Repositories list

• terraform-modules

  Public

  sigstore/terraform-modules’s past year of commit activity
  Terraform modules for Sigstore cloud infrastructure

  HCL

  •

  Apache License 2.0

  •77 forks•55 stars•11 issue•44 pull requests•Updated Apr 23, 2026Apr 23, 2026

• gh-action-sigstore-python

  Public

  sigstore/gh-action-sigstore-python’s past year of commit activity
  A GitHub Action for sigstore-python

  securitysupply-chaincodesigning+ 1

  securitysupply-chaincodesigninggithub-actions

  Python

  •

  Apache License 2.0

  •1313 forks•6565 stars•1313 issues•11 pull request•Updated Apr 23, 2026Apr 23, 2026

• root-signing

  Public

  sigstore/root-signing’s past year of commit activity
  TUF repository for Sigstore trust root

  Makefile

  •

  Apache License 2.0

  •9393 forks•122122 stars•2121 issues•22 pull requests•Updated Apr 23, 2026Apr 23, 2026

• community

  Public

  sigstore/community’s past year of commit activity
  General sigstore community repo

  Apache License 2.0

  •5353 forks•4545 stars•1313 issues•22 pull requests•Updated Apr 23, 2026Apr 23, 2026

• root-signing-staging

  Public

  sigstore/root-signing-staging’s past year of commit activity
  Staging TUF repository for Sigstore trust root

  Apache License 2.0

  •1111 forks•1010 stars•77 issues•22 pull requests•Updated Apr 23, 2026Apr 23, 2026

• sigstore-java

  Public

  sigstore/sigstore-java’s past year of commit activity
  java clients for sigstore

  Java

  •

  Apache License 2.0

  •2626 forks•7575 stars•2121 issues•1212 pull requests•Updated Apr 23, 2026Apr 23, 2026

• cosign

  Public
  Code signing and transparency for containers and binaries

  Go

  •

  Apache License 2.0

  •724724 forks•5.8k5.8k stars•115115 issues•3636 pull requests•Updated Apr 23, 2026Apr 23, 2026

• sigstore-js

  Public

  sigstore/sigstore-js’s past year of commit activity
  Code-signing for npm packages

  javascriptsecuritynode+ 2

  javascriptsecuritynodesupply-chaincodesigning

  TypeScript

  •

  Apache License 2.0

  •4343 forks•179179 stars•55 issues•44 pull requests•Updated Apr 23, 2026Apr 23, 2026

• sigstore-devops-tools

  Public

  sigstore/sigstore-devops-tools’s past year of commit activity
  Tools & services used to help in the development flow of sigstore

  devopsautomationtools+ 1

  devopsautomationtoolssigstore

  Go

  •

  Apache License 2.0

  •33 forks•77 stars•00 issues•00 pull requests•Updated Apr 23, 2026Apr 23, 2026

• timestamp-authority

  Public

  sigstore/timestamp-authority’s past year of commit activity
  RFC3161 Timestamp Authority

  Go

  •

  Apache License 2.0

  •5555 forks•128128 stars•44 issues•33 pull requests•Updated Apr 23, 2026Apr 23, 2026

• scaffolding

  Public

  sigstore/scaffolding’s past year of commit activity
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

  Go

  •

  Apache License 2.0

  •6464 forks•8080 stars•99 issues•33 pull requests•Updated Apr 23, 2026Apr 23, 2026

• sigstore-conformance

  Public

  sigstore/sigstore-conformance’s past year of commit activity
  Conformance testing for Sigstore clients

  testsconformancesigstore

  testsconformancesigstore

  Python

  •1818 forks•1111 stars•1919 issues•22 pull requests•Updated Apr 23, 2026Apr 23, 2026

• helm-charts

  Public

  sigstore/helm-charts’s past year of commit activity
  Helm charts for sigstore project

  charthelmhelm-charts

  charthelmhelm-charts

  Go Template

  •

  Apache License 2.0

  •102102 forks•9191 stars•4545 issues•2323 pull requests•Updated Apr 22, 2026Apr 22, 2026

• gitsign

  Public

  sigstore/gitsign’s past year of commit activity
  Keyless Git signing using Sigstore

  gitsigningsigstore

  gitsigningsigstore

  Go

  •

  Other

  •7575 forks•1.1k1.1k stars•2727 issues•44 pull requests•Updated Apr 22, 2026Apr 22, 2026

• rekor

  Public

  sigstore/rekor’s past year of commit activity
  Software Supply Chain Transparency Log

  securitysupply-chainprovenance+ 1

  securitysupply-chainprovenancetransparency-log

  Go

  •

  Apache License 2.0

  •197197 forks•1.1k1.1k stars•6969 issues•66 pull requests•Updated Apr 22, 2026Apr 22, 2026

