Code signing and transparency for containers and binaries
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 6.3k
- Latest
- v3.1.3
- Last push
- 2026-10-05
Software supply chain
Sign and verify artifacts, and assess the security practices of the projects you depend on.
Changes in this category (RSS)
Side by side
| Tool | Stars | Licence | Terms | Self-hosted | Language | Latest | Last push |
|---|---|---|---|---|---|---|---|
| Cosign | 6.3k | Apache-2.0 | Open source | No | Go | v3.1.3 | 2026-10-05 |
| OpenSSF Scorecard | 5.7k | Apache-2.0 | Open source | No | Go | v5.5.0 | 2026-10-06 |
| Notation | 498 | Apache-2.0 | Open source | No | Go | v1.3.2 | 2026-09-25 |
3 tools
OpenSSF Scorecard - Security health metrics for Open Source
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 5.7k
- Latest
- v5.5.0
- Last push
- 2026-10-06
A CLI tool to sign and verify artifacts
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 498
- Latest
- v1.3.2
- Last push
- 2026-09-25