Repositories list

• secure-sign-operator

  Public
  Kubernetes Operator for deploying and managing Sigstore components like Fulcio, Rekor, TSA, and TUF.

  certificate-transparencyoperatorsigstore+ 1

  certificate-transparencyoperatorsigstorerekor

  Go

  •

  Apache License 2.0

  •2626 forks in securesign/secure-sign-operator•1111 stars in securesign/secure-sign-operator•11 issue in securesign/secure-sign-operator•4646 pull requests in securesign/secure-sign-operator•Updated Oct 16, 2026Oct 16, 2026

• pipelines

  Public
  Red Hat Trusted Artifact Signer's Konflux Build Pipelines

  Dockerfile

  •

  Apache License 2.0

  •55 forks in securesign/pipelines•11 star in securesign/pipelines•00 issues in securesign/pipelines•66 pull requests in securesign/pipelines•Updated Oct 16, 2026Oct 16, 2026

• policy-controller-operator

  Public
  A helm based operator for deploying and managing instances of the sigstore policy controller on kubernetes

  Go

  •

  Apache License 2.0

  •00 forks in securesign/policy-controller-operator•00 stars in securesign/policy-controller-operator•00 issues in securesign/policy-controller-operator•00 pull requests in securesign/policy-controller-operator•Updated Oct 16, 2026Oct 16, 2026

• certificate-transparency-go

  Public
  Auditing for TLS certificates (Go code)

  Go

  •

  Apache License 2.0

  •326326 forks in securesign/certificate-transparency-go•00 stars in securesign/certificate-transparency-go•00 issues in securesign/certificate-transparency-go•99 pull requests in securesign/certificate-transparency-go•Updated Oct 16, 2026Oct 16, 2026

• policy-controller

  Public
  Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from …

  Go

  •

  Other

  •8080 forks in securesign/policy-controller•00 stars in securesign/policy-controller•00 issues in securesign/policy-controller•33 pull requests in securesign/policy-controller•Updated Oct 16, 2026Oct 16, 2026

• fulcio

  Public
  Sigstore OIDC PKI

  Go

  •

  Apache License 2.0

  •191191 forks in securesign/fulcio•11 star in securesign/fulcio•33 issues in securesign/fulcio•1212 pull requests in securesign/fulcio•Updated Oct 16, 2026Oct 16, 2026

• rekor

  Public
  Software Supply Chain Transparency Log

  Go

  •

  Apache License 2.0

  •226226 forks in securesign/rekor•00 stars in securesign/rekor•00 issues in securesign/rekor•1717 pull requests in securesign/rekor•Updated Oct 16, 2026Oct 16, 2026

• timestamp-authority

  Public
  RFC3161 Timestamp Authority

  Go

  •

  Apache License 2.0

  •6767 forks in securesign/timestamp-authority•00 stars in securesign/timestamp-authority•00 issues in securesign/timestamp-authority•1212 pull requests in securesign/timestamp-authority•Updated Oct 16, 2026Oct 16, 2026

• gitsign

  Public
  Keyless Git signing using Sigstore

  Go

  •

  Apache License 2.0

  •8787 forks in securesign/gitsign•00 stars in securesign/gitsign•11 issue in securesign/gitsign•1212 pull requests in securesign/gitsign•Updated Oct 16, 2026Oct 16, 2026

• rekor-search-ui

  Public
  Search Rekor for entries

  transparency-logrekorsecure-supply-chain

  transparency-logrekorsecure-supply-chain

  TypeScript

  •

  Apache License 2.0

  •4242 forks in securesign/rekor-search-ui•00 stars in securesign/rekor-search-ui•00 issues in securesign/rekor-search-ui•1818 pull requests in securesign/rekor-search-ui•Updated Oct 16, 2026Oct 16, 2026

• model-validation-operator

  Public
  Kubernetes controller to validate AI models

  Go

  •

  Apache License 2.0

  •1717 forks in securesign/model-validation-operator•00 stars in securesign/model-validation-operator•00 issues in securesign/model-validation-operator•88 pull requests in securesign/model-validation-operator•Updated Oct 16, 2026Oct 16, 2026

• model-transparency-go

  Public
  Supply chain security for ML

  Go

  •

  Apache License 2.0

  •22 forks in securesign/model-transparency-go•00 stars in securesign/model-transparency-go•00 issues in securesign/model-transparency-go•77 pull requests in securesign/model-transparency-go•Updated Oct 16, 2026Oct 16, 2026

• rhtas-console

  Public
  Go

  •

  Apache License 2.0

  •33 forks in securesign/rhtas-console•11 star in securesign/rhtas-console•00 issues in securesign/rhtas-console•77 pull requests in securesign/rhtas-console•Updated Oct 16, 2026Oct 16, 2026

• rekor-monitor

  Public
  Log monitor for Rekor to verify immutability and monitor entries

  Go

  •

  Apache License 2.0

  •3535 forks in securesign/rekor-monitor•00 stars in securesign/rekor-monitor•00 issues in securesign/rekor-monitor•99 pull requests in securesign/rekor-monitor•Updated Oct 16, 2026Oct 16, 2026

• cosign

  Public
  Container Signing

  Go

  •

  Apache License 2.0

  •826826 forks in securesign/cosign•00 stars in securesign/cosign•33 issues in securesign/cosign•3131 pull requests in securesign/cosign•Updated Oct 16, 2026Oct 16, 2026

• trillian

  Public
  A transparent, highly scalable and cryptographically verifiable data store.

