An open API service for producing an overview of a list of open source projects.

https://github.com/sigstore/rekor

provenance security supply-chain transparency-log

Score: 31.727979401692995

Last synced: about 20 hours ago
JSON representation

Repository metadata:

Software Supply Chain Transparency Log


Owner metadata:


GitHub Events

Total
Last Year

Committers metadata

Last synced: 2 days ago

Total Commits: 2,440
Total Committers: 101
Avg Commits per committer: 24.158
Development Distribution Score (DDS): 0.39

Commits in past year: 311
Committers in past year: 25
Avg Commits per committer in past year: 12.44
Development Distribution Score (DDS) in past year: 0.289

Name Email Commits
dependabot[bot] 4****] 1489
Bob Callaway b****y 292
Dan Lorenc d****c@g****m 115
Carlos Tadeu Panato Junior c****u@g****m 103
Hayden B h****n@g****m 60
priyawadhwa p****a@c****v 41
asraa a****a@g****m 34
AdamKorcz 4****z 33
Luke Hinds 7****s 28
Luke Hinds l****s@r****m 26
Naveen 1****n 21
Colleen Murphy c****y 16
Kenny Leung k****g@c****v 13
Hayden 8****O 12
Appu a****u@g****m 11
Lily Sturmann l****n 9
Tõnis Tiigi t****i@g****m 6
priyawadhwa p****a@g****m 5
Andrew Block a****k@g****m 4
Ramon Petgrave 3****4 4
Riccardo Schirone 5****c 4
Ceridwen Coghlan c****l@g****m 4
Jake Sanders j****d@g****m 4
Ahmet Alp Balkan a****b@g****m 3
Dominic Evans d****s@u****m 3
axel simon g****b@a****t 3
dlorenc l****d@g****m 3
Jason Hall j****l@r****m 3
Batuhan Apaydın b****n@t****m 2
Sascha Grunert s****t@r****m 2
and 71 more...

Issue and Pull Request metadata

Last synced: 2 days ago

Total issues: 98
Total pull requests: 1,359
Average time to close issues: 8 months
Average time to close pull requests: 6 days
Total issue authors: 52
Total pull request authors: 50
Average comments per issue: 1.91
Average comments per pull request: 0.67
Merged pull request: 1,076
Bot issues: 3
Bot pull requests: 1,054

Past year issues: 9
Past year pull requests: 145
Past year average time to close issues: about 1 month
Past year average time to close pull requests: 7 days
Past year issue authors: 8
Past year pull request authors: 18
Past year average comments per issue: 1.67
Past year average comments per pull request: 0.68
Past year merged pull request: 117
Past year bot issues: 0
Past year bot pull requests: 99

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/sigstore/rekor

Top Issue Authors

  • haydentherapper (18)
  • bobcallaway (9)
  • subhamoycomputer (5)
  • jas4711 (3)
  • dependabot[bot] (3)
  • asraa (3)
  • woodruffw (3)
  • lukehinds (3)
  • udf2457 (3)
  • TommyLike (2)
  • arlandgoh (2)
  • fghanmi (2)
  • CSOAI-ORG (2)
  • dlorenc (2)
  • nellshamrell (1)

Top Pull Request Authors

  • dependabot[bot] (1,054)
  • bobcallaway (95)
  • haydentherapper (61)
  • cpanato (33)
  • cmurphy (23)
  • ramonpetgrave64 (8)
  • ret2libc (7)
  • Horiodino (4)
  • loosebazooka (4)
  • Hayden-IO (4)
  • woodruffw (4)
  • AdamKorcz (4)
  • saschagrunert (4)
  • fghanmi (3)
  • chimanjain (3)

Top Issue Labels

  • enhancement (45)
  • bug (26)
  • question (11)
  • rekor-v2 (5)
  • dependencies (3)
  • go (2)
  • documentation (2)
  • pathfinding (2)
  • github_actions (1)
  • api (1)
  • good first issue (1)
  • help wanted (1)

Top Pull Request Labels

  • dependencies (1,054)
  • go (632)
  • docker (262)
  • github_actions (158)

Package metadata

proxy.golang.org: github.com/sigstore/rekor

proxy.golang.org: github.com/sigstore/rekor/hack/tools

  • Homepage:
  • Status: removed
  • Documentation: https://pkg.go.dev/github.com/sigstore/rekor/hack/tools#section-documentation
  • Licenses: apache-2.0
  • Latest release: v0.0.0-20260810125915-5a1909af34d1 (published 3 months ago)
  • Last Synced: 2026-10-29T18:57:55.018Z (2 days ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent packages count: 4.482%
    • Average: 4.633%
    • Dependent repos count: 4.783%
alpine-v3.18: rekor-zsh-completion

