Topic: "fulcio"
sigstore/cosign-gatekeeper-provider
🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their signatures
Language: Go - Size: 621 KB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 78 - Forks: 22

kube-tarian/sigrun
Sign your artifacts, source code or container images using Sigstore tools, Save the Signatures you want to use, and Validate & Control the deployments to allow only the known Sources based on Signatures, Maintainers & other payloads automatically.
Language: Go - Size: 705 KB - Last synced at: 4 months ago - Pushed at: about 2 years ago - Stars: 13 - Forks: 3

hboutemy/sigstore-java-poc
Java PoC code to implement sigstore operations equivalent to "cosign sign-blob"
Language: Java - Size: 91.8 KB - Last synced at: 5 months ago - Pushed at: over 2 years ago - Stars: 4 - Forks: 2

shibumi/secure-supply-chain-example
Supply Chain Security does not need to be difficult
Language: Go - Size: 3.91 KB - Last synced at: 4 days ago - Pushed at: over 3 years ago - Stars: 4 - Forks: 0
