Data

Tools

Indexes

Applications

Experiments

Summary

An open API service for producing an overview of a list of open source projects.

https://github.com/sigstore/fulcio

Score: 28.766897237230662

Last synced: about 22 hours ago
JSON representation

Repository metadata:

Sigstore OIDC PKI

Owner metadata:

GitHub Events

Total
Last Year

Committers metadata

Last synced: 2 days ago

Total Commits: 1,975
Total Committers: 105
Avg Commits per committer: 18.81
Development Distribution Score (DDS): 0.323

Commits in past year: 198
Committers in past year: 17
Avg Commits per committer in past year: 11.647
Development Distribution Score (DDS) in past year: 0.338

Name Email Commits
dependabot[bot] 4****] 1337
Hayden B h****n@g****m 124
Carlos Tadeu Panato Junior c****u@g****m 90
Bob Callaway b****y 67
Nathan Smith 1****5 36
dlorenc d****c@g****m 33
Matt Moore m****a@g****m 24
Luke Hinds l****s@r****m 18
priyawadhwa p****a@c****v 18
Hayden 8****O 18
Kenny Leung k****g@c****v 15
Luke Hinds 7****s 13
Javan Lacerda j****a@g****m 12
Colleen Murphy c****y 12
Ville Aikas 1****s 10
Billy Lynch 1****h 6
Thomas Strömberg t****b@c****v 6
mitchell amihod 4****h 5
William Woodruff w****m@t****m 5
endorama 5****a 4
Jake Sanders j****d@g****m 4
Appu a****u@g****m 4
Hector Fernandez h****r@c****v 4
ian hundere 1****e 4
Mateusz Jakobsche 1****Y 3
Ramon Petgrave 3****4 3
John Speed Meyers j****s@c****v 3
priyawadhwa p****a@g****m 3
asraa a****a@g****m 2
Zack Newman z****1@g****m 2
and 75 more...

Issue and Pull Request metadata

Last synced: 2 days ago

Total issues: 99
Total pull requests: 1,159
Average time to close issues: 11 months
Average time to close pull requests: 5 days
Total issue authors: 58
Total pull request authors: 63
Average comments per issue: 3.68
Average comments per pull request: 0.77
Merged pull request: 848
Bot issues: 8
Bot pull requests: 897

Past year issues: 18
Past year pull requests: 114
Past year average time to close issues: 2 months
Past year average time to close pull requests: 7 days
Past year issue authors: 14
Past year pull request authors: 15
Past year average comments per issue: 2.61
Past year average comments per pull request: 0.89
Past year merged pull request: 71
Past year bot issues: 1
Past year bot pull requests: 81

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/sigstore/fulcio

Top Issue Authors

  • haydentherapper (10)
  • Hayden-IO (8)
  • dependabot[bot] (7)
  • znewman01 (6)
  • woodruffw (6)
  • ianhundere (3)
  • anithapriyanatarajan (3)
  • kaovilai (2)
  • dlorenc (2)
  • richardfan1126 (2)
  • osmman (2)
  • MateuszJakobscheBDY (2)
  • dandresm (1)
  • Meeki1l (1)
  • steiza (1)

Top Pull Request Authors

  • dependabot[bot] (897)
  • haydentherapper (58)
  • cpanato (40)
  • javanlacerda (19)
  • bobcallaway (13)
  • Hayden-IO (12)
  • cmurphy (11)
  • ramonpetgrave64 (6)
  • ianhundere (5)
  • yob (4)
  • Horiodino (4)
  • kommendorkapten (4)
  • osmman (3)
  • MateuszJakobscheBDY (3)
  • loosebazooka (3)

Top Issue Labels

  • enhancement (61)
  • bug (19)
  • dependencies (7)
  • question (6)
  • go (6)
  • v2 (3)
  • github_actions (1)
  • pathfinding (1)
  • npm-ga (1)

Top Pull Request Labels

  • dependencies (896)
  • go (583)
  • github_actions (187)
  • docker (112)
  • docker_compose (13)
  • question (1)