Zsh completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.2.1-r4 (published almost 3 years ago)
  • Last Synced: 2026-09-15T02:27:52.059Z (about 2 months ago)
  • Versions: 7
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 4.825%
    • Stargazers count: 9.431%
    • Forks count: 9.87%
  • Maintainers (1)
alpine-v3.18: rekor-bash-completion

Bash completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.2.1-r4 (published almost 3 years ago)
  • Last Synced: 2026-07-26T12:01:18.563Z (3 months ago)
  • Versions: 7
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 4.825%
    • Stargazers count: 9.431%
    • Forks count: 9.87%
  • Maintainers (1)
alpine-v3.18: rekor-server

Signature Transparency Log (server)

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.2.1-r4 (published almost 3 years ago)
  • Last Synced: 2026-07-26T12:01:24.498Z (3 months ago)
  • Versions: 7
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 4.825%
    • Stargazers count: 9.431%
    • Forks count: 9.87%
  • Maintainers (1)
alpine-v3.18: rekor

Signature transparency log

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.2.1-r4 (published almost 3 years ago)
  • Last Synced: 2026-08-20T02:30:27.506Z (2 months ago)
  • Versions: 7
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 4.825%
    • Stargazers count: 9.431%
    • Forks count: 9.87%
  • Maintainers (1)
alpine-v3.18: rekor-fish-completion

Fish completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.2.1-r4 (published almost 3 years ago)
  • Last Synced: 2026-07-26T12:01:40.235Z (3 months ago)
  • Versions: 7
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 4.825%
    • Stargazers count: 9.431%
    • Forks count: 9.87%
  • Maintainers (1)
proxy.golang.org: github.com/Sigstore/rekor

  • Homepage:
  • Documentation: https://pkg.go.dev/github.com/Sigstore/rekor#section-documentation
  • Licenses: apache-2.0
  • Latest release: v1.5.4 (published 2 months ago)
  • Last Synced: 2026-10-29T18:58:25.890Z (2 days ago)
  • Versions: 46
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent packages count: 4.678%
    • Average: 4.835%
    • Dependent repos count: 4.992%
proxy.golang.org: github.com/SigStore/rekor

  • Homepage: https://github.com/SigStore/rekor
  • Documentation: https://pkg.go.dev/github.com/SigStore/rekor#section-documentation
  • Licenses: Apache-2.0
  • Latest release: v1.5.5 (published 11 days ago)
  • Last Synced: 2026-10-29T18:58:23.343Z (2 days ago)
  • Versions: 48
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Stargazers count: 1.49%
    • Forks count: 1.526%
    • Average: 4.84%
    • Dependent packages count: 6.999%
    • Dependent repos count: 9.346%
alpine-edge: rekor-server

Signature Transparency Log (server)

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.5.2-r0 (published 5 months ago)
  • Last Synced: 2026-08-20T02:30:56.007Z (2 months ago)
  • Versions: 34
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Average: 9.179%
    • Forks count: 11.001%
    • Stargazers count: 11.075%
    • Dependent packages count: 14.641%
  • Maintainers (1)
alpine-edge: rekor-bash-completion

Bash completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.5.2-r0 (published 5 months ago)
  • Last Synced: 2026-08-20T02:30:50.500Z (2 months ago)
  • Versions: 34
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Average: 9.179%
    • Forks count: 11.001%
    • Stargazers count: 11.075%
    • Dependent packages count: 14.641%
  • Maintainers (1)
alpine-edge: rekor

Signature transparency log

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.5.2-r0 (published 5 months ago)
  • Last Synced: 2026-08-20T02:30:55.235Z (2 months ago)
  • Versions: 34
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Average: 9.179%
    • Forks count: 11.001%
    • Stargazers count: 11.075%
    • Dependent packages count: 14.641%
  • Maintainers (1)
alpine-edge: rekor-fish-completion

Fish completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.5.2-r0 (published 5 months ago)
  • Last Synced: 2026-08-20T02:30:52.420Z (2 months ago)
  • Versions: 34
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Average: 9.179%
    • Forks count: 11.001%
    • Stargazers count: 11.075%
    • Dependent packages count: 14.641%
  • Maintainers (1)
alpine-edge: rekor-zsh-completion

