Language Client Overview

Sigstore uses cosign to sign and verify packages by default, but you can opt to use a language specific client instead.

Language client summaries are available in the main Sigstore documentation, but complete documentation is hosted in the individual project repositories.

Language Client SummaryProject Repository
Gosigstore-go
Java (available soon)sigstore-java
Javascriptsigstore-js
Pythonsigstore-python
Rubysigstore-ruby
Rustsigstore-rs