head to head · open source
ralph vs sigstore
ralph has 2,531 GitHub stars, 593 forks, 124 open issues and last shipped yesterday. sigstore has 541 stars, 161 forks, 15 open issues and last shipped yesterday. ralph leads on adoption by 368% (2,531 vs 541 stars). ralph is written in Python under Apache-2.0; sigstore is written in Go under Apache-2.0. ralph has attracted 23% as many forks as stars, sigstore 30%. sigstore was the more recently maintained of the two, and both are self-hostable with no licence fee.
Two open source projects, one decision. Both are free and self-hostable — the differences are community size, license terms, language stack and release pace.
← all 20902 open source comparisons
Side by side
| ralph | sigstore | |
|---|---|---|
| GitHub stars | ★ 2.5K | ★ 541 |
| License | Apache-2.0 | Apache-2.0 |
| Written in | Python | Go |
| Last push | 2026-11-02 | 2026-11-02 |
| Forks | ⑂ 593 | ⑂ 161 |
| Self-hosting | Yes | Yes |
| Data ownership | Your server | Your server |
pick ralph if
- You weight community size — 2.5K stars and counting
- You want the Apache-2.0 license terms
- Your stack matches Python
- You value the larger contributor base for long-term maintenance
pick sigstore if
- You want the sigstore feature set and don't need the biggest community
- You prefer the Apache-2.0 license terms
- Your stack matches Go
- You evaluated both and sigstore fits your workflow better
About ralph
Ralph Update 2025/02 As Allegro, we continue to publish Ralph's source code and will maintain its development under a "Sources only" model, without guarantees. We believe this approach will be beneficial, allowing everyone to use and build upon the software. Our current goal is to modernize the software and ensure its long term maintainability, and we're investing into it in 2025. However, we are not operating under a contribution based model. While we welcome discussions, we do not guarantee responses to issues or support for pull requests. If you require commercial support, please visit We sincerely appreciate…
read the full ralph overview →
About sigstore
sigstore framework sigstore/sigstore contains common Sigstore code: that is, code shared by infrastructure (e.g., Fulcio and Rekor) and Go language clients (e.g., Cosign and Gitsign). This library currently provides: A signing interface (support for ecdsa, ed25519, rsa, DSSE (in toto)) OpenID Connect fulcio client code The following KMS systems are available: AWS Key Management Service Azure Key Vault HashiCorp Vault Google Cloud Platform Key Management Service OpenBao OVHcloud KMS (as external plugin) For example code, look at the relevant test code for each main code file. Fuzzing The fuzzing tests are within…
read the full sigstore overview →
More in Business Software
Related comparisons
More ERP & Operations projects
Compare either of these against the rest of the ERP & Operations field.
Frequently asked questions
Is ralph or sigstore more popular?
ralph has 2,531 GitHub stars and sigstore has 541. ralph has the larger community by that measure.
Are ralph and sigstore free?
Both are open source. ralph is licensed under Apache-2.0 and sigstore under Apache-2.0. Neither carries a licence fee.
What is the difference between ralph and sigstore?
ralph is written in Python and sigstore in Go. The practical differences are community size, licence terms, language stack and release cadence — all compared in the table above.
Which should I choose, ralph or sigstore?
Choose ralph if you want the larger community (2,531 stars) or its Apache-2.0 licence terms. Choose sigstore if its feature set, stack or Apache-2.0 licence fits better. Both are self-hostable.