k2gl/sigstore-verify

Offline, fail-closed PHP verifier for Sigstore bundles: Fulcio certificate chain, DSSE or message signature, Rekor v1/v2 transparency-log proof, RFC 3161 timestamp, certificate transparency and identity policy. Passes the official sigstore-conformance suite.

时间：2026-05-30 13:19

k2gl/dsse

Faithful, zero-dependency PHP implementation of DSSE (Dead Simple Signing Envelope): PAE encoding, envelope (de)serialization, and pluggable signers/verifiers.

时间：2026-05-30 07:25

netresearch/agent-enterprise-readiness

Netresearch AI skill for enterprise security assessment, SLSA compliance and quality automation

时间：2025-12-16 11:54