sigstore

Here are 109 public repositories matching this topic...

always-further / nono

Kernel-enforced agent sandbox. Capability-based isolation with secure key management, atomic rollback, cryptographic immutable audit chain of provenance. Run your agents in a zero-trust environment.

security mcp code-execution ai-agents zero-trust ai-security runtime-security supply-chain-security sigstore agent-sandbox prompt-injection llm-security llm-sandbox ai-security-tool agent-security mcp-security ai-agent-security ai-agent-sandbox

Updated
Rust

sigstore / gitsign

Star

Keyless Git signing using Sigstore

git signing sigstore

Updated
Go

sigstore / sigstore

Star

Common go library shared across sigstore services and clients

go golang security supply-chain cosign sigstore

Updated
Go

👁 connaisseur

sse-secure-systems / connaisseur

Star

An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster

docker kubernetes security authentication container provenance integrity signature-verification notary admission-controllers container-images docker-content-trust cosign sigstore image-signature

Updated
Go

sigstore / model-transparency

Star

Supply chain security for ML

security machine-learning supply-chain sigstore

Updated
Python

sigstore / sigstore-rs

Star

An experimental Rust crate for sigstore

rust-lang rust-libraries sigstore

Updated
Rust

stacklok / sigstore-the-hard-way

Star

sigstore the hard way!

cosign sigstore

Updated

argoproj-labs / argocd-interlace

Star

Enabling Software Supply Chain Security Capabilities in ArgoCD

argocd in-toto sigstore software-supply-chain-security

Updated
Go

sigstore / sigstore-go

Star

Go library for Sigstore signing and verification

go golang sigstore

Updated
Go

sigstore / cosign-gatekeeper-provider

Star

🔮 to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their signatures

opa gatekeeper keyless cosign sigstore rekor fulcio

Updated
Go

kubernetes-sigs / tejolote

Star

A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.

provenance attestation sbom slsa sigstore

Updated
Go

👁 Veritensor

The Anti-Virus for AI Artifacts & RAG Firewall. A static analysis tool scanning Models and Notebooks for RCE, Datasets and RAG docs for Data Poisoning, PII, and Prompt Injections. Secure your AI Supply Chain.

static-analysis jupyter-notebook ci-cd pytorch devsecops data-security machine-learning-security ai-security mlops sbom huggingface pii-detection supply-chain-security cosign sigstore generative-ai prompt-injection llm-security rag-security pickle-security

Updated
Python

sigstore / helm-sigstore

Star

Plugin for Helm to integrate the sigstore ecosystem

helm sigstore

Updated
Go

0x77dev / pdf-sign

Sponsor

Star

PDF signing utility supporting GPG and Sigstore (Google, GitHub, Microsoft accounts / keyless OIDC) signatures, multi-party signing, making it easy to sign and verify documents without heavyweight PDF signing stacks, making your PDFs authentic, tamper-proof, fully compatible with regular readers; all while costing zero-dollars to use.