gitsign

{
  "aliases": [],
  "alternatives": [],
  "build_dependencies": [
    "go"
  ],
  "categories": [],
  "caveats": null,
  "conflicts_with": [],
  "dependencies": [],
  "deprecated": 0,
  "deprecation_reason": null,
  "desc": "Keyless Git signing using Sigstore",
  "disable_reason": null,
  "disabled": 0,
  "enrichment_fetched_at": "2026-06-20T23:38:08+00:00",
  "first_seen": "2026-06-20T23:34:18+00:00",
  "full_name": "gitsign",
  "github_default_branch": "main",
  "github_last_commit_at": "2026-06-15T06:43:13Z",
  "github_readme_excerpt": "# Gitsign\n\n[![CI](https://github.com/sigstore/gitsign/actions/workflows/ci.yaml/badge.svg)](https://github.com/sigstore/gitsign/actions/workflows/ci.yaml)\n[![E2E](https://github.com/sigstore/gitsign/actions/workflows/e2e.yaml/badge.svg)](https://github.com/sigstore/gitsign/actions/workflows/e2e.yaml)\n\n\u003cp align=\"center\"\u003e\n  \u003cimg style=\"max-width: 100%;width: 300px;\" src=\"https://raw.githubusercontent.com/sigstore/community/main/artwork/gitsign/horizontal/color/sigstore_gitsign-horizontal-color.svg\" alt=\"Gitsign logo\"/\u003e\n\u003c/p\u003e\n\nKeyless Git signing with Sigstore!\n\nThis is heavily inspired by \u003chttps://github.com/github/smimesign\u003e, but uses\nkeyless Sigstore to sign Git commits with your own GitHub / OIDC identity.\n\n## Installation\n\nUsing Homebrew:\n\n```sh\nbrew install gitsign\n```\n\nUsing Go:\n\n```sh\ngo install github.com/sigstore/gitsign@latest\n```\n\n## Configuration\n\nSingle Repository:\n\n```sh\ncd /path/to/my/repository\ngit config --local gpg.x509.program gitsign  # Use gitsign for signing\ngit config --local gpg.format x509  # gitsign expects x509 args\n\n# Warning: Setting this will make git commit/tag reliant on internet.\n# Alternatively, don\u0027t use these settings and add the -S flag instead.\ngit config --local commit.gpgsign true  # Sign all commits\ngit config --local tag.gpgsign true  # Sign all tags\n\n```\n\nAll respositories:\n\n```sh\ngit config --global gpg.x509.program gitsign  # Use gitsign for signing\ngit config --global gpg.format x509  # gitsign expects x509 args\n\n\n# Warning: Setting this will make git commit/tag reliant on internet.\n# Alternatively, don\u0027t use these settings and add the -S flag instead.\ngit config --global commit.gpgsign true  # Sign all commits\ngit config --global tag.gpgsign true  # Sign all tags\n```\n\nTo learn more about these options, see\n[`git-config`](https://git-scm.com/docs/git-config#Documentation/git-config.txt).\n\n### File config\n\nGitsign can be configured with a standard\n[git-config](https://git-scm.com/docs/git-config) file. For example, to set th",
  "github_repo": "sigstore/gitsign",
  "github_stars": 1094,
  "github_topics": [
    "git",
    "signing",
    "sigstore"
  ],
  "homepage": "https://github.com/sigstore/gitsign",
  "homepage_og_description": null,
  "homepage_og_image": null,
  "homepage_title": null,
  "installs_30d": 63,
  "installs_365d": 359,
  "installs_90d": 171,
  "keg_only": 0,
  "keg_only_reason": null,
  "last_seen": "2026-06-20T23:34:18+00:00",
  "license": "Apache-2.0",
  "llm_generated_at": null,
  "llm_model": null,
  "name": "gitsign",
  "oldnames": [],
  "one_liner": null,
  "optional_dependencies": [],
  "rank_30d": 4222,
  "rank_365d": 5887,
  "rank_90d": 4456,
  "raw_hash": "d8c38aee8321cc54",
  "recommended_dependencies": [],
  "revision": 0,
  "ruby_source_path": "Formula/g/gitsign.rb",
  "tap": "homebrew/core",
  "test_dependencies": [],
  "uses_from_macos": [],
  "version_head": "HEAD",
  "version_stable": "0.16.1",
  "versioned_formulae": [],
  "why_use_this": null
}