sigstore/cosign-gatekeeper-provider

Stars
76
Rank 420,374 (Top 9 %)
Language
Go
License
Apache License 2.0
Created almost 3 years ago
Updated 7 months ago

sigstore/cosign-gatekeeper-provider

sigstore

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their signatures

cosign

Code signing and transparency for containers and binaries

gitsign

Keyless Git signing using Sigstore

rekor

Software Supply Chain Transparency Log

fulcio

Sigstore OIDC PKI

sigstore

Common go library shared across sigstore services and clients

sigstore-python

A Sigstore client written in Python

sigstore-rs

An experimental Rust crate for sigstore

sigstore-js

Code-signing for npm packages

policy-controller

Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign

cosign-installer

Cosign Github Action

model-transparency

Supply chain security for ML

root-signing

TUF repository for Sigstore trust root

k8s-manifest-sigstore

kubectl plugin for signing Kubernetes manifest YAML files with sigstore

docs

Sigstore documentation

helm-charts

Helm charts for sigstore project

helm-sigstore

Plugin for Helm to integrate the sigstore ecosystem

timestamp-authority

RFC3161 Timestamp Authority

scaffolding

Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

gh-action-sigstore-python

A GitHub Action for sigstore-python

sigstore-go

Go library for Sigstore signing and verification

community

General sigstore community repo

sigstore-java

java clients for sigstore

friends

Sigstore user stories

sigstore-website

Codebase for sigstore.dev

rekor-search-ui

Search Rekor for entries

rekor-monitor

Log monitor for Rekor to verify immutability and monitor entries

protobuf-specs

Protocol Buffer specifications

sget

rekor-operator

K8S Operator for Rekor

sigstore-maven-plugin

sigstore maven plugin

sget-rs

sget is a keyless safe script retrieval and execution tool

sigstore-go-archived

Go library for Sigstore signing and verification

rekor-server

Cryptographic, immutable, append only software release ledger.

rekorctl

Rekor swiss army knife

ruby-sigstore

Rubygems sigstore signing plugin

sigstore-git-verifier

A Github Action to verify that new commits are present in the sigstore transparency log.

sigstore-maven

sigstore maven plugin

TSC

sigstore Technical Steering Committee

sigstore-conformance

Conformance testing for Sigstore clients

sigstore.github.io

homebrew-tap

Sigstore Homebrew Tap

examples

Repository to store various monitors for upstream release sites

sigstore-blog

Codebase for sigstore.dev

sigstore-project-template

cookiecutter template for sigstore projects

github-sync

Pulumi GitHub Sync for sigstore

sig-clients

Home of the clients SIG

sigstore-helm-operator

Helm based operator for the sigstore project

sigstore-probers

Probers for sigstore infrastructure

.github

Default community health files for the Sigstore organization.

sigstore-devops-tools

Tools & services used to help in the development flow of sigstore

sigstore-ruby

Pure-ruby implementation of sigstore verification

root-signing-staging

Staging TUF repository for Sigstore trust root

root-signing-practice

Root TUF Key Signing

rekor-ansible

Ansible role to deploy the Rekor signature transparency log

sigstore-installer

fish-food

sig-public-good-operations

Home of the public good operations SIG