Repositories list

• sigstore-java

  Public

  sigstore/sigstore-java’s past year of commit activity
  java clients for sigstore

  Java

  •

  Apache License 2.0

  •25•72•25•7•Updated Jan 30, 2026Jan 30, 2026

• sigstore-probers

  Public
  Probers for sigstore infrastructure

  Go

  •

  Apache License 2.0

  •16•6•5•3•Updated Jan 30, 2026Jan 30, 2026

• model-transparency

  Public

  sigstore/model-transparency’s past year of commit activity
  Supply chain security for ML

  securitymachine-learningsupply-chain+ 1sigstore

  Python

  •

  Apache License 2.0

  •58•218•30•7•Updated Jan 29, 2026Jan 29, 2026

• terraform-modules

  Public

  sigstore/terraform-modules’s past year of commit activity
  Terraform modules for Sigstore cloud infrastructure

  HCL

  •

  Apache License 2.0

  •7•4•1•0•Updated Jan 29, 2026Jan 29, 2026

• timestamp-authority

  Public
  RFC3161 Timestamp Authority

  Go

  •

  Apache License 2.0

  •54•112•4•4•Updated Jan 29, 2026Jan 29, 2026

• fulcio

  Public
  Sigstore OIDC PKI

  Go

  •

  Apache License 2.0

  •168•793•49•8•Updated Jan 29, 2026Jan 29, 2026

• protobuf-specs

  Public

  sigstore/protobuf-specs’s past year of commit activity
  Sigstore's Protocol Buffer specifications

  Makefile

  •

  Apache License 2.0

  •48•34•31•7•Updated Jan 29, 2026Jan 29, 2026

• root-signing

  Public
  TUF repository for Sigstore trust root

  Makefile

  •

  Apache License 2.0

  •91•117•19•0•Updated Jan 29, 2026Jan 29, 2026

• root-signing-staging

  Public

  sigstore/root-signing-staging’s past year of commit activity
  Staging TUF repository for Sigstore trust root

  Apache License 2.0

  •11•10•7•1•Updated Jan 29, 2026Jan 29, 2026

• sigstore-python

  Public

  sigstore/sigstore-python’s past year of commit activity
  A Sigstore client written in Python

  pythonsecuritysupply-chain+ 1codesigning

  Python

  •

  Other

  •72•310•49•2•Updated Jan 29, 2026Jan 29, 2026

• gh-action-sigstore-python

  Public
  A GitHub Action for sigstore-python

  securitysupply-chaincodesigning+ 1github-actions

  Python

  •

  Apache License 2.0

  •15•64•12•0•Updated Jan 29, 2026Jan 29, 2026

• gitsign

  Public
  Keyless Git signing using Sigstore

  gitsigningsigstore

  Go

  •

  Other

  •75•1.1k•27•4•Updated Jan 28, 2026Jan 28, 2026

• sigstore-website

  Public

  sigstore/sigstore-website’s past year of commit activity
  Codebase for sigstore.dev

  Vue

  •

  Apache License 2.0

  •75•28•16•12•Updated Jan 28, 2026Jan 28, 2026

• rekor-search-ui

  Public
  Search Rekor for entries

  TypeScript

  •

  Apache License 2.0

  •35•39•6•11•Updated Jan 28, 2026Jan 28, 2026

• cosign

  Public
  Code signing and transparency for containers and binaries

  Go

  •

  Apache License 2.0

  •687•5.6k•270•27•Updated Jan 28, 2026Jan 28, 2026

• helm-sigstore

  Public
  Plugin for Helm to integrate the sigstore ecosystem

  helmsigstore

  Go

  •

  Apache License 2.0

  •15•67•2•5•Updated Jan 28, 2026Jan 28, 2026

• model-validation-operator

  Public

  sigstore/model-validation-operator’s past year of commit activity
  Kubernetes controller to validate AI models

  Go

  •

  Apache License 2.0

  •10•25•10•3•Updated Jan 28, 2026Jan 28, 2026

• sigstore-js

  Public

  sigstore/sigstore-js’s past year of commit activity
  Code-signing for npm packages

  javascriptsecuritynode+ 2supply-chaincodesigning

  TypeScript

  •

  Apache License 2.0

  •39•178•5•5•Updated Jan 27, 2026Jan 27, 2026

• community

  Public
  General sigstore community repo

  Apache License 2.0

  •51•44•13•2•Updated Jan 27, 2026Jan 27, 2026

• sigstore-rs

  Public
  An experimental Rust crate for sigstore

  rust-langrust-librariessigstore

  Rust

  •

  Apache License 2.0

  •72•220•45•12•Updated Jan 27, 2026Jan 27, 2026

• sigstore-go

  Public
  Go library for Sigstore signing and verification

  gogolangsigstore

  Go

  •

  Apache License 2.0

  •41•83•11•7•Updated Jan 27, 2026Jan 27, 2026

• github-sync

  Public

  sigstore/github-sync’s past year of commit activity
  Pulumi GitHub Sync for sigstore

  automationpulumisigstore

  Go

  •

  Apache License 2.0

  •4•6•0•0•Updated Jan 27, 2026Jan 27, 2026

• rekor-monitor

  Public
  Log monitor for Rekor to verify immutability and monitor entries

  Go

  •

  Apache License 2.0

  •34•45•10•0•Updated Jan 27, 2026Jan 27, 2026

• sigstore-rekor-types

  Public

  sigstore/sigstore-rekor-types’s past year of commit activity
  Python models for Rekor's API types

  Python

  •

  Apache License 2.0

  •4•7•1•1•Updated Jan 27, 2026Jan 27, 2026

• k8s-manifest-sigstore

  Public
  kubectl plugin for signing Kubernetes manifest YAML files with sigstore

  Go

  •

  Apache License 2.0

  •28•85•3•2•Updated Jan 27, 2026Jan 27, 2026

• scaffolding

  Public
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

  Go

  •

  Apache License 2.0

  •63•71•9•7•Updated Jan 26, 2026Jan 26, 2026

• policy-controller

  Public

  sigstore/policy-controller’s past year of commit activity
  Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from …

  Go

  •

  Other

  •70•154•60•15•Updated Jan 26, 2026Jan 26, 2026

• sigstore

  Public

  sigstore/sigstore’s past year of commit activity
  Common go library shared across sigstore services and clients

  gogolangsecurity+ 3supply-chaincosignsigstore

  Go

  •

  Apache License 2.0

  •143•498•20•24•Updated Jan 26, 2026Jan 26, 2026

• sigstore-devops-tools

  Public

  sigstore/sigstore-devops-tools’s past year of commit activity
  Tools & services used to help in the development flow of sigstore

  devopsautomationtools+ 1sigstore

  Go

  •

  Apache License 2.0

  •3•6•0•0•Updated Jan 26, 2026Jan 26, 2026

• sigstore-conformance

  Public

  sigstore/sigstore-conformance’s past year of commit activity
  Conformance testing for Sigstore clients

  testsconformancesigstore

  Python

  •18•12•30•2•Updated Jan 26, 2026Jan 26, 2026