🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their signatures

PDF signing utility supporting GPG and Sigstore (Google, GitHub, Microsoft accounts / keyless OIDC) signatures, multi-party signing, making it easy to sign and verify documents without heavyweight PDF signing stacks, making your PDFs authentic, tamper-proof, fully compatible with regular readers; all while costing zero-dollars to use.

🔍 Rekor transparency log monitoring and alerting

K8S Operator for Rekor

Sign your artifacts, source code or container images using Sigstore tools, Save the Signatures you want to use, and Validate & Control the deployments to allow only the known Sources based on Signatures, Maintainers & other payloads automatically.

Kubernetes Operator for deploying and managing Sigstore components like Fulcio, Rekor, TSA, and TUF.

OpenALPR-Webhook is a self-hosted web application that accepts Rekor Scout™ POST data allowing longer data retention.

A Falco Plugin for Rekor Transparency Log Server

Sigstore Homebrew Tap

Verifiable Usage Receipts for AI APIs. Cryptographic proof that your token bill is real. Ed25519 + Fulcio signing, RFC 6962 Merkle proofs, Trillian Tessera log, C2SP witness cosigning, Rekor public anchoring, Rust tokenizer verification. No blockchain.

Java PoC code to implement sigstore operations equivalent to "cosign sign-blob"

Supply Chain Security does not need to be difficult

Verifiable audit substrate for AI agents — EU AI Act Article 12 ready. Apache 2.0.

A Rekor crawler and monitor

Public verification keys for NebInfra release artifacts

Rekor ArgoCD Deployment on OpenShift

Apohara agent audit + seal — consolidated monorepo (codename: probanza, final product: synthex). 5-layer seal: HMAC + Ed25519 + RFC 3161 + Rekor v2 + C2PA.

A minimal Go HTTP server demonstrating keyless image signing with Sigstore (Cosign + Fulcio + Rekor) and GitOps delivery via ArgoCD.

AI-Bio Design Provenance Registry — hash-only attestation log for AI-designed biological constructs (SA-AOX standalone winner IDEA-CAP-27-001; ADPR-R/V/C tiers; transparency log + day-1 ingest scaffold).

Stage362: Asynchronous Proof Promotion Gate with Stage361 Revocation Proof Binding. Reviews whether pending timestamp or revocation proof can be promoted, kept pending, rejected, or blocked without false verified claims.