sigstore topic
cosign-keyless-admission-webhook
Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect
cosign-gatekeeper-provider
🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their signatures
helm-sigstore
Plugin for Helm to integrate the sigstore ecosystem
tejolote
A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
model-transparency
Supply chain security for ML
sigstore-go
Go library for Sigstore signing and verification
sigstore-go-archived
Go library for Sigstore signing and verification