Skip to content

@securesign Red Hat Trusted Artifact Signer

Change the repository type filter

All

    Repositories list

    31 repositories

    • pipelines

      Public
      Red Hat Trusted Artifact Signer's Konflux Build Pipelines
      Dockerfile
      •
      Apache License 2.0
      •1•0•0•3•Updated Mar 17, 2025Mar 17, 2025

    • secure-sign-operator

      Public
      Go
      •
      Apache License 2.0
      •18•4•0•19•Updated Mar 17, 2025Mar 17, 2025

    • artifact-signer-ansible

      Public
      Ansible Collection for RHTAS
      Jinja
      •
      Apache License 2.0
      •6•4•0•6•Updated Mar 17, 2025Mar 17, 2025

    • scaffolding

      Public
      Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
      HCL
      •
      Apache License 2.0
      •60•0•0•12•Updated Mar 17, 2025Mar 17, 2025

    • gitsign

      Public
      Keyless Git signing using Sigstore
      Go
      •
      Apache License 2.0
      •66•0•1•11•Updated Mar 17, 2025Mar 17, 2025

    • segment-backup-job

      Public
      Python
      •7•0•0•12•Updated Mar 17, 2025Mar 17, 2025

    • cosign

      Public
      Container Signing
      Go
      •
      Apache License 2.0
      •568•0•1•14•Updated Mar 17, 2025Mar 17, 2025

    • certificate-transparency-go

      Public
      Auditing for TLS certificates (Go code)
      Go
      •
      Apache License 2.0
      •255•0•0•11•Updated Mar 17, 2025Mar 17, 2025

    • rekor

      Public
      Software Supply Chain Transparency Log
      Go
      •
      Apache License 2.0
      •174•0•0•16•Updated Mar 17, 2025Mar 17, 2025

    • timestamp-authority

      Public
      RFC3161 Timestamp Authority
      Go
      •
      Apache License 2.0
      •39•0•0•11•Updated Mar 17, 2025Mar 17, 2025

    • fulcio

      Public
      Sigstore OIDC PKI
      Go
      •
      Apache License 2.0
      •143•1•0•11•Updated Mar 16, 2025Mar 16, 2025

    • policy-controller

      Public
      Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign
      Go
      •
      Other
      •58•0•0•10•Updated Mar 16, 2025Mar 16, 2025

    • trillian

      Public
      A transparent, highly scalable and cryptographically verifiable data store.
      Go
      •
      Apache License 2.0
      •386•0•0•10•Updated Mar 15, 2025Mar 15, 2025

    • rekor-search-ui

      Public
      Search Rekor for entries
      transparency-logrekorsecure-supply-chain
      TypeScript
      •
      Apache License 2.0
      •28•0•0•6•Updated Mar 14, 2025Mar 14, 2025

    • fbc

      Public
      File-based Catalogs
      Shell
      •
      Apache License 2.0
      •6•0•1•2•Updated Mar 14, 2025Mar 14, 2025

    • tough

      Public
      Rust libraries and tools for using and generating TUF repositories
      Rust
      •59•0•0•1•Updated Mar 12, 2025Mar 12, 2025

    • trusted-foundations

      Public
      open-sourcesupply-chain-securitysigstore
      MDX
      •
      Apache License 2.0
      •0•2•0•5•Updated Mar 10, 2025Mar 10, 2025

    • quickstarts

      Public
      Red Hat Trusted Artifact Signer's quickstarts
      Makefile
      •
      Apache License 2.0
      •0•1•0•0•Updated Mar 7, 2025Mar 7, 2025

    • sigstore-rs

      Public
      An experimental Rust crate for sigstore
      Rust
      •
      Apache License 2.0
      •57•0•0•0•Updated Mar 4, 2025Mar 4, 2025

    • sigstore-ocp

      Public archive
      sigstore helm-charts and build scripts opinionated for running on OCP and RHEL
      Go
      •
      Apache License 2.0
      •17•13•6•23•Updated Mar 3, 2025Mar 3, 2025

    • sigstore-e2e

      Public
      Go
      •1•0•0•1•Updated Feb 25, 2025Feb 25, 2025

    • structural-tests

      Public
      Securesign project structural and acceptance tests
      Go
      •0•0•0•0•Updated Feb 4, 2025Feb 4, 2025

    • sigstore-ansible

      Public archive
      Automation to deploy the sigstore ecosystem on Virtual Machines
      Jinja
      •7•3•1•1•Updated Jun 26, 2024Jun 26, 2024

    • pipelines-demo

      Public
      A repository holding a few openshift-pipelines demos leveraging securesign repositories to demostrate basic Secure Supply Chain practices.
      Shell
      •
      GNU General Public License v3.0
      •3•2•0•0•Updated Jun 12, 2024Jun 12, 2024

    • actions

      Public
      A Github repo that stores all of securesigns reusable Github actions.
      3•0•0•0•Updated Mar 15, 2024Mar 15, 2024

    • go-version-package

      Public archive
      Go
      •
      Apache License 2.0
      •0•0•0•0•Updated Mar 7, 2024Mar 7, 2024

    • community-operators-prod

      Public
      community-operators metadata backing OpenShift OperatorHub
      Dockerfile
      •
      Apache License 2.0
      •553•0•0•0•Updated Jan 24, 2024Jan 24, 2024

    • e2e-gitsign-test

      Public
      This is a dummy repository that aims to be storage for testing gitsigned commits
      0•0•0•0•Updated Dec 1, 2023Dec 1, 2023

    • trusted-artifact-signer-hcc-ui

      Public
      Red Hat Trusted Artifact Signer for the Hybrid Cloud Console
      TypeScript
      •
      Apache License 2.0
      •1•0•0•5•Updated Nov 4, 2023Nov 4, 2023

    • helm-charts

      Public
      Helm charts for sigstore project
      Smarty
      •
      Apache License 2.0
      •95•0•0•0•Updated Oct 5, 2023Oct 5, 2023