k2gl/composer-attest dependents (5) Order by: name | downloads Show: all | require | require-dev

  • PHP

    k2gl/rekor-client

    A PSR-18 client for the Rekor v2 transparency log — submit entries and read checkpoints in PHP.

    Latest version requires k2gl/composer-attest ^1.1

  • PHP

    k2gl/signed-note

    Parse, verify and sign signed notes — the transparency-log / Go sumdb format used by Sigstore Rekor checkpoints — in PHP.

    Latest version requires k2gl/composer-attest ^1.1

  • PHP

    k2gl/sigstore-bundle

    Build Sigstore bundles (.sigstore.json) in PHP — the counterpart to verification, emitting DSSE and message-signature bundles.

    Latest version requires k2gl/composer-attest ^1.1

  • PHP

    k2gl/sigstore-sign

    Sign artifacts and attestations with Sigstore from PHP — sign, log to Rekor, timestamp, and assemble a bundle.

    Latest version requires k2gl/composer-attest ^1.0

  • PHP

    k2gl/slsa-provenance

    SLSA Provenance predicates (v1 and v0.2) for PHP.

    Latest version requires k2gl/composer-attest ^1.1