Red Hat Trusted Artifact Signer vs Sigstore
Red Hat Trusted Artifact Signer
5.7 #32 in Message Broker Software
About Red Hat Trusted Artifact Signer| Red Hat Trusted Artifact Signer | Sigstore | |
|---|---|---|
| Free plan | Yes | |
| Paid from | Free | |
| Platforms | Linux, macOS, self-hosted, Web, Windows | api, Linux, macOS, self-hosted, Windows |
| Supported targets | container images, binaries, documents, source-code commits, software bills of materials, build artifacts, AI/ML models | |
| Certificate provided | Yes | |
| Trusted timestamping | Yes | |
| CI/CD signing | Yes | |
| Free plan | No | Yes |
| Deployment model | hybrid | |
| Image scanning | Yes | |
| Posture management | Yes | |
| Runtime protection | Yes | |
| Admission control | Yes | |
| Identity security | Yes | |
| Managed Kubernetes | broad | |
| Dead-letter queues | Yes | |
| Supported protocols | Core Protocol, AMQP 1.0, MQTT, OpenWire, STOMP, JMS 2.0 | |
| Source & repo security | Yes | |
| SBOM management | Yes | |
| Build provenance | Yes | |
| Artifact signing | Yes | |
| Provenance attestations | Yes | |
| Release policy gates | Yes |
Listed together in Best Code Signing Software