Zsh completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.5.2-r0 (published 5 months ago)
  • Last Synced: 2026-06-10T22:47:05.362Z (5 months ago)
  • Versions: 34
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Average: 9.179%
    • Forks count: 11.001%
    • Stargazers count: 11.075%
    • Dependent packages count: 14.641%
  • Maintainers (1)
alpine-v3.17: rekor-fish-completion

Fish completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 0.12.0-r7 (published over 3 years ago)
  • Last Synced: 2026-07-26T12:01:02.740Z (3 months ago)
  • Versions: 4
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Stargazers count: 9.128%
    • Forks count: 9.571%
    • Average: 11.488%
    • Dependent packages count: 27.254%
  • Maintainers (1)
alpine-v3.17: rekor-server

Signature Transparency Log (server)

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 0.12.0-r7 (published over 3 years ago)
  • Last Synced: 2026-03-11T14:18:54.784Z (8 months ago)
  • Versions: 4
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Stargazers count: 9.128%
    • Forks count: 9.571%
    • Average: 11.488%
    • Dependent packages count: 27.254%
  • Maintainers (1)
alpine-v3.17: rekor

Signature transparency log

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 0.12.0-r7 (published over 3 years ago)
  • Last Synced: 2026-08-20T02:30:21.853Z (2 months ago)
  • Versions: 4
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Stargazers count: 9.128%
    • Forks count: 9.571%
    • Average: 11.488%
    • Dependent packages count: 27.254%
  • Maintainers (1)
alpine-v3.17: rekor-zsh-completion

Zsh completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 0.12.0-r7 (published over 3 years ago)
  • Last Synced: 2026-07-26T12:00:57.544Z (3 months ago)
  • Versions: 4
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Stargazers count: 9.128%
    • Forks count: 9.571%
    • Average: 11.488%
    • Dependent packages count: 27.254%
  • Maintainers (1)
alpine-v3.17: rekor-bash-completion

Bash completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 0.12.0-r7 (published over 3 years ago)
  • Last Synced: 2026-08-20T02:30:45.236Z (2 months ago)
  • Versions: 4
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Stargazers count: 9.128%
    • Forks count: 9.571%
    • Average: 11.488%
    • Dependent packages count: 27.254%
  • Maintainers (1)
formulae.brew.sh: rekor-cli

CLI for interacting with Rekor

  • Homepage: https://docs.sigstore.dev/logging/overview/
  • Licenses: Apache-2.0
  • Latest release: 1.5.5 (published 5 days ago)
  • Last Synced: 2026-10-29T18:57:39.393Z (2 days ago)
  • Versions: 19
  • Dependent Packages: 0
  • Dependent Repositories: 1
  • Downloads: 29 Last month
  • Rankings:
    • Dependent packages count: 19.438%
    • Dependent repos count: 29.517%
    • Average: 39.093%
    • Downloads: 68.323%
nixpkgs-23.11: rekor-cli

CLI client for Sigstore, the Signature Transparency Log

nixpkgs-23.05: rekor-server

Sigstore server, the Signature Transparency Log

ubuntu-24.10: rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: apache-2.0
  • Latest release: 1.3.5-2 (published 9 months ago)
  • Last Synced: 2026-08-20T02:31:16.838Z (2 months ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
alpine-v3.20: rekor-bash-completion

Bash completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.5-r5 (published over 2 years ago)
  • Last Synced: 2026-08-20T02:30:51.311Z (2 months ago)
  • Versions: 2
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
nixpkgs-24.11: rekor-server

Sigstore server, the Signature Transparency Log

alpine-v3.19: rekor

Signature transparency log

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.3-r3 (published over 2 years ago)
  • Last Synced: 2026-03-11T14:12:23.555Z (8 months ago)
  • Versions: 4
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.21: rekor-zsh-completion

Zsh completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.6-r5 (published over 1 year ago)
  • Last Synced: 2026-08-20T02:30:52.244Z (2 months ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
nixpkgs-23.11: rekor-server

Sigstore server, the Signature Transparency Log

nixpkgs-24.05: rekor-cli

CLI client for Sigstore, the Signature Transparency Log

alpine-v3.20: rekor-server

Signature Transparency Log (server)

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.5-r5 (published over 2 years ago)
  • Last Synced: 2026-03-14T17:42:21.968Z (8 months ago)
  • Versions: 2
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.23: rekor-server

Signature Transparency Log (server)

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.4.2-r3 (published 9 months ago)
  • Last Synced: 2026-04-09T01:04:42.423Z (7 months ago)
  • Versions: 2
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
nixpkgs-24.05: rekor-server

