Projects Tagged image-signing for Container Image Signing, Artifact Authentication, and Supply Chain Provenance
Discover projects tagged with image-signing that implement container image signing, artifact authentication, and supply chain provenance using tools like cosign/sigstore, Notary v2, TUF, in-toto, and SLSA attestations. This curated list of projects shows how teams integrate image-signing into CI/CD pipelines, GitOps workflows, and key management (KMS/HSM or keyless signing), with filters to compare ecosystem, language, deployment platform, and security guarantees. Get actionable guidance on adopting verification policies, provenance generation, SBOM integration, and runtime enforcement, plus criteria to evaluate maturity, compatibility, and threat mitigations. Explore the list below to find, compare, and integrate projects that match your image-signing requirements or contribute to implementations to strengthen artifact authentication.
