Chainguard Enforce for GitHub

Git signature verification and enforcement for your GitHub repos!

Features

• Verify Sigstore Gitsign commits - have greater trust in commit by signing commits with ephemeral keys tied to user identities.
• Define policies for what identities can/must sign your code.

Currently, public repos are supported. If you are interested in private repo support, please reach out to us at interest@chainguard.dev.

Support

For any issues or feature requests, please reach out at support@chainguard.dev.

Want to learn more about Chainguard Enforce? Have a feature request? Let us know at https://www.chainguard.dev/contact