  Go

  •

  Apache License 2.0

  •467467 forks in securesign/trillian•00 stars in securesign/trillian•00 issues in securesign/trillian•4040 pull requests in securesign/trillian•Updated Oct 16, 2026Oct 16, 2026

• tufcli

  Public
  A Go implementation of tuftool - a command-line utility for creating and managing The Update Framework (TUF) repositories.

  Go

  •

  Apache License 2.0

  •00 forks in securesign/tufcli•22 stars in securesign/tufcli•00 issues in securesign/tufcli•99 pull requests in securesign/tufcli•Updated Oct 16, 2026Oct 16, 2026

• rhtas-console-ui

  Public
  A web-based UI for interacting with the Red Hat Trusted Artifact Signer (TAS) ecosystem. It provides user-friendly workflows for retrieving, verifying, and moni…

  software-supply-chainsigstoresoftware-supply-chain-security

  software-supply-chainsigstoresoftware-supply-chain-security

  TypeScript

  •

  Apache License 2.0

  •99 forks in securesign/rhtas-console-ui•00 stars in securesign/rhtas-console-ui•11 issue in securesign/rhtas-console-ui•1919 pull requests in securesign/rhtas-console-ui•Updated Oct 16, 2026Oct 16, 2026

• artifact-signer-ansible

  Public
  Ansible Collection for RHTAS

  Jinja

  •

  Apache License 2.0

  •77 forks in securesign/artifact-signer-ansible•88 stars in securesign/artifact-signer-ansible•00 issues in securesign/artifact-signer-ansible•4545 pull requests in securesign/artifact-signer-ansible•Updated Oct 16, 2026Oct 16, 2026

• segment-backup-job

  Public
  Python

  •77 forks in securesign/segment-backup-job•00 stars in securesign/segment-backup-job•00 issues in securesign/segment-backup-job•44 pull requests in securesign/segment-backup-job•Updated Oct 16, 2026Oct 16, 2026

• fbc

  Public
  File-based Catalogs

  Shell

  •

  Apache License 2.0

  •77 forks in securesign/fbc•11 star in securesign/fbc•00 issues in securesign/fbc•22 pull requests in securesign/fbc•Updated Oct 15, 2026Oct 15, 2026

• model-transparency

  Public
  Supply chain security for ML

  Python

  •

  Apache License 2.0

  •6767 forks in securesign/model-transparency•00 stars in securesign/model-transparency•00 issues in securesign/model-transparency•22 pull requests in securesign/model-transparency•Updated Oct 15, 2026Oct 15, 2026

• quickstarts

  Public
  Red Hat Trusted Artifact Signer's quickstarts

  Makefile

  •

  Apache License 2.0

  •00 forks in securesign/quickstarts•22 stars in securesign/quickstarts•00 issues in securesign/quickstarts•00 pull requests in securesign/quickstarts•Updated Oct 15, 2026Oct 15, 2026

• tough

  Public
  Rust libraries and tools for using and generating TUF repositories

  Rust

  •7373 forks in securesign/tough•00 stars in securesign/tough•00 issues in securesign/tough•99 pull requests in securesign/tough•Updated Oct 15, 2026Oct 15, 2026

• sigstore-a2a

  Public
  Sigstore A2A Agent Signing

  Python

  •

  Apache License 2.0

  •66 forks in securesign/sigstore-a2a•00 stars in securesign/sigstore-a2a•00 issues in securesign/sigstore-a2a•11 pull request in securesign/sigstore-a2a•Updated Oct 14, 2026Oct 14, 2026

• sigstore-e2e

  Public
  Go

  •11 fork in securesign/sigstore-e2e•00 stars in securesign/sigstore-e2e•00 issues in securesign/sigstore-e2e•22 pull requests in securesign/sigstore-e2e•Updated Oct 13, 2026Oct 13, 2026

• .github

  Public
  00 forks in securesign/.github•00 stars in securesign/.github•00 issues in securesign/.github•00 pull requests in securesign/.github•Updated Oct 5, 2026Oct 5, 2026

• tas-integrator

  Public
  AI-powered environment scanner that detects CI/CD setup and generates Trusted Artifact Signer integration blueprints

  Shell

  •

  Apache License 2.0

  •00 forks in securesign/tas-integrator•00 stars in securesign/tas-integrator•00 issues in securesign/tas-integrator•00 pull requests in securesign/tas-integrator•Updated Oct 1, 2026Oct 1, 2026

• structural-tests

  Public
  Securesign project structural and acceptance tests

  Go

  •

  Apache License 2.0

  •00 forks in securesign/structural-tests•00 stars in securesign/structural-tests•00 issues in securesign/structural-tests•00 pull requests in securesign/structural-tests•Updated Sep 25, 2026Sep 25, 2026

• review-rot

  Public
  For generating conforma.dev/review-rot

  Go

  •

  Apache License 2.0

  •1919 forks in securesign/review-rot•00 stars in securesign/review-rot•00 issues in securesign/review-rot•00 pull requests in securesign/review-rot•Updated Sep 21, 2026Sep 21, 2026