Sigstore-verify Alternatives
Similar projects and alternatives to sigstore-verify
-
composer-attest-action
GitHub Action that attests your Composer package — tarball and the dist zipball Composer installs
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
composer-attest
Composer plugin that verifies GitHub build-provenance attestations for the packages you install
NOTE:
The number of mentions on this list indicates mentions on common posts plus user suggested alternatives.
Hence, a higher number means a better sigstore-verify alternative or higher similarity.
sigstore-verify discussion
sigstore-verify reviews and mentions
Posts with mentions or reviews of sigstore-verify.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2026-07-05.
-
Verify your Composer dependencies' provenance
In warn mode it reports and continues; in enforce it fails the install on a bad attestation. Under the hood it reuses k2gl/sigstore-verify, a pure-PHP Sigstore verifier that passes the official sigstore-conformance suite.
Stats
Basic sigstore-verify repo stats
1
0
8.1
6 days ago
k2gl/sigstore-verify is an open source project licensed under MIT License which is an OSI approved license.
The primary programming language of sigstore-verify is PHP.
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com