composer-attest-action

GitHub Action that attests your Composer package — tarball and the dist zipball Composer installs (by k2gl)

Composer-attest-action Alternatives

Similar projects and alternatives to composer-attest-action

  1. composer-attest

    Composer plugin that verifies GitHub build-provenance attestations for the packages you install

  2. AppSignal

    Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.

    AppSignal logo
  3. sigstore-verify

    Offline Sigstore bundle verifier for PHP.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better composer-attest-action alternative or higher similarity.

composer-attest-action discussion

Log in or Post with

composer-attest-action reviews and mentions

Posts with mentions or reviews of composer-attest-action. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2026-07-05.
  • Verify your Composer dependencies' provenance
    3 projects | dev.to | 5 Jul 2026
    k2gl/composer-attest-action is a GitHub Action that does exactly this — it attests both the tarball and the dist zipball. Drop it into a workflow that runs on version tags:

Stats

Basic composer-attest-action repo stats
1
0
2.1
about 1 month ago

k2gl/composer-attest-action is an open source project licensed under MIT License which is an OSI approved license.


Sponsored
Monitoring that respects your time & budget
APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
www.appsignal.com