Alternatives and similar repositories for melange:

Users that are interested in melange are comparing it to the libraries listed below

• chainguard-dev / apko
  Build OCI images from APK packages directly without Dockerfile
  ☆1,292Updated this week
• wolfi-dev / os
  Main package repository for production Wolfi images
  ☆902Updated this week
• chainguard-images / images
  Public Chainguard Images
  ☆583Updated this week
• sigstore / gitsign
  Keyless Git signing using Sigstore
  ☆973Updated this week
• notaryproject / notation
  A CLI tool to sign and verify artifacts
  ☆382Updated this week
• sigstore / fulcio
  Sigstore OIDC PKI
  ☆690Updated this week
• sigstore / sigstore
  Common go library shared across sigstore services and clients
  ☆474Updated this week
• edera-dev / krata
  krata is a Xen control plane in Rust.
  ☆283Updated this week
• gittuf / gittuf
  A