Package metadata

proxy.golang.org: github.com/sigstore/fulcio

proxy.golang.org: github.com/Sigstore/fulcio

  • Homepage:
  • Documentation: https://pkg.go.dev/github.com/Sigstore/fulcio#section-documentation
  • Licenses: apache-2.0
  • Latest release: v1.9.1 (published 13 days ago)
  • Last Synced: 2026-10-31T15:35:01.291Z (2 days ago)
  • Versions: 48
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent packages count: 4.674%
    • Average: 4.831%
    • Dependent repos count: 4.988%
proxy.golang.org: github.com/sigstore/fulcio/pkg/generated/protobuf

Package protobuf is a reverse proxy.

proxy.golang.org: github.com/sigstore/fulcio/pkg/certificate

Package certificate contains helpers for getting data from Fulcio issued x509 certificates.

proxy.golang.org: github.com/SigStore/fulcio

  • Homepage: https://github.com/sigstore/fulcio
  • Documentation: https://pkg.go.dev/github.com/SigStore/fulcio#section-documentation
  • Licenses: Apache-2.0
  • Latest release: v1.9.1 (published 13 days ago)
  • Last Synced: 2026-10-31T15:35:06.680Z (2 days ago)
  • Versions: 48
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Stargazers count: 1.792%
    • Forks count: 1.819%
    • Average: 4.989%
    • Dependent packages count: 6.999%
    • Dependent repos count: 9.346%
proxy.golang.org: github.com/sigstore/FULCIO

  • Homepage:
  • Documentation: https://pkg.go.dev/github.com/sigstore/FULCIO#section-documentation
  • Licenses: apache-2.0
  • Latest release: v1.9.0 (published 22 days ago)
  • Last Synced: 2026-10-31T15:35:00.082Z (2 days ago)
  • Versions: 47
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent packages count: 5.742%
    • Average: 5.934%
    • Dependent repos count: 6.127%
nixpkgs-23.11: fulcio

A Root-CA for code signing certs - issuing certificates based on an OIDC email address

debian-13: golang-github-sigstore-fulcio

  • Homepage: https://github.com/sigstore/fulcio
  • Documentation: https://packages.debian.org/trixie/golang-github-sigstore-fulcio
  • Licenses: apache-2.0
  • Latest release: 1.6.5-1 (published 9 months ago)
  • Last Synced: 2026-03-13T11:14:07.142Z (8 months ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
guix: go-github-com-sigstore-fulcio

Sigstore certificate authority for code signing

nixpkgs-24.11: fulcio

Root-CA for code signing certs - issuing certificates based on an OIDC email address

nixpkgs-23.05: fulcio

A Root-CA for code signing certs - issuing certificates based on an OIDC email address

ubuntu-24.10: golang-github-sigstore-fulcio

  • Homepage: https://github.com/sigstore/fulcio
  • Licenses: apache-2.0
  • Latest release: 1.2.0-2 (published 9 months ago)
  • Last Synced: 2026-03-08T16:52:47.891Z (8 months ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
nixpkgs-24.05: fulcio

A Root-CA for code signing certs - issuing certificates based on an OIDC email address

nixpkgs-unstable: fulcio

Root-CA for code signing certs - issuing certificates based on an OIDC email address

