Sigsum is a system for public and transparent logging of signed checksums, see sigsum.org for an overview of the system.
This repository contains a Go library and client tools for interacting with the system servers.
The doc directory includes documentation of these tools, and the file formats for the policy files and the proofs of logging used by the tools. See https://www.sigsum.org/docs/ for protocol specifications, and documentation of other parts of the Sigsum system.
See the RELEASES file for information about how sigsum-go is released, and the NEWS file for a summary of changes between releases.
You are encouraged to file issues and open merge requests. Sign up on our GitLab instance or login using a supported identity provider like GitHub.
Besides go unit tests (go test ./...
), the tests
directory contains integration tests for all command line tools, in
the form of shell scripts. They are all run by the top-level make check
Makefile target.
- IRC room
#sigsum
@ OFTC.net - Matrix room
#sigsum
which is bridged with IRC - The sigsum-general mailing list