sigstore-rekor-types

What it is and what it does

sigstore-rekor-types is a collection of pydantic data models that represent the types and structures used by Rekor, the transparency log at the core of the sigstore ecosystem. It provides type-safe Python bindings for Rekor's API, allowing developers to work with Rekor data in a structured, validated way. The package is intentionally minimal—it contains only the data models themselves, not client logic or higher-level tooling.

The package depends on pydantic for validation and typing-extensions for runtime type support. It is maintained as part of the sigstore project and is typically used either as a direct dependency for applications that need to interact with Rekor's API directly, or indirectly through other sigstore libraries. With no known vulnerabilities and active maintenance, it serves as a stable foundation for type-safe Rekor integration.

Use it for:

• Building applications that query or consume Rekor transparency log entries with type validation.
• Integrating Rekor data structures into supply chain security workflows.
• Validating JSON responses from Rekor API calls using pydantic's built-in schema enforcement.
• Developing custom tooling that needs to work with Rekor's data types without a full client library.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Provides Python data models for Rekor's API types, enabling type-safe interaction with Rekor's data structures through pydantic-based validation.

Yes, if you need to interact with Rekor's API or work with Rekor data structures in Python. The package is lightweight, actively maintained, has no known vulnerabilities, and provides the type safety that pydantic offers. It is most useful as a dependency of other sigstore tools or when building custom Rekor integrations.

Install

sigstore-rekor-types on PyPI

pip install sigstore-rekor-types

uv add sigstore-rekor-types

poetry add sigstore-rekor-types

Installing sigstore-rekor-types

Before you install

Low install friction with only pydantic and typing-extensions as runtime dependencies. Active maintenance with recent releases; last commit on 2026-08-13.

License in practice

Apache License 2.0 (permissive) allows commercial use, modification, and distribution with minimal restrictions; suitable for most projects.

Quickstart

pip install sigstore-rekor-types

from sigstore_rekor_types import SomeModel

model_instance = SomeModel(**data)

Requires Python 3.8 or later.

Verify before relying

• Whether this package is typically used standalone or as a dependency of other sigstore tooling.
• What specific Rekor API versions or endpoints the current models cover.
• Which specific Rekor data structures are represented by the models in this package.

Package facts

Evidence: sigstore_rekor_types-0.0.18-py3-none-any.whl

Tags

More Cryptography packages