k2gl's packages

• PHP

  k2gl/sigstore-bundle

  Build Sigstore bundles (.sigstore.json) in PHP — the counterpart to verification, emitting DSSE and message-signature bundles

  541 0

• PHP

  k2gl/sigstore-sign

  Sign artifacts and attestations with Sigstore from PHP — sign, log to Rekor, timestamp, and assemble a bundle

  176 0

• PHP

  k2gl/sigstore-verify

  Offline Sigstore bundle verifier for PHP (Fulcio, Rekor, identity policy)

  1 076 0

• PHP

  k2gl/slsa-provenance

  SLSA Provenance predicates (v1 and v0.2) for PHP

  463 0

• PHP

  k2gl/sshsig

  Pure-PHP SSHSIG signing and verification, compatible with ssh-keygen -Y

  17 0

• PHP

  k2gl/tuf

  TUF (The Update Framework) client for PHP: fetch and verify signed metadata and targets

  1 723 0