Dependencies

.github/workflows/codeql-analysis.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • github/codeql-action/analyze 17573ee1cc1b9d061760f3a006fc4aac4f944fd5 composite
  • github/codeql-action/autobuild 17573ee1cc1b9d061760f3a006fc4aac4f944fd5 composite
  • github/codeql-action/init 17573ee1cc1b9d061760f3a006fc4aac4f944fd5 composite
.github/workflows/main.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
  • codecov/codecov-action d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70 composite
  • trail-of-forks/setup-protoc a97892a429d98fae78d26f40334ab7eb616d08b9 composite
.github/workflows/protoc-dependabot-hack.yml actions
  • protocolbuffers/protobuf v22.0 composite
.github/workflows/scorecard_action.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/upload-artifact 0b7f8abb1508181956e8e162db84b466c27e18ce composite
  • github/codeql-action/upload-sarif 17573ee1cc1b9d061760f3a006fc4aac4f944fd5 composite
  • ossf/scorecard-action e38b1902ae4f44df626f11ba0734b14fb91f8f86 composite
.github/workflows/validate-release.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
.github/workflows/verify-k8s.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
  • chainguard-dev/actions/kind-diag 84c993eaf02da1c325854fb272a4df9184bd80fc composite
  • chainguard-dev/actions/setup-kind 7d1eb557f464d97e5fe5177807a9226141eb9308 composite
  • ko-build/setup-ko ace48d793556083a76f1e3e6068850c1f4a369aa composite
.github/workflows/verify.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
  • golangci/golangci-lint-action 08e2f20817b15149a52b5b3ebe7de50aff2ba8c5 composite
Dockerfile docker
  • deploy latest build
  • golang 1.20.1@sha256 build
docker-compose.yml docker
  • dexidp/dex v2.30.0
  • gcr.io/trillian-opensource-ci/ctfe latest
  • gcr.io/trillian-opensource-ci/db_server 3c8193ebb2d7fedb44d18e9c810d0d2e4dbb7e4d
  • gcr.io/trillian-opensource-ci/log_server latest
  • gcr.io/trillian-opensource-ci/log_signer latest
go.mod go
  • chainguard.dev/go-grpc-kit v0.14.0
  • cloud.google.com/go v0.107.0
  • cloud.google.com/go/compute v1.18.0
  • cloud.google.com/go/compute/metadata v0.2.3
  • cloud.google.com/go/iam v0.8.0
  • cloud.google.com/go/kms v1.8.0
  • cloud.google.com/go/longrunning v0.3.0
  • cloud.google.com/go/security v1.12.0
  • filippo.io/edwards25519 v1.0.0
  • github.com/Azure/azure-sdk-for-go v68.0.0+incompatible
  • github.com/Azure/go-autorest v14.2.0+incompatible
  • github.com/Azure/go-autorest/autorest v0.11.28
  • github.com/Azure/go-autorest/autorest/adal v0.9.21
  • github.com/Azure/go-autorest/autorest/azure/auth v0.5.12
  • github.com/Azure/go-autorest/autorest/azure/cli v0.4.6
  • github.com/Azure/go-autorest/autorest/date v0.3.0
  • github.com/Azure/go-autorest/autorest/to v0.4.0
  • github.com/Azure/go-autorest/autorest/validation v0.3.1
  • github.com/Azure/go-autorest/logger v0.2.1
  • github.com/Azure/go-autorest/tracing v0.6.0
  • github.com/PaesslerAG/gval v1.0.0
  • github.com/PaesslerAG/jsonpath v0.1.1
  • github.com/ThalesIgnite/crypto11 v1.2.5
  • github.com/armon/go-metrics v0.4.1
  • github.com/armon/go-radix v1.0.0
  • github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d
  • github.com/aws/aws-sdk-go v1.44.195
  • github.com/aws/aws-sdk-go-v2 v1.17.1
  • github.com/aws/aws-sdk-go-v2/config v1.18.3
  • github.com/aws/aws-sdk-go-v2/credentials v1.13.3
  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.12.19
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.25
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.19
  • github.com/aws/aws-sdk-go-v2/internal/ini v1.3.26
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.19
  • github.com/aws/aws-sdk-go-v2/service/kms v1.18.18
  • github.com/aws/aws-sdk-go-v2/service/sso v1.11.25
  • github.com/aws/aws-sdk-go-v2/service/ssooidc v1.13.8