Sigstore server, the Signature Transparency Log

alpine-v3.19: rekor-bash-completion

Bash completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.3-r3 (published over 2 years ago)
  • Last Synced: 2026-08-20T02:30:50.865Z (2 months ago)
  • Versions: 4
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.22: rekor-zsh-completion

Zsh completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.9-r8 (published 10 months ago)
  • Last Synced: 2026-08-20T02:30:51.933Z (2 months ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
nixpkgs-unstable: rekor-cli

CLI client for Sigstore, the Signature Transparency Log

artifacthub.io: sigstore/rekor

Part of the sigstore project, Rekor is a timestamping server and transparency log for storing signatures, as well as an API based server for validation

  • Homepage: https://sigstore.dev/
  • Documentation: https://artifacthub.io/packages/helm/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.8.8 (published 3 days ago)
  • Last Synced: 2026-10-29T18:58:24.592Z (2 days ago)
  • Versions: 133
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Downloads: 0 Total
  • Rankings:
    • Downloads: 0.0%
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
alpine-v3.23: rekor

Signature transparency log

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.4.2-r3 (published 9 months ago)
  • Last Synced: 2026-08-20T02:30:37.573Z (2 months ago)
  • Versions: 2
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.22: rekor-fish-completion

Fish completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.9-r8 (published 10 months ago)
  • Last Synced: 2026-08-20T02:30:45.025Z (2 months ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
nixpkgs-23.05: rekor-cli

CLI client for Sigstore, the Signature Transparency Log

alpine-v3.19: rekor-server

Signature Transparency Log (server)

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.3-r3 (published over 2 years ago)
  • Last Synced: 2026-08-20T02:30:45.063Z (2 months ago)
  • Versions: 4
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.21: rekor-bash-completion

Bash completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.6-r5 (published over 1 year ago)
  • Last Synced: 2026-08-20T02:30:46.617Z (2 months ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
nixpkgs-unstable: rekor-server

Sigstore server, the Signature Transparency Log

alpine-v3.22: rekor-bash-completion

Bash completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.9-r8 (published 10 months ago)
  • Last Synced: 2026-07-28T02:01:49.857Z (3 months ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.21: rekor

Signature transparency log

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.6-r5 (published over 1 year ago)
  • Last Synced: 2026-08-20T02:30:50.933Z (2 months ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.23: rekor-bash-completion

Bash completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.4.2-r3 (published 9 months ago)
  • Last Synced: 2026-08-20T02:30:27.497Z (2 months ago)
  • Versions: 2
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.22: rekor

Signature transparency log

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.9-r8 (published 10 months ago)
  • Last Synced: 2026-07-28T02:01:46.076Z (3 months ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.21: rekor-server

Signature Transparency Log (server)

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.6-r5 (published over 1 year ago)
  • Last Synced: 2026-08-20T02:30:49.219Z (2 months ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
nixpkgs-24.11: rekor-cli

CLI client for Sigstore, the Signature Transparency Log

guix: go-github-com-sigstore-rekor

Sigstore transparency log

alpine-v3.22: rekor-server

Signature Transparency Log (server)

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.9-r8 (published 10 months ago)
  • Last Synced: 2026-07-28T02:01:47.370Z (3 months ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.20: rekor-fish-completion

Fish completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.5-r5 (published over 2 years ago)
  • Last Synced: 2026-08-20T02:30:50.711Z (2 months ago)
  • Versions: 2
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.23: rekor-zsh-completion

Zsh completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.4.2-r3 (published 9 months ago)
  • Last Synced: 2026-10-03T21:26:48.620Z (28 days ago)
  • Versions: 2
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
debian-13: rekor

  • Homepage: https://github.com/sigstore/rekor
  • Documentation: https://packages.debian.org/trixie/rekor
  • Licenses: apache-2.0
  • Latest release: 1.3.9-1 (published 9 months ago)
  • Last Synced: 2026-08-20T02:31:05.586Z (2 months ago)
  • Versions: 1
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
alpine-v3.21: rekor-fish-completion

Fish completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.6-r5 (published over 1 year ago)
  • Last Synced: 2026-03-11T13:41:12.815Z (8 months ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.19: rekor-zsh-completion

Zsh completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.3-r3 (published over 2 years ago)
  • Last Synced: 2026-09-16T15:31:10.907Z (about 2 months ago)
  • Versions: 4
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.20: rekor-zsh-completion

