diff --git a/README.md b/README.md
index ebd36ab59..02412a90c 100644
--- a/README.md
+++ b/README.md
@@ -606,12 +606,12 @@ A daily compile test is run at Github with Python 3.9 to catch general faults. E
 
 ## Licenses
 This repository itself is released under GPL-3 (like most Gentoo repositories), all work on the depending components under the licenses they came from. Perhaps you came here because I filed an issue at your component about a bad or missing license. It is easy to [assign a license](https://docs.github.com/en/communities/setting-up-your-project-for-healthy-contributions/adding-a-license-to-a-repository). During cleanups and license investigations I have been asked often which license to choose. I am not a lawyer, but I can offer the following table, counted over this repository, perhaps this helps your decision. If a package has more than one license listed, all of them are counted.
-There are 1843 Ebuilds in total, 1832 of them have in total 1854 (42 different) licenses assigned.
+There are 1844 Ebuilds in total, 1833 of them have in total 1855 (42 different) licenses assigned.
 
 |License| Ebuilds using it|
 |-------|-----|
 |MIT|1060|
-|Apache-2.0|406|
+|Apache-2.0|407|
 |BSD|108|
 |GPL-3|107|
 |LGPL-3|25|
diff --git a/dev-python/sigstore/Manifest b/dev-python/sigstore/Manifest
new file mode 100644
index 000000000..3fc46a1ec
--- /dev/null
+++ b/dev-python/sigstore/Manifest
@@ -0,0 +1,3 @@
+DIST sigstore-1.0.0.tar.gz 59359 BLAKE2B cfe9b8c6bad54e5158d3efafbd434b13b541f3f9dcdb2a73bc0be2a6748be2f1857c81f1d55efbaf972ca08ba7c3fd77d03cbf93b271bc08db756b2e84284dab SHA512 cb498742698828bd6b6ec5feeab343b0b364a1d9a6d863988e92b436cb88f82c33dd8fa10bc1cf36ae4a37b14bd9df6ee145e4439360b29e17a6b701346dc004
+EBUILD sigstore-1.0.0.ebuild 904 BLAKE2B f858214d8a875143dadb1e9291ceb63d343f9512a4d5c25ef0645ebfc890b2f3c43cb4687d1e62cdaecc262d37f70c29512dea0e9152da83a68059f61f0ecc5a SHA512 96deea72c0a429107483f2904109244130c6963a6b7e3908c47b2903e98268ee7f7d2fc5ef035e7b128dfb08ba445a7e4ac80683e0b6ca939bc98314d5ecbf05
+MISC metadata.xml 532 BLAKE2B b10861b46e69eb94c728b3d7dc12379d367f9588657e920d9e00ac306ed7b58df681fd00474b6558eda97ce1d76a107d6fabe3cdfc8ed51c77783b80a1aefbb4 SHA512 ed690da283cdbc7aa98c1f93aa3df7eefb67e315cbe14d68af00dc638cf3c06db86a603edd69381ca11f1fc2812a1d7468b4c08cb2a18ad86a8a23d347fef2ba
diff --git a/dev-python/sigstore/metadata.xml b/dev-python/sigstore/metadata.xml
new file mode 100644
index 000000000..9daf3f1d6
--- /dev/null
+++ b/dev-python/sigstore/metadata.xml
@@ -0,0 +1,16 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+  <maintainer type="project">
+    <email>b@edevau.net</email>
+    <name>Andreas Billmeier</name>
+  </maintainer>
+  <upstream>
+    <remote-id type="pypi">sigstore</remote-id>
+    <remote-id type="github">sigstore/sigstore-python</remote-id>
+    <maintainer status="unknown">
+      <email>sigstore-dev@googlegroups.com</email>
+      <name>Sigstore Authors</name>
+    </maintainer>
+  </upstream>
+</pkgmetadata>
diff --git a/dev-python/sigstore/sigstore-1.0.0.ebuild b/dev-python/sigstore/sigstore-1.0.0.ebuild
new file mode 100644
index 000000000..f2c7110ac
--- /dev/null
+++ b/dev-python/sigstore/sigstore-1.0.0.ebuild
@@ -0,0 +1,30 @@
+# Copyright 1999-2024 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+PYTHON_COMPAT=( python3_{11..13} )
+DISTUTILS_USE_PEP517=flit
+inherit distutils-r1 pypi
+
+DESCRIPTION="A tool for generating and verifying Sigstore signatures."
+HOMEPAGE="https://www.sigstore.dev https://github.com/sigstore/sigstore-python https://pypi.org/project/sigstore/"
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="amd64 arm arm64 x86"
+IUSE="test"
+RESTRICT="!test? ( test )"
+
+DOCS="README.md"
+
+RDEPEND="~dev-python/appdirs-1.4.4[${PYTHON_USEDEP}]
+	>=dev-python/cryptography-39.0.0[${PYTHON_USEDEP}]
+	dev-python/pydantic[${PYTHON_USEDEP}]
+	>=dev-python/pyjwt-2.1.0[${PYTHON_USEDEP}]
+	>=dev-python/pyopenssl-22.0.0[${PYTHON_USEDEP}]
+	dev-python/requests[${PYTHON_USEDEP}]
+	dev-python/securesystemslib[${PYTHON_USEDEP}]
+	>=dev-python/tuf-2.0.0[${PYTHON_USEDEP}]"
+
+distutils_enable_tests pytest