actions / attestLinks
Action for generating attestations for workflow artifacts
☆63Updated this week
Alternatives and similar repositories for attest
Users that are interested in attest are comparing it to the libraries listed below
Sorting:
- Find stale repositories in a GitHub organization.☆193Updated this week
- ☆56Updated 2 months ago
- Publish a signed build provenance from your GitHub Actions workflow☆63Updated last year
- Action for generating SBOM attestations for workflow artifacts☆42Updated this week
- An Action for printing OIDC claims in GitHub Actions.☆117Updated 4 months ago
- A GitHub Action used for publishing an Action to ghcr.io as an OCI container.☆114Updated 6 months ago
- Cosign Github Action☆180Updated 2 weeks ago
- About GitHub Actions runner images provided by 3rd parties☆217Updated last month
- Official GitHub Action for OpenSSF Scorecard.☆356Updated this week
- Golang implementation of a checker for determining if an SPDX ID satisfies an SPDX Expression.☆46Updated last week
- BuildKit Syft scanner☆44Updated last week
- Calculates dependencies for a Go build-target and submits the list to the Dependency Submission API☆74Updated 2 months ago
- Workflow for redistribution of Node.JS for actions/runner☆11Updated 3 weeks ago
- Example of using Actions OIDC token to proxy into a private network☆105Updated 10 months ago
- This tool allows GHES administrators to sync Actions to their instances☆135Updated last week
- Codecov's Command Line Interface. Used for uploading to Codecov in your CI, Test Labelling, Local Upload, and more☆77Updated 6 months ago
- A GitHub App that allows you to contribute upstream using private mirrors of public projects☆178Updated last week
- Runner Container Hooks for GitHub Actions☆125Updated this week
- Sigstore's Protocol Buffer specifications☆34Updated this week
- GitHub Action that given an organization or repository, produces information about the contributors over the specified time period.☆138Updated this week
- GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…☆218Updated this week
- Generate SBOMs with gh CLI☆198Updated 8 months ago
- Find license compliance and security issues in your applications with FOSSA and GitHub Actions.☆65Updated this week
- Go library for Sigstore signing and verification☆83Updated last week
- Helm charts for verifying artifact attestations in Kubernetes☆21Updated last week
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆99Updated 3 months ago
- Reusable workflows for developing actions☆76Updated last month
- GitHub Action to expose GitHub runtime to the workflow☆87Updated last week
- Orchestrate GitHub Actions Security☆303Updated 3 weeks ago
- A GitHub Action to suggest removal of non-organization members from CODEOWNERS files☆136Updated this week