---
id: sigstore-rekor-types
version: "0.0.18"
license: Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for… (full text in the JSON record)
license_treatment: permissive
maintenance: active
---

# sigstore-rekor-types — Python models for Rekor's API types

License: permissive · Maintenance: active · Downloads: 853.2K/mo

## What it is and what it does

sigstore-rekor-types is a collection of pydantic data models that represent the types and structures used by Rekor, the transparency log at the core of the sigstore ecosystem. It provides type-safe Python bindings for Rekor's API, allowing developers to work with Rekor data in a structured, validated way. The package is intentionally minimal—it contains only the data models themselves, not client logic or higher-level tooling.

The package depends on pydantic for validation and typing-extensions for runtime type support. It is maintained as part of the sigstore project and is typically used either as a direct dependency for applications that need to interact with Rekor's API directly, or indirectly through other sigstore libraries. With no known vulnerabilities and active maintenance, it serves as a stable foundation for type-safe Rekor integration.

Use it for:

- Building applications that query or consume Rekor transparency log entries with type validation.
- Integrating Rekor data structures into supply chain security workflows.
- Validating JSON responses from Rekor API calls using pydantic's built-in schema enforcement.
- Developing custom tooling that needs to work with Rekor's data types without a full client library.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Provides Python data models for Rekor's API types, enabling type-safe interaction with Rekor's data structures through pydantic-based validation.

Yes, if you need to interact with Rekor's API or work with Rekor data structures in Python. The package is lightweight, actively maintained, has no known vulnerabilities, and provides the type safety that pydantic offers. It is most useful as a dependency of other sigstore tools or when building custom Rekor integrations.

## Install

pip install sigstore-rekor-types
uv add sigstore-rekor-types
poetry add sigstore-rekor-types

## Installing sigstore-rekor-types

Before you install: Low install friction with only pydantic and typing-extensions as runtime dependencies. Active maintenance with recent releases; last commit on 2026-08-13.

License in practice: Apache License 2.0 (permissive) allows commercial use, modification, and distribution with minimal restrictions; suitable for most projects.

Quickstart:

pip install sigstore-rekor-types

from sigstore_rekor_types import SomeModel

model_instance = SomeModel(**data)

Requires Python 3.8 or later.

Verify before relying:

- Whether this package is typically used standalone or as a dependency of other sigstore tooling.
- What specific Rekor API versions or endpoints the current models cover.
- Which specific Rekor data structures are represented by the models in this package.

## Package facts

- License: Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for… (full text in the JSON record) (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 853.2K/month (top 5,000 on PyPI)
- Known vulnerabilities: none known

## Tags

rekor api models python, rekor data types, pydantic rekor schemas, sigstore rekor types, rekor transparency log models, rekor, transparency-log, sigstore

[View on SkillFed](https://skillfed.io/packages/sigstore-rekor-types) · [View on PyPI](https://pypi.org/project/sigstore-rekor-types/)