ComSignTrust Secure Code Signing Platform (ASCS)
5.4#24 in code signing softwareWebAPI
Visit
| Fact | ComSignTrust Secure Code Signing Platform (ASCS) | Sigstore |
|---|---|---|
| Founded | 2009 | 2021 |
| Purpose | ASCS signs code files to authenticate their origin and integrity and the identity of the developing organization. | Sigstore is an open source project for improving software supply chain security. |
| Support | ComSignTrust offers remote administration, configuration and installation guidance, onsite installation and organization-specific feature development. | Community support is provided through Slack and GitHub issues, with repository CODEOWNERS identifying project maintainers. |
ASCS suits organizations that need controlled code signing through web or API access. The listed customer sectors include government, education, finance, insurance, energy, technology, communications, and other service organizations.
Sigstore suits developers and software providers seeking signing and verification workflows for software artifacts. It may also be relevant to package managers integrating signing into their tooling or registries.