Zsh completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.5-r5 (published over 2 years ago)
  • Last Synced: 2026-08-20T02:30:52.142Z (2 months ago)
  • Versions: 2
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.19: rekor-fish-completion

Fish completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.3-r3 (published over 2 years ago)
  • Last Synced: 2026-08-20T02:30:41.598Z (2 months ago)
  • Versions: 4
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.20: rekor

Signature transparency log

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.3.5-r5 (published over 2 years ago)
  • Last Synced: 2026-08-20T02:30:48.973Z (2 months ago)
  • Versions: 2
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)
alpine-v3.23: rekor-fish-completion

Fish completions for rekor

  • Homepage: https://github.com/sigstore/rekor
  • Licenses: Apache-2.0
  • Latest release: 1.4.2-r3 (published 9 months ago)
  • Last Synced: 2026-08-20T02:30:32.637Z (2 months ago)
  • Versions: 2
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 0.0%
    • Dependent packages count: 0.0%
    • Average: 100%
  • Maintainers (1)

Dependencies

.github/workflows/build.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
  • google-github-actions/auth ef5d53e30bbcd8d0836f4288f5e50ff3e086997d composite
  • ko-build/setup-ko ace48d793556083a76f1e3e6068850c1f4a369aa composite
  • sigstore/cosign-installer 9becc617647dfa20ae7b1151972e9b3a2c338a2b composite
.github/workflows/codeql-analysis.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • github/codeql-action/analyze 17573ee1cc1b9d061760f3a006fc4aac4f944fd5 composite
  • github/codeql-action/autobuild 17573ee1cc1b9d061760f3a006fc4aac4f944fd5 composite
  • github/codeql-action/init 17573ee1cc1b9d061760f3a006fc4aac4f944fd5 composite
.github/workflows/main.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
  • actions/upload-artifact 0b7f8abb1508181956e8e162db84b466c27e18ce composite
  • codecov/codecov-action d9f34f8cd5cb3b3eb79b3e4b5dae3a16df499a70 composite
  • codecov/codecov-action 81cd2dc8148241f03f5839d295e000b8f761e378 composite
  • ko-build/setup-ko ace48d793556083a76f1e3e6068850c1f4a369aa composite
.github/workflows/validate-release.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
.github/workflows/verify.yml actions
  • actions/checkout ac593985615ec2ede58e132d2e21d2b1cbd6127c composite
  • actions/setup-go 6edd4406fa81c3da01a34fa6f6343087c207a568 composite
  • golangci/golangci-lint-action 08e2f20817b15149a52b5b3ebe7de50aff2ba8c5 composite
Dockerfile docker
  • deploy latest build
  • golang 1.20.1@sha256 build
docker-compose.yml docker
  • docker.io/redis 6.2
  • gcr.io/projectsigstore/trillian_log_server@sha256 f850a0defd089ea844822030c67ae05bc93c91168a7dd4aceb0b6648c39f696b
  • gcr.io/projectsigstore/trillian_log_signer@sha256 fe90d523f6617974f70878918e4b31d49b2b46a86024bb2d6b01d2bbfed8edbf
  • gcr.io/trillian-opensource-ci/db_server v1.4.0
go.mod go
  • cloud.google.com/go v0.107.0
  • cloud.google.com/go/compute v1.15.1
  • cloud.google.com/go/compute/metadata v0.2.3
  • cloud.google.com/go/iam v0.8.0
  • cloud.google.com/go/kms v1.8.0
  • cloud.google.com/go/storage v1.27.0
  • filippo.io/edwards25519 v1.0.0
  • github.com/AdaLogics/go-fuzz-headers v0.0.0-20230106234847-43070de90fa1
  • github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d
  • github.com/beorn7/perks v1.0.1
  • github.com/blang/semver v3.5.1+incompatible
  • github.com/cavaliercoder/badio v0.0.0-20160213150051-ce5280129e9e
