Repositories list

• cosign

  Public
  Code signing and transparency for containers and binaries

  Go

  •

  Apache License 2.0

  •736736 forks•5.9k5.9k stars•117117 issues•2929 pull requests•Updated May 24, 2026May 24, 2026

• root-signing-staging

  Public
  Staging TUF repository for Sigstore trust root

  Apache License 2.0

  •1212 forks•1010 stars•77 issues•11 pull request•Updated May 24, 2026May 24, 2026

• root-signing

  Public
  TUF repository for Sigstore trust root

  Makefile

  •

  Apache License 2.0

  •9494 forks•126126 stars•2323 issues•33 pull requests•Updated May 24, 2026May 24, 2026

• sigstore-python

  Public
  A Sigstore client written in Python

  pythonsecuritysupply-chain+ 1

  pythonsecuritysupply-chaincodesigning

  Python

  •

  Other

  •7878 forks•319319 stars•5555 issues•66 pull requests•Updated May 23, 2026May 23, 2026

• gh-action-sigstore-python

  Public
  A GitHub Action for sigstore-python

  securitysupply-chaincodesigning+ 1

  securitysupply-chaincodesigninggithub-actions

  Python

  •

  Apache License 2.0

  •1313 forks•6868 stars•1313 issues•22 pull requests•Updated May 23, 2026May 23, 2026

• sigstore-js

  Public
  Code-signing for npm packages

  javascriptsecuritynode+ 2

  javascriptsecuritynodesupply-chaincodesigning

  TypeScript

  •

  Apache License 2.0

  •4444 forks•179179 stars•66 issues•55 pull requests•Updated May 23, 2026May 23, 2026

• sigstore-blog

  Public
  Codebase for blog.sigstore.dev

  CSS

  •

  Apache License 2.0

  •2121 forks•77 stars•22 issues•44 pull requests•Updated May 22, 2026May 22, 2026

• helm-sigstore

  Public
  Plugin for Helm to integrate the sigstore ecosystem

  helmsigstore

  helmsigstore

  Go

  •

  Apache License 2.0

  •1515 forks•7070 stars•22 issues•1010 pull requests•Updated May 22, 2026May 22, 2026

• sigstore-rs

  Public
  An experimental Rust crate for sigstore

  rust-langrust-librariessigstore

  rust-langrust-librariessigstore

  Rust

  •

  Apache License 2.0

  •7171 forks•231231 stars•4646 issues•1010 pull requests•Updated May 22, 2026May 22, 2026

• timestamp-authority

  Public
  RFC3161 Timestamp Authority

  Go

  •

  Apache License 2.0

  •5656 forks•132132 stars•44 issues•22 pull requests•Updated May 22, 2026May 22, 2026

• sigstore-probers

  Public
  Probers for sigstore infrastructure

  Go

  •

  Apache License 2.0

  •1818 forks•66 stars•11 issue•11 pull request•Updated May 22, 2026May 22, 2026

• scaffolding

  Public
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

  Go

  •

  Apache License 2.0

  •6565 forks•8181 stars•99 issues•55 pull requests•Updated May 22, 2026May 22, 2026

• sigstore-java

  Public
  java clients for sigstore

  Java

  •

  Apache License 2.0

  •2929 forks•7575 stars•2222 issues•1414 pull requests•Updated May 22, 2026May 22, 2026

• rekor

  Public
  Software Supply Chain Transparency Log

  securitysupply-chainprovenance+ 1

  securitysupply-chainprovenancetransparency-log

  Go

  •

  Apache License 2.0

  •205205 forks•1.1k1.1k stars•6969 issues•77 pull requests•Updated May 21, 2026May 21, 2026

• fulcio

  Public
  Sigstore OIDC PKI

  Go

  •

  Apache License 2.0

  •172172 forks•843843 stars•3737 issues•11 pull request•Updated May 21, 2026May 21, 2026

