actions / attest
Action for generating attestations for workflow artifacts
☆44Updated last week
Alternatives and similar repositories for attest:
Users that are interested in attest are comparing it to the libraries listed below
- ☆44Updated last week
- Publish a signed build provenance from your GitHub Actions workflow☆63Updated 9 months ago
- Action for generating SBOM attestations for workflow artifacts☆25Updated last week
- A GitHub Action used for publishing an Action to ghcr.io as an OCI container.☆63Updated 4 months ago
- An Action for printing OIDC claims in GitHub Actions.☆83Updated last week
- Find license compliance and security issues in your applications with FOSSA and GitHub Actions.☆51Updated last month
- A GitHub Action to run the markdownlint-cli2 tool for linting Markdown/CommonMark files with the markdownlint library☆115Updated this week
- Protocol Buffer specifications☆27Updated this week
- Codecov's Command Line Interface. Used for uploading to Codecov in your CI, Test Labelling, Local Upload, and more☆65Updated this week
- Find stale repositories in a GitHub organization.☆154Updated last week
- About GitHub Actions runner images provided by 3rd parties☆107Updated last week
- Golang implementation of a checker for determining if an SPDX ID satisfies an SPDX Expression.☆37Updated this week
- Automatically open a pull request for repositories that have no CONTRIBUTING.md file☆35Updated last week
- BuildKit Syft scanner☆29Updated last month
- A TypeScript library for creating dependency snapshots.☆47Updated this week
- Runs Dependabot Updates via GitHub Actions.☆95Updated this week
- Search Rekor for entries☆31Updated last week
- Repo for building the renovate/renovate:full image☆42Updated last year
- GitHub Action to check PRs for signed commits☆52Updated 7 months ago
- Reusable workflows for developing actions☆61Updated last month
- ☆17Updated last week
- Runner Container Hooks for GitHub Actions☆84Updated 4 months ago
- GitHub Action that given an organization or repository, produces information about the contributors over the specified time period.☆117Updated last week
- ✅ GitHub Action to create verified commits☆18Updated 7 months ago
- Replacement for git-receive-pack, included with gitrpcd for distribution☆29Updated this week
- Go library for Sigstore signing and verification☆58Updated this week
- Docker Scout GitHub Action☆103Updated last month
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆33Updated last month
- Run multiple open source security static analysis tools without the added complexity with OSSAR (Open Source Static Analysis Runner).☆96Updated 11 months ago
- Calculates dependencies for a Go build-target and submits the list to the Dependency Submission API☆55Updated this week