• sigstore-go

  Public

  sigstore/sigstore-go’s past year of commit activity
  Go library for Sigstore signing and verification

  gogolangsigstore

  gogolangsigstore

  Go

  •

  Apache License 2.0

  •4747 forks•8989 stars•99 issues•66 pull requests•Updated Apr 22, 2026Apr 22, 2026

• rekor-tiles

  Public

  sigstore/rekor-tiles’s past year of commit activity
  Signature Transparency Log designed for ease of use, low cost, and minimal maintenance

  securitysupply-chainprovenance+ 1

  securitysupply-chainprovenancetransparency-log

  Go

  •

  Apache License 2.0

  •1919 forks•3737 stars•2929 issues•1010 pull requests•Updated Apr 21, 2026Apr 21, 2026

• model-transparency

  Public

  sigstore/model-transparency’s past year of commit activity
  Supply chain security for ML

  securitymachine-learningsupply-chain+ 1

  securitymachine-learningsupply-chainsigstore

  Python

  •

  Apache License 2.0

  •5959 forks•230230 stars•3131 issues•99 pull requests•Updated Apr 21, 2026Apr 21, 2026

• sigstore-python

  Public

  sigstore/sigstore-python’s past year of commit activity
  A Sigstore client written in Python

  pythonsecuritysupply-chain+ 1

  pythonsecuritysupply-chaincodesigning

  Python

  •

  Other

  •7575 forks•317317 stars•5454 issues•11 pull request•Updated Apr 21, 2026Apr 21, 2026

• sigstore-probers

  Public

  sigstore/sigstore-probers’s past year of commit activity
  Probers for sigstore infrastructure

  Go

  •

  Apache License 2.0

  •1818 forks•66 stars•22 issues•00 pull requests•Updated Apr 21, 2026Apr 21, 2026

• sigstore-rekor-types

  Public
  Python models for Rekor's API types

  Python

  •

  Apache License 2.0

  •44 forks•77 stars•11 issue•77 pull requests•Updated Apr 21, 2026Apr 21, 2026

• sigstore-rs

  Public

  sigstore/sigstore-rs’s past year of commit activity
  An experimental Rust crate for sigstore

  rust-langrust-librariessigstore

  rust-langrust-librariessigstore

  Rust

  •

  Apache License 2.0

  •7171 forks•229229 stars•4646 issues•1616 pull requests•Updated Apr 20, 2026Apr 20, 2026

• sigstore

  Public

  sigstore/sigstore’s past year of commit activity
  Common go library shared across sigstore services and clients

  gogolangsecurity+ 3

  gogolangsecuritysupply-chaincosignsigstore

  Go

  •

  Apache License 2.0

  •150150 forks•511511 stars•1212 issues•2626 pull requests•Updated Apr 20, 2026Apr 20, 2026

• policy-controller

  Public

  sigstore/policy-controller’s past year of commit activity
  Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from …

  Go

  •

  Other

  •6969 forks•167167 stars•6262 issues•2424 pull requests•Updated Apr 20, 2026Apr 20, 2026

• model-validation-operator

  Public

  sigstore/model-validation-operator’s past year of commit activity
  Kubernetes controller to validate AI models

  Go

  •

  Apache License 2.0

  •1212 forks•2828 stars•99 issues•22 pull requests•Updated Apr 20, 2026Apr 20, 2026

• rekor-monitor

  Public

  sigstore/rekor-monitor’s past year of commit activity
  Log monitor for Rekor to verify immutability and monitor entries

  Go

  •

  Apache License 2.0

  •3434 forks•5050 stars•1010 issues•00 pull requests•Updated Apr 20, 2026Apr 20, 2026

• sigstore-a2a

  Public

  sigstore/sigstore-a2a’s past year of commit activity
  Sigstore A2A Agent Signing

  agentsecuritycryptography+ 1

  agentsecuritycryptographysigstore

  Python

  •

  Apache License 2.0

  •44 forks•2020 stars•55 issues•66 pull requests•Updated Apr 20, 2026Apr 20, 2026

• protobuf-specs

  Public
  Sigstore's Protocol Buffer specifications

  Makefile

  •

  Apache License 2.0

  •5252 forks•3535 stars•3333 issues•66 pull requests•Updated Apr 20, 2026Apr 20, 2026

• sigstore-rust

  Public

  sigstore/sigstore-rust’s past year of commit activity
  Sigstore implemented in Rust for Github v0.3 bundles

  ocipackage-managementcosign+ 1

  ocipackage-managementcosignsigstore

  Rust

  •

  Apache License 2.0

  •66 forks•77 stars•22 issues•66 pull requests•Updated Apr 19, 2026Apr 19, 2026

• github-sync

  Public

  sigstore/github-sync’s past year of commit activity
  Pulumi GitHub Sync for sigstore

  automationpulumisigstore

  automationpulumisigstore

  Go

  •

  Apache License 2.0

  •44 forks•77 stars•00 issues•33 pull requests•Updated Apr 17, 2026Apr 17, 2026