{"adoption": {"forks": 86, "observed_at": "2026-09-03T02:15:17.861152+00:00", "stars": 1123}, "canonical_url": "https://ross.abutalabs.com/products/gitsign", "card": {"archived": false, "artifact_type": "cli-tool", "description": "Keyless Git signing using Sigstore", "domain": ["security", "version-control", "developer-tools"], "enriched": true, "function": ["security", "cryptography", "developer-tools", "cli"], "health_score": 100, "homepage": null, "language": "Go", "license": "NOASSERTION", "license_family": "other", "maturity": "active", "member_repos": ["sigstore/gitsign"], "name": "sigstore/gitsign", "platform": ["windows", "cli", "cross-platform"], "pushed_at": "2026-09-02T21:45:49+00:00", "repo": "sigstore/gitsign", "stars": 1123, "tags": ["git-signing", "sigstore", "keyless-signing", "oidc", "x509", "supply-chain-security", "commit-signing", "linux", "macos"], "topics": ["git", "signing", "sigstore"], "urls": [], "use_cases": ["sign git commits without managing gpg keys", "keyless commit signing with github identity", "verify signed commits in git", "sign git tags with x509 certificates", "improve supply chain security for git repositories", "replace gpg signing with sigstore"], "what_it_is": "Gitsign is a CLI tool that signs Git commits and tags using Sigstore's keyless signing, backed by your GitHub or other OIDC identity instead of long-lived keys. It integrates with Git as an X.509 signing program and verifies signatures via Sigstore's Fulcio and Rekor infrastructure.", "when_to_avoid": ["you need offline signing without internet access", "you must use GPG keys or existing PGP workflows", "your verification tooling does not support x509 signatures"], "when_to_choose": ["you want commit signing without key management", "your organization uses sigstore for supply chain security", "you prefer OIDC identity-based signing over GPG"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/gitsign", "repo": "sigstore/gitsign", "role": "main", "score": 94}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T06:41:50.140782+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "725e95ab34cdc8c1ab969fec871521c5501af15fab1fa43b3cd6665203113219", "fetched_at": "2026-09-03T02:15:17.861152+00:00", "kind": "readme", "missing": false, "url": "https://github.com/sigstore/gitsign"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T06:41:50.140782+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "725e95ab34cdc8c1ab969fec871521c5501af15fab1fa43b3cd6665203113219", "fetched_at": "2026-09-03T02:15:17.861152+00:00", "kind": "readme", "missing": false, "url": "https://github.com/sigstore/gitsign"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T06:41:50.140782+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "725e95ab34cdc8c1ab969fec871521c5501af15fab1fa43b3cd6665203113219", "fetched_at": "2026-09-03T02:15:17.861152+00:00", "kind": "readme", "missing": false, "url": "https://github.com/sigstore/gitsign"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T06:41:50.140782+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "725e95ab34cdc8c1ab969fec871521c5501af15fab1fa43b3cd6665203113219", "fetched_at": "2026-09-03T02:15:17.861152+00:00", "kind": "readme", "missing": false, "url": "https://github.com/sigstore/gitsign"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T06:41:50.140782+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "725e95ab34cdc8c1ab969fec871521c5501af15fab1fa43b3cd6665203113219", "fetched_at": "2026-09-03T02:15:17.861152+00:00", "kind": "readme", "missing": false, "url": "https://github.com/sigstore/gitsign"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T06:41:50.140782+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "725e95ab34cdc8c1ab969fec871521c5501af15fab1fa43b3cd6665203113219", "fetched_at": "2026-09-03T02:15:17.861152+00:00", "kind": "readme", "missing": false, "url": "https://github.com/sigstore/gitsign"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-09-03T02:15:17.861152+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T06:41:50.140782+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "725e95ab34cdc8c1ab969fec871521c5501af15fab1fa43b3cd6665203113219", "fetched_at": "2026-09-03T02:15:17.861152+00:00", "kind": "readme", "missing": false, "url": "https://github.com/sigstore/gitsign"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T06:41:50.140782+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "725e95ab34cdc8c1ab969fec871521c5501af15fab1fa43b3cd6665203113219", "fetched_at": "2026-09-03T02:15:17.861152+00:00", "kind": "readme", "missing": false, "url": "https://github.com/sigstore/gitsign"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T06:41:50.140782+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "725e95ab34cdc8c1ab969fec871521c5501af15fab1fa43b3cd6665203113219", "fetched_at": "2026-09-03T02:15:17.861152+00:00", "kind": "readme", "missing": false, "url": "https://github.com/sigstore/gitsign"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T06:41:50.140782+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "725e95ab34cdc8c1ab969fec871521c5501af15fab1fa43b3cd6665203113219", "fetched_at": "2026-09-03T02:15:17.861152+00:00", "kind": "readme", "missing": false, "url": "https://github.com/sigstore/gitsign"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 100, "longevity": 100, "rhythm": 84}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1574, "days_push": 0, "days_rel": 28, "gap_med": 55.0, "n_releases_24m": 9}, "score": 94, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 3, "stale_scrape": false}}