vortos/vortos-release
Vortos Release — immutable build manifests, schema fingerprinting, rollback invariant math, semver/changelog, and coordinated multi-repo tagging. Write-once persistence enforced at the storage layer; provenance-ready for cosign/SLSA attestation.
时间：2026-06-25 07:45
k2gl/sigstore-verify
Offline, fail-closed PHP verifier for Sigstore bundles: Fulcio certificate chain, DSSE or message signature, Rekor v1/v2 transparency-log proof, RFC 3161 timestamp, certificate transparency and identity policy. Passes the official sigstore-conformance suite.
时间：2026-05-30 13:19
k2gl/slsa-provenance
Faithful, typed PHP implementation of the SLSA Provenance v1 and v0.2 predicates, built on k2gl/in-toto-attestation.
时间：2026-05-30 07:53
k2gl/in-toto-attestation
Faithful, typed PHP implementation of the in-toto Attestation Framework (Statement v1): build, sign and verify attestations over k2gl/dsse.
时间：2026-05-30 07:37
k2gl/dsse
Faithful, zero-dependency PHP implementation of DSSE (Dead Simple Signing Envelope): PAE encoding, envelope (de)serialization, and pluggable signers/verifiers.
时间：2026-05-30 07:25
bluescroll/human-attestation
Official SDK for HAP (Human Attestation Protocol) - cryptographic proof of verified human effort
时间：2026-01-22 07:00
thephpf/attestation
A PHP library to aid in verifying artifact attestations
时间：2026-01-04 18:44
appdb/attestvalidator
Use this code to validate attestation and assertions from appdb app attestation API
时间：2024-04-19 08:16
plenta/contao-testimonials-bundle
Testimonials for Contao
时间：2021-12-11 16:52