Red Hat Trusted Artifact Signer
5.9#17 in code signing softwareWebLinuxmacOSSelf-hosted
VisitRed Hat Trusted Artifact Signer vs SignPath
What both publish
| Fact | Red Hat Trusted Artifact Signer | SignPath |
|---|---|---|
| Downloads | Red Hat's download page lists CLI binaries for Windows, macOS, and Linux. | Official downloads include Linux and Windows x64 packages, a Windows MSI provider, a Notation plugin and a macOS DMG. |
| Founded | 1993 | 2017 |
| Headquarters | Raleigh, North Carolina, USA | Vienna, Austria |
| Integrations | Red Hat lists Podman, Quay, Ansible, Red Hat Advanced Cluster Security, StoneSoup/HACBS, and Red Hat Trusted Content among products adopting or integrating Sigstore. | The company lists plugins and REST API integrations for GitHub Actions, GitLab, Jenkins, Azure DevOps, and TeamCity. |
| Purpose | RHTAS simplifies cryptographic signing and verification of software artifacts, including container images, binaries, and Git commits. | SignPath provides code signing and software integrity tools that enforce policies across software builds and releases. |
Red Hat Trusted Artifact Signer plans
- Red Hat Trusted Artifact SignerPriced on request
SignPath plans
- Open Source Code SigningFree
- Code GovernancePriced on request
- Software Integrity PlatformPriced on request
Pick Red Hat Trusted Artifact Signer if…
RHTAS suits organizations that need to sign and verify software artifacts using identity-based signing or self-managed keys. Teams deploying on OpenShift should meet the stated version and access prerequisites.
Pick SignPath if…
SignPath suits development teams that need controls around signing and verifying software releases. Its free option is for qualifying open source projects; deployment choices also include self-hosted and hybrid.