Language Client Overview

Sigstore uses cosign to sign and verify packages by default, but you can opt to use a language specific client instead.

Language client summaries are available in the main Sigstore documentation, but complete documentation is hosted in the individual project repositories.

Language Client SummaryProject Repository
Gosigstore-go
Javasigstore-java
Javascriptsigstore-js
Pythonsigstore-python
Ruby (available soon)sigstore-ruby
Rustsigstore-rs