  • github.com/aws/aws-sdk-go-v2/service/sts v1.17.5
  • github.com/aws/smithy-go v1.13.4
  • github.com/beorn7/perks v1.0.1
  • github.com/blendle/zapdriver v1.3.1
  • github.com/cenkalti/backoff/v3 v3.2.2
  • github.com/cenkalti/backoff/v4 v4.2.0
  • github.com/cespare/xxhash/v2 v2.2.0
  • github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be
  • github.com/coreos/go-oidc/v3 v3.5.0
  • github.com/dimchansky/utfbom v1.1.1
  • github.com/fatih/color v1.13.0
  • github.com/fsnotify/fsnotify v1.6.0
  • github.com/go-jose/go-jose/v3 v3.0.0
  • github.com/go-logr/logr v1.2.3
  • github.com/go-logr/stdr v1.2.2
  • github.com/goadesign/goa v2.2.5+incompatible
  • github.com/gogo/protobuf v1.3.2
  • github.com/golang-jwt/jwt/v4 v4.4.2
  • github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
  • github.com/golang/protobuf v1.5.2
  • github.com/golang/snappy v0.0.4
  • github.com/google/certificate-transparency-go v1.1.4
  • github.com/google/go-cmp v0.5.9
  • github.com/google/go-containerregistry v0.12.1
  • github.com/google/gofuzz v1.2.0
  • github.com/google/tink/go v1.7.0
  • github.com/google/uuid v1.3.0
  • github.com/googleapis/enterprise-certificate-proxy v0.2.3
  • github.com/googleapis/gax-go/v2 v2.7.0
  • github.com/grpc-ecosystem/go-grpc-middleware v1.3.0
  • github.com/grpc-ecosystem/go-grpc-prometheus v1.2.1-0.20210315223345-82c243799c99
  • github.com/grpc-ecosystem/grpc-gateway/v2 v2.15.0
  • github.com/hashicorp/errwrap v1.1.0
  • github.com/hashicorp/go-cleanhttp v0.5.2
  • github.com/hashicorp/go-hclog v1.3.1
  • github.com/hashicorp/go-immutable-radix v1.3.1
  • github.com/hashicorp/go-multierror v1.1.1
  • github.com/hashicorp/go-plugin v1.4.6
  • github.com/hashicorp/go-retryablehttp v0.7.1
  • github.com/hashicorp/go-rootcerts v1.0.2
  • github.com/hashicorp/go-secure-stdlib/mlock v0.1.2
  • github.com/hashicorp/go-secure-stdlib/parseutil v0.1.7
  • github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
  • github.com/hashicorp/go-sockaddr v1.0.2
  • github.com/hashicorp/go-uuid v1.0.3
  • github.com/hashicorp/go-version v1.6.0
  • github.com/hashicorp/golang-lru v0.5.4
  • github.com/hashicorp/hcl v1.0.0
  • github.com/hashicorp/vault/api v1.8.2
  • github.com/hashicorp/vault/sdk v0.6.1
  • github.com/hashicorp/yamux v0.1.1
  • github.com/inconshreveable/mousetrap v1.0.1
  • github.com/jellydator/ttlcache/v2 v2.11.1
  • github.com/jmespath/go-jmespath v0.4.0
  • github.com/json-iterator/go v1.1.12
  • github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf
  • github.com/magiconair/properties v1.8.7
  • github.com/mattn/go-colorable v0.1.13
  • github.com/mattn/go-isatty v0.0.16
  • github.com/matttproud/golang_protobuf_extensions v1.0.4
  • github.com/miekg/pkcs11 v1.1.1
  • github.com/mitchellh/copystructure v1.2.0
  • github.com/mitchellh/go-homedir v1.1.0
  • github.com/mitchellh/go-testing-interface v1.14.1
  • github.com/mitchellh/mapstructure v1.5.0
  • github.com/mitchellh/reflectwalk v1.0.2
  • github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
  • github.com/modern-go/reflect2 v1.0.2
  • github.com/oklog/run v1.1.0
  • github.com/opencontainers/go-digest v1.0.0
  • github.com/pelletier/go-toml/v2 v2.0.6
  • github.com/pierrec/lz4 v2.6.1+incompatible
  • github.com/pkg/errors v0.9.1
  • github.com/prometheus/client_golang v1.14.0
  • github.com/prometheus/client_model v0.3.0
  • github.com/prometheus/common v0.39.0
  • github.com/prometheus/procfs v0.9.0
  • github.com/rs/cors v1.8.3
  • github.com/ryanuber/go-glob v1.0.0
  • github.com/segmentio/ksuid v1.0.4
  • github.com/sigstore/sigstore v1.4.7-0.20221129181343-66783b685c70
  • github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966
  • github.com/spf13/afero v1.9.3
  • github.com/spf13/cast v1.5.0
  • github.com/spf13/cobra v1.6.1
