Outsider Stage 0.5
Replay and verify a real, sealed Outsider Stage 0.5 intervention chain.
Translation pending
sign. verify. protect. Make sure your software is what it claims to be.
SecurityGo · MakefileGitHub @sigstoreOnlineOwner unconfirmed
Have you tried it? One tap is enough. No sign-in needed.
Common go library shared across sigstore services and clients
Translation pending
Taken from the repository README
Loading the full README.
Read the full README ↗sigstore/sigstore contains common Sigstore code: that is, code shared by infrastructure (e.g., Fulcio and Rekor) and Go language clients (e.g., Cosign and Gitsign).
This library currently provides:
The following KMS systems are available:
For example code, look at the relevant test code for each main code file.
The fuzzing tests are within https://github.com/sigstore/sigstore/tree/main/test/fuzz
Should you discover any security issues, please refer to sigstores security process
For container signing, you want cosign