Rust Client Overview

sigstore is a crate designed to interact with Sigstore architecture.

This crate is under active development, and will not be considered stable until the 1.0 release.

Features #

• Container and binary signing and verification
• Fulcio integration including an OpenID Connect API
• All Rekor client APIs can be leveraged to interact with the transparency log
• Cryptographic key management

Installation #

Run the following command in your project directory:

cargo add sigstore

Or add the following to your Cargo.toml:

sigstore = "0.10.0"

Current release information is available here.

Example #

Numerous examples are provided in the project repository, including a simple signing example and a number of examples interacting with the Rekor transparency log.