Sigstore
sigstore.dev ↗Open sourceSelf-hostable
Signing, verification and provenance for software artifacts.
CategorySecurity
PricingFree, open source
Self-hostableYes
Repositorysigstore/sigstore
LicenseApache-2.0
LanguageGo
Last activityOct 2026Active
Repository
From GitHub · updated Oct 23
Stars539
Forks162
Open issues14
Last pushOct 2026
Related reading
Alternatives to Sigstore
Open source alternatives
Trivy★ 39k
Scanner for vulnerabilities and misconfigurations in code and containers.
Open source
Gitleaks★ 30k
Detect and prevent hardcoded secrets in git repositories.
Open source
BunkerWeb★ 11k
Open-source web application firewall built on NGINX, for Docker, Kubernetes and Linux.
Open source
Falco★ 9.5k
Cloud native runtime security and threat detection.
Open source
checkov★ 9.1k
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages.
Open source
Kyverno★ 8.3k
Policy engine designed for Kubernetes.
Open source
