SIGSTOREBUNDLEAUDIT · PROFESSIONAL BROWSER TOOL
Inventory a Bundle's content and verification material before offline verification.
Inspect Sigstore Bundle JSON mediaType, DSSE/message-signature content, certificate material, transparency-log entries, log indices, kind/version, and base64 encodings locally.
Open the workbench ↓01 · WORKBENCH
Inputs and files stay on this device
Processed locally
/Focus first input⌘ ↵Run primary action⌘ ⇧ SDownload local reportAlt RJump to latest resultsAlt LSwitch languageAlt TSwitch themeAlt CToggle high contrast
Local report studioPreview · Markdown · JSON · SHA-256
SHA-256
—Uses only the currently visible result summary, never input controls or original files; the fingerprint is also calculated locally.
Local analysis checkpointsUp to 5 · saved only when you choose
Stores only the visible result summary, time, and an optional short label; imported files and input controls are never stored. Imports must match this tool and stay under 128KB; comparison also stays on this device.
02 · CAPABILITIES
Built deeply for one narrow workflow
Certificate and transparency-log material
Signature and base64-encoding ledger
It does not verify certificate chains, signatures, Rekor inclusion proofs or promises, timestamps, identities, subject digests, or trust policy.
Read the source ↗NO ACCOUNT · LOCAL PROCESSING · EXPORTABLE