Sigstore / SLSA / DSSE Inspector
Locally unwrap bounded Sigstore and Cosign bundles, DSSE envelopes, in-toto Statements, and SLSA provenance.
Sigstore / SLSA / DSSE workspace
Unwrap supplied supply-chain metadata locally. Parsing never implies signature, certificate, transparency-log, identity-policy, or provenance verification.
Did DecodeLens help?
Support the continued development of independent, browser-local developer tools.
Local supply-chain metadata inspection
The disposable worker decodes bounded JSON in memory and never persists the supplied payload.
Verification boundaries
- This release performs structural inspection, not cryptographic signature or certificate-chain verification.
- Transparency promises and proofs are displayed but not remotely resolved or cryptographically verified.
- Identity policy matching and trusted provenance remain false unless a future explicit verification workflow establishes them.
Related tools for this workflow
Continue with tools that decode, convert, inspect, or verify the same data.
- Security & identity
X.509 / PEM Certificate Decoder & Inspector
Inspect PEM or DER certificates, identity, validity, algorithms, SANs, extensions, fingerprints, and chain signatures.
Open tool - Data formats
JSON Formatter & Validator
Format, minify, validate, and explore JSON in a collapsible Object View without uploading data.
Open tool - Verification
File Checksum Validator
Verify MD5, SHA-1, SHA-256, SHA-384, or SHA-512 checksums against exact local file bytes.
Open tool - Security & identity
JWE Decoder & JOSE Inspector
Inspect JOSE structures, verify compact JWS with local keys, and authenticate compact JWE with direct, AES-KW, or RSA-OAEP key management without remote fetches.
Open tool