• terraform-modules

  Public
  Terraform modules for Sigstore cloud infrastructure

  HCL

  •

  Apache License 2.0

  •88 forks•55 stars•11 issue•11 pull request•Updated May 21, 2026May 21, 2026

• sigstore-rust

  Public
  Sigstore implemented in Rust for Github v0.3 bundles

  ocipackage-managementcosign+ 1

  ocipackage-managementcosignsigstore

  Rust

  •

  Apache License 2.0

  •1111 forks•1515 stars•55 issues•55 pull requests•Updated May 21, 2026May 21, 2026

• gitsign

  Public
  Keyless Git signing using Sigstore

  gitsigningsigstore

  gitsigningsigstore

  Go

  •

  Other

  •7676 forks•1.1k1.1k stars•2727 issues•77 pull requests•Updated May 19, 2026May 19, 2026

• github-sync

  Public
  Pulumi GitHub Sync for sigstore

  automationpulumisigstore

  automationpulumisigstore

  Go

  •

  Apache License 2.0

  •44 forks•77 stars•00 issues•44 pull requests•Updated May 19, 2026May 19, 2026

• architecture-docs

  Public
  Specification of sigstore's architecture in an IETF internet-draft format

  Other

  •126126 forks•66 stars•2525 issues•33 pull requests•Updated May 19, 2026May 19, 2026

• rekor-monitor

  Public
  Log monitor for Rekor to verify immutability and monitor entries

  Go

  •

  Apache License 2.0

  •3333 forks•5353 stars•1010 issues•00 pull requests•Updated May 19, 2026May 19, 2026

• sigstore

  Public
  Common go library shared across sigstore services and clients

  gogolangsecurity+ 3

  gogolangsecuritysupply-chaincosignsigstore

  Go

  •

  Apache License 2.0

  •152152 forks•519519 stars•1212 issues•2121 pull requests•Updated May 19, 2026May 19, 2026

• sigstore-devops-tools

  Public
  Tools & services used to help in the development flow of sigstore

  devopsautomationtools+ 1

  devopsautomationtoolssigstore

  Go

  •

  Apache License 2.0

  •33 forks•88 stars•00 issues•00 pull requests•Updated May 19, 2026May 19, 2026

• model-validation-operator

  Public
  Kubernetes controller to validate AI models

  Go

  •

  Apache License 2.0

  •1212 forks•2929 stars•99 issues•55 pull requests•Updated May 19, 2026May 19, 2026

• sigstore-conformance

  Public
  Conformance testing for Sigstore clients

  testsconformancesigstore

  testsconformancesigstore

  Python

  •1919 forks•1111 stars•1717 issues•33 pull requests•Updated May 18, 2026May 18, 2026

• sigstore-go

  Public
  Go library for Sigstore signing and verification

  gogolangsigstore

  gogolangsigstore

  Go

  •

  Apache License 2.0

  •4949 forks•8989 stars•99 issues•44 pull requests•Updated May 18, 2026May 18, 2026

• rekor-tiles

  Public
  Signature Transparency Log designed for ease of use, low cost, and minimal maintenance

  securitysupply-chainprovenance+ 1

  securitysupply-chainprovenancetransparency-log

  Go

  •

  Apache License 2.0

  •2323 forks•3838 stars•2929 issues•44 pull requests•Updated May 18, 2026May 18, 2026

• protobuf-specs

  Public
  Sigstore's Protocol Buffer specifications

  Makefile

  •

  Apache License 2.0

  •5252 forks•3434 stars•3434 issues•1212 pull requests•Updated May 18, 2026May 18, 2026

• community

  Public
  General sigstore community repo

  Apache License 2.0

  •5656 forks•4545 stars•1313 issues•11 pull request•Updated May 16, 2026May 16, 2026

• helm-charts

  Public
  Helm charts for sigstore project

  charthelmhelm-charts

  charthelmhelm-charts

  Go Template

  •

  Apache License 2.0

  •102102 forks•9090 stars•4646 issues•2121 pull requests•Updated May 15, 2026May 15, 2026