Sigstore
Sigstore is an open standard and set of tools for signing, verifying, and proving the provenance of software artifacts. It provides keyless signing with short-lived certificates and a transparency log to secure the software supply chain.
Also known as Sigstore.
Providers that carry Sigstore 1
These providers' own APIs.json profiles carry Sigstore as a tag — the provider's statement that the standard is part of what it does. APIs.io has not verified the implementation on this page; the de facto profiles on this site are where that measurement exists. Ordered by Kin Score.
Read from the API Evangelist standards directory, facts verified 2026-08-17. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.