  • github.com/cavaliercoder/go-cpio v0.0.0-20180626203310-925f9528c45e
  • github.com/cavaliercoder/go-rpm v0.0.0-20200122174316-8cb9fd9c31a8
  • github.com/cespare/xxhash/v2 v2.2.0
  • github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be
  • github.com/cyberphone/json-canonicalization v0.0.0-20210303052042-6bc126869bf4
  • github.com/cyphar/filepath-securejoin v0.2.3
  • github.com/danieljoos/wincred v1.1.1
  • github.com/docker/go-units v0.5.0
  • github.com/fsnotify/fsnotify v1.6.0
  • github.com/fxamacker/cbor/v2 v2.4.0
  • github.com/ghodss/yaml v1.0.0
  • github.com/go-chi/chi v4.1.2+incompatible
  • github.com/go-logr/logr v1.2.3
  • github.com/go-logr/stdr v1.2.2
  • github.com/go-openapi/analysis v0.21.4
  • github.com/go-openapi/errors v0.20.3
  • github.com/go-openapi/jsonpointer v0.19.5
  • github.com/go-openapi/jsonreference v0.20.0
  • github.com/go-openapi/loads v0.21.2
  • github.com/go-openapi/runtime v0.25.0
  • github.com/go-openapi/spec v0.20.8
  • github.com/go-openapi/strfmt v0.21.3
  • github.com/go-openapi/swag v0.22.3
  • github.com/go-openapi/validate v0.22.1
  • github.com/go-playground/locales v0.14.1
  • github.com/go-playground/universal-translator v0.18.1
  • github.com/go-playground/validator/v10 v10.11.2
  • github.com/godbus/dbus/v5 v5.0.4
  • github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
  • github.com/golang/protobuf v1.5.2
  • github.com/google/go-cmp v0.5.9
  • github.com/google/go-containerregistry v0.12.1
  • github.com/google/rpmpack v0.0.0-20210518075352-dc539ef4f2ea
  • github.com/google/trillian v1.5.1
  • github.com/google/uuid v1.3.0
  • github.com/google/wire v0.5.0
  • github.com/googleapis/enterprise-certificate-proxy v0.2.1
  • github.com/googleapis/gax-go/v2 v2.7.0
  • github.com/hashicorp/go-cleanhttp v0.5.2
  • github.com/hashicorp/go-retryablehttp v0.7.2
  • github.com/hashicorp/hcl v1.0.0
  • github.com/howeyc/gopass v0.0.0-20190910152052-7cb4b85ec19c
  • github.com/in-toto/in-toto-golang v0.3.4-0.20211211042327-af1f9fb822bf
  • github.com/inconshreveable/mousetrap v1.0.1
  • github.com/jedisct1/go-minisign v0.0.0-20211028175153-1c139d1cc84b
  • github.com/jellydator/ttlcache/v2 v2.11.1
  • github.com/josharian/intern v1.0.0
  • github.com/leodido/go-urn v1.2.1
  • github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf
  • github.com/magiconair/properties v1.8.7
  • github.com/mailru/easyjson v0.7.7
  • github.com/matttproud/golang_protobuf_extensions v1.0.1
  • github.com/mediocregopher/radix/v4 v4.1.2
  • github.com/mitchellh/go-homedir v1.1.0
  • github.com/mitchellh/mapstructure v1.5.0
  • github.com/oklog/ulid v1.3.1
  • github.com/opencontainers/go-digest v1.0.0
  • github.com/opentracing/opentracing-go v1.2.0
  • github.com/pelletier/go-toml/v2 v2.0.6
  • github.com/pkg/errors v0.9.1
  • github.com/prometheus/client_golang v1.14.0
  • github.com/prometheus/client_model v0.3.0
  • github.com/prometheus/common v0.37.0
  • github.com/prometheus/procfs v0.8.0
  • github.com/rs/cors v1.8.3
  • github.com/sassoftware/relic v0.0.0-20210427151427-dfb082b79b74
  • github.com/secure-systems-lab/go-securesystemslib v0.4.0
  • github.com/shibumi/go-pathspec v1.3.0
  • github.com/sigstore/sigstore v1.5.1
  • github.com/spf13/afero v1.9.3
  • github.com/spf13/cast v1.5.0
  • github.com/spf13/cobra v1.6.1
  • github.com/spf13/jwalterweatherman v1.1.0
  • github.com/spf13/pflag v1.0.5
  • github.com/spf13/viper v1.15.0
  • github.com/subosito/gotenv v1.4.2
  • github.com/tent/canonical-json-go v0.0.0-20130607151641-96e4ba3a7613
