Libraries tagged by sigstore

Offline Sigstore bundle verifier for PHP (Fulcio, Rekor, identity policy)

Go to Download

TUF (The Update Framework) client for PHP: fetch and verify signed metadata and targets

Go to Download

SLSA Provenance predicates (v1 and v0.2) for PHP

Go to Download

Parse, verify and sign signed notes — the transparency-log / Go sumdb format used by Sigstore Rekor checkpoints — in PHP

Go to Download

Build, sign and verify in-toto attestation Statements (v1 and v0.1) in PHP

Go to Download

Sign and verify DSSE (Dead Simple Signing Envelope) payloads in PHP, with pluggable keys

Go to Download

Composer plugin that verifies GitHub build-provenance attestations for the packages you install

Go to Download

Build Sigstore bundles (.sigstore.json) in PHP — the counterpart to verification, emitting DSSE and message-signature bundles

Go to Download

A PSR-18 client for the Rekor transparency log (v1 and v2) — submit hashedrekord entries and read a v2 log's tiles from PHP

Go to Download

Sign artifacts and attestations with Sigstore from PHP — sign, log to Rekor, timestamp, and assemble a bundle

Go to Download

NativePHP Mobile plugin for native in-app store review prompts (iOS SKStoreReviewController & Android Play In-App Review)

Go to Download

Go to Download

Go to Download

php API REST client to connect to sslstore API, including logging and retry functionality. SSLstore supplies you with more than 100 certificates to offer to your clients

Go to Download

Go to Download