  • github.com/spf13/jwalterweatherman v1.1.0
  • github.com/spf13/pflag v1.0.5
  • github.com/spf13/viper v1.15.0
  • github.com/spiffe/go-spiffe/v2 v2.1.2
  • github.com/subosito/gotenv v1.4.2
  • github.com/thales-e-security/pool v0.0.2
  • github.com/theupdateframework/go-tuf v0.5.2-0.20220930112810-3890c1e7ace4
  • github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
  • go.opencensus.io v0.24.0
  • go.opentelemetry.io/otel v1.13.0
  • go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.13.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.13.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.12.0
  • go.opentelemetry.io/otel/sdk v1.13.0
  • go.opentelemetry.io/otel/trace v1.13.0
  • go.opentelemetry.io/proto/otlp v0.19.0
  • go.step.sm/crypto v0.25.0
  • go.uber.org/atomic v1.10.0
  • go.uber.org/multierr v1.9.0
  • go.uber.org/zap v1.24.0
  • goa.design/goa v2.2.5+incompatible
  • golang.org/x/crypto v0.5.0
  • golang.org/x/net v0.7.0
  • golang.org/x/oauth2 v0.5.0
  • golang.org/x/sync v0.1.0
  • golang.org/x/sys v0.5.0
  • golang.org/x/term v0.5.0
  • golang.org/x/text v0.7.0
  • golang.org/x/time v0.2.0
  • google.golang.org/api v0.110.0
  • google.golang.org/appengine v1.6.7
  • google.golang.org/genproto v0.0.0-20230209215440-0dfe4f8abfcc
  • google.golang.org/grpc v1.53.0
  • google.golang.org/protobuf v1.28.1
  • gopkg.in/inf.v0 v0.9.1
  • gopkg.in/ini.v1 v1.67.0
  • gopkg.in/square/go-jose.v2 v2.6.0
  • gopkg.in/yaml.v2 v2.4.0
  • gopkg.in/yaml.v3 v3.0.1
  • k8s.io/api v0.26.1
  • k8s.io/apimachinery v0.26.1
  • k8s.io/klog/v2 v2.90.0
  • k8s.io/utils v0.0.0-20230115233650-391b47cb4029
  • knative.dev/pkg v0.0.0-20230125083639-408ad0773f47
  • sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd
  • sigs.k8s.io/release-utils v0.7.3
  • sigs.k8s.io/structured-merge-diff/v4 v4.2.3
go.sum go
  • 822 dependencies
hack/tools/go.mod go
  • bitbucket.org/creachadair/stringset v0.0.11
  • cloud.google.com/go/longrunning v0.4.1
  • github.com/bmatcuk/doublestar/v4 v4.6.0
  • github.com/gertd/go-pluralize v0.2.1
  • github.com/golang/glog v1.0.0
  • github.com/golang/protobuf v1.5.2
  • github.com/googleapis/api-linter v1.42.0
  • github.com/grpc-ecosystem/grpc-gateway/v2 v2.15.0
  • github.com/jhump/protoreflect v1.10.1
  • github.com/mattn/go-runewidth v0.0.9
  • github.com/olekukonko/tablewriter v0.0.5
  • github.com/spf13/pflag v1.0.5
  • github.com/stoewer/go-strcase v1.2.1
  • golang.org/x/net v0.7.0
  • golang.org/x/sys v0.5.0
  • golang.org/x/text v0.7.0
  • google.golang.org/genproto v0.0.0-20230209215440-0dfe4f8abfcc
  • google.golang.org/grpc v1.53.0
  • google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.2.0
  • google.golang.org/protobuf v1.28.1
  • gopkg.in/yaml.v2 v2.4.0
  • gopkg.in/yaml.v3 v3.0.1
hack/tools/go.sum go
  • 136 dependencies
tools/loadtest/requirements.txt pypi
  • cryptography * test
  • locust * test
  • pyjwt * test
.github/workflows/check-oidc-issuers.yml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
.github/workflows/e2e.yml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • ko-build/setup-ko 61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445 composite
  • sigstore/cosign-installer 6f9f17788090df1f26f669e9d70d6ae9567deba6 composite
.github/workflows/cut-release.yml actions
.github/workflows/container-build.yml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • actions/setup-go 924ae3a1cded613372ab5595356fb5720e22ba16 composite
  • google-github-actions/auth 7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 composite
  • ko-build/setup-ko 61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445 composite
  • sigstore/cosign-installer 6f9f17788090df1f26f669e9d70d6ae9567deba6 composite
.github/workflows/depsreview.yml actions
docker-compose.debug.yml docker