---
title: "sigstore (@sigstore)"
description: "Software Supply Chain Security"
account: "sigstore"
---

# sigstore

Software Supply Chain Security

## APIs

2 public APIs with a stored document.
Each links to its markdown overview; the same address with
`/llms.txt` in place of `.md` lists its operations.
Changes across these APIs: https://skmtc.dev/sigstore/feed.md

- [Timestamp Authority](https://skmtc.dev/sigstore/apis/timestamp-authority.md): Timestamping: issue RFC3161 timestamp responses and retrieve the signing certificate chain
- [Rekor](https://skmtc.dev/sigstore/apis/rekor.md): Transparency log: create and search signed software release entries with inclusion and consistency proofs