Libraries tagged by attestation

A PHP library to aid in verifying artifact attestations

Go to Download

Faithful, typed PHP implementation of the in-toto Attestation Framework (Statement v1): build, sign and verify attestations over k2gl/dsse.

Go to Download

Faithful, zero-dependency PHP implementation of DSSE (Dead Simple Signing Envelope): PAE encoding, envelope (de)serialization, and pluggable signers/verifiers.

Go to Download

Testimonials for Contao

Go to Download

Faithful, typed PHP implementation of the SLSA Provenance v1 and v0.2 predicates, built on k2gl/in-toto-attestation.

Go to Download

Offline, fail-closed PHP verifier for Sigstore bundles: Fulcio certificate chain, DSSE or message signature, Rekor v1/v2 transparency-log proof, RFC 3161 timestamp, certificate transparency and identity policy. Passes the official sigstore-conformance suite.

Go to Download

Use this code to validate attestation and assertions from appdb app attestation API

Go to Download

A description for attestation.

Go to Download

Official SDK for HAP (Human Attestation Protocol) - cryptographic proof of verified human effort

Go to Download

Vortos Release — immutable build manifests, schema fingerprinting, rollback invariant math, semver/changelog, and coordinated multi-repo tagging. Write-once persistence enforced at the storage layer; provenance-ready for cosign/SLSA attestation.

Go to Download

Fork of web-auth/webauthn-lib that supports Android FIDO2/Passkey attestations

Go to Download

Sender-side SDK for DataMaker forms: read a .dmf, verify the signature + FOBO attestation, sealed-box encrypt a submission, and POST it.

Go to Download