      Apache License 2.0
      •9•0•0•5•Updated Jan 8, 2026Jan 8, 2026

    • model-transparency

      Public
      Supply chain security for ML
      Python
      •
      Apache License 2.0
      •56•0•0•2•Updated Jan 8, 2026Jan 8, 2026

    • fbc

      Public
      File-based Catalogs
      Shell
      •
      Apache License 2.0
      •7•0•1•6•Updated Jan 8, 2026Jan 8, 2026

    • sigstore-e2e

      Public
      Go
      •1•0•0•0•Updated Dec 1, 2025Dec 1, 2025

    • rhtas-benchmark

      Public
      Automated infrastructure and tooling for performance benchmarking and analysis of Red Hat Trusted Artifact Signer (RHTAS).)
      Jinja
      •
      Apache License 2.0
      •0•0•0•0•Updated Nov 26, 2025Nov 26, 2025

    • structural-tests

      Public
      Securesign project structural and acceptance tests
      Go
      •
      Apache License 2.0
      •0•0•0•0•Updated Nov 20, 2025Nov 20, 2025

    • trusted-foundations

      Public
      open-sourcesupply-chain-securitysigstore
      MDX
      •
      Apache License 2.0
      •0•2•0•5•Updated Oct 20, 2025Oct 20, 2025

    • sigstore-python

      Public
      A Sigstore client written in Python
      Python
      •
      Other
      •69•0•0•0•Updated Aug 19, 2025Aug 19, 2025

    • renovate-config

      Public
      0•0•0•1•Updated Jul 22, 2025Jul 22, 2025

    • quickstarts

      Public
      Red Hat Trusted Artifact Signer's quickstarts
      Makefile
      •
      Apache License 2.0
      •0•2•0•0•Updated Jul 17, 2025Jul 17, 2025

    • actions

      Public
      A Github repo that stores all of securesigns reusable Github actions.
      3•0•0•0•Updated Apr 25, 2025Apr 25, 2025

    • scaffolding

      Public archive
      Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
      HCL
      •
      Apache License 2.0
      •63•0•0•18•Updated Apr 3, 2025Apr 3, 2025