  • github.com/theupdateframework/go-tuf v0.5.2-0.20220930112810-3890c1e7ace4
  • github.com/tidwall/pretty v1.2.0
  • github.com/tilinna/clock v1.1.0
  • github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399
  • github.com/transparency-dev/merkle v0.0.1
  • github.com/ulikunitz/xz v0.5.10
  • github.com/veraison/go-cose v1.0.0
  • github.com/x448/float16 v0.8.4
  • github.com/zalando/go-keyring v0.1.1
  • go.mongodb.org/mongo-driver v1.10.0
  • go.opencensus.io v0.24.0
  • go.opentelemetry.io/otel v1.11.1
  • go.opentelemetry.io/otel/trace v1.11.1
  • go.step.sm/crypto v0.25.0
  • go.uber.org/atomic v1.10.0
  • go.uber.org/goleak v1.2.1
  • go.uber.org/multierr v1.8.0
  • go.uber.org/zap v1.24.0
  • gocloud.dev v0.24.1-0.20211119014450-028788aaaa4c
  • golang.org/x/crypto v0.6.0
  • golang.org/x/exp v0.0.0-20220823124025-807a23277127
  • golang.org/x/mod v0.8.0
  • golang.org/x/net v0.7.0
  • golang.org/x/oauth2 v0.4.0
  • golang.org/x/sync v0.1.0
  • golang.org/x/sys v0.5.0
  • golang.org/x/term v0.5.0
  • golang.org/x/text v0.7.0
  • golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2
  • google.golang.org/api v0.109.0
  • google.golang.org/appengine v1.6.7
  • google.golang.org/genproto v0.0.0-20230110181048-76db0878b65f
  • google.golang.org/grpc v1.53.0
  • google.golang.org/protobuf v1.28.1
  • gopkg.in/ini.v1 v1.67.0
  • gopkg.in/square/go-jose.v2 v2.6.0
  • gopkg.in/yaml.v2 v2.4.0
  • gopkg.in/yaml.v3 v3.0.1
  • k8s.io/klog/v2 v2.80.1
  • sigs.k8s.io/release-utils v0.7.3
go.sum go
  • 1206 dependencies
hack/tools/go.mod go
  • bitbucket.org/creachadair/shell v0.0.7
  • cloud.google.com/go v0.107.0
  • cloud.google.com/go/compute v1.13.0
  • cloud.google.com/go/compute/metadata v0.2.2
  • cloud.google.com/go/monitoring v1.8.0
  • cloud.google.com/go/spanner v1.42.0
  • cloud.google.com/go/trace v1.4.0
  • contrib.go.opencensus.io/exporter/stackdriver v0.13.12
  • github.com/AdaLogics/go-fuzz-headers v0.0.0-20220708163326-82d177caec6e
  • github.com/Masterminds/goutils v1.1.1
  • github.com/Masterminds/semver/v3 v3.2.0
  • github.com/Masterminds/sprig/v3 v3.2.3
  • github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d
  • github.com/aws/aws-sdk-go v1.37.0
  • github.com/beorn7/perks v1.0.1
  • github.com/census-instrumentation/opencensus-proto v0.3.0
  • github.com/cespare/xxhash/v2 v2.1.2
  • github.com/cncf/udpa/go v0.0.0-20210930031921-04548b0d99d4
  • github.com/cncf/xds/go v0.0.0-20211130200136-a8f946100490
  • github.com/cockroachdb/cockroach-go/v2 v2.2.19
  • github.com/coreos/go-semver v0.3.0
  • github.com/coreos/go-systemd/v22 v22.3.2
  • github.com/cyphar/filepath-securejoin v0.2.3
  • github.com/envoyproxy/go-control-plane v0.10.2-0.20220325020618-49ff273808a1
  • github.com/envoyproxy/protoc-gen-validate v0.6.2
  • github.com/felixge/httpsnoop v1.0.3
  • github.com/fsnotify/fsnotify v1.6.0
  • github.com/go-logr/logr v1.2.3
  • github.com/go-openapi/analysis v0.21.4
  • github.com/go-openapi/errors v0.20.3
  • github.com/go-openapi/inflect v0.19.0
  • github.com/go-openapi/jsonpointer v0.19.5
  • github.com/go-openapi/jsonreference v0.20.0
  • github.com/go-openapi/loads v0.21.2
  • github.com/go-openapi/runtime v0.25.0
  • github.com/go-openapi/spec v0.20.8
  • github.com/go-openapi/strfmt v0.21.3
  • github.com/go-openapi/swag v0.22.3
  • github.com/go-openapi/validate v0.22.0
  • github.com/go-sql-driver/mysql v1.7.0
  • github.com/go-swagger/go-swagger v0.30.4
  • github.com/gogo/protobuf v1.3.2
  • github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
  • github.com/golang/mock v1.6.0
  • github.com/golang/protobuf v1.5.2
  • github.com/google/go-cmp v0.5.9
  • github.com/google/trillian v1.5.1
  • github.com/google/uuid v1.3.0
  • github.com/googleapis/enterprise-certificate-proxy v0.2.0
  • github.com/googleapis/gax-go/v2 v2.7.0
  • github.com/gorilla/handlers v1.5.1
  • github.com/grpc-ecosystem/go-grpc-middleware v1.3.0
  • github.com/hashicorp/hcl v1.0.0
  • github.com/huandu/xstrings v1.3.3
  • github.com/imdario/mergo v0.3.12
  • github.com/jackc/chunkreader/v2 v2.0.1
  • github.com/jackc/pgconn v1.12.1
  • github.com/jackc/pgio v1.0.0
  • github.com/jackc/pgpassfile v1.0.0
  • github.com/jackc/pgproto3/v2 v2.3.0
  • github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b
  • github.com/jackc/pgtype v1.11.0
  • github.com/jackc/pgx/v4 v4.16.1
  • github.com/jessevdk/go-flags v1.5.0
  • github.com/jmespath/go-jmespath v0.4.0
  • github.com/josharian/intern v1.0.0
  • github.com/kr/pretty v0.3.1
  • github.com/kr/text v0.2.0
  • github.com/lib/pq v1.10.7
  • github.com/magiconair/properties v1.8.6
  • github.com/mailru/easyjson v0.7.7
  • github.com/matttproud/golang_protobuf_extensions v1.0.1
  • github.com/mitchellh/copystructure v1.2.0
  • github.com/mitchellh/mapstructure v1.5.0
  • github.com/mitchellh/reflectwalk v1.0.2
  • github.com/oklog/ulid v1.3.1
  • github.com/pelletier/go-toml v1.9.5
  • github.com/pelletier/go-toml/v2 v2.0.5
  • github.com/pkg/errors v0.9.1
  • github.com/prometheus/client_golang v1.14.0
  • github.com/prometheus/client_model v0.3.0
  • github.com/prometheus/common v0.37.0
  • github.com/prometheus/procfs v0.8.0
  • github.com/prometheus/prometheus v2.5.0+incompatible
  • github.com/rogpeppe/go-internal v1.9.0
  • github.com/shopspring/decimal v1.3.1
  • github.com/spf13/afero v1.9.2
  • github.com/spf13/cast v1.5.0
  • github.com/spf13/jwalterweatherman v1.1.0
  • github.com/spf13/pflag v1.0.5
  • github.com/spf13/viper v1.14.0
  • github.com/subosito/gotenv v1.4.1
  • github.com/toqueteos/webbrowser v1.2.0
  • github.com/transparency-dev/merkle v0.0.1
  • github.com/wadey/gocovmerge v0.0.0-20160331181800-b5bfa59ec0ad
  • go.etcd.io/etcd/api/v3 v3.5.6
  • go.etcd.io/etcd/client/pkg/v3 v3.5.6
  • go.etcd.io/etcd/client/v3 v3.5.6
  • go.mongodb.org/mongo-driver v1.11.1
  • go.opencensus.io v0.24.0
  • go.uber.org/atomic v1.9.0
  • go.uber.org/multierr v1.8.0
  • go.uber.org/zap v1.21.0
  • golang.org/x/crypto v0.5.0
  • golang.org/x/mod v0.7.0
  • golang.org/x/net v0.5.0
  • golang.org/x/oauth2 v0.4.0
  • golang.org/x/sync v0.1.0
  • golang.org/x/sys v0.4.0
  • golang.org/x/text v0.6.0
  • golang.org/x/tools v0.5.0
  • golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2
  • google.golang.org/api v0.104.0
  • google.golang.org/appengine v1.6.7
  • google.golang.org/genproto v0.0.0-20221206210731-b1a01be3a5f6
  • google.golang.org/grpc v1.51.0
  • google.golang.org/protobuf v1.28.1
  • gopkg.in/ini.v1 v1.67.0
  • gopkg.in/yaml.v2 v2.4.0
  • gopkg.in/yaml.v3 v3.0.1
  • k8s.io/klog/v2 v2.80.1
hack/tools/go.sum go
  • 1047 dependencies
.github/workflows/cut-release.yml actions
.github/workflows/depsreview.yml actions
.github/workflows/scorecard_action.yml actions
docker-compose.debug.yml docker
docker-compose.test.yml docker
  • gcp-pubsub-emulator latest
docker-compose.backfill-test.yml docker
  • gcr.io/trillian-opensource-ci/db_server v1.4.0
.github/workflows/fuzz.yml actions
  • actions/checkout 3d3c42e5aac5ba805825da76410c181273ba90b1 composite
  • actions/setup-go b7ad1dad31e06c5925ef5d2fc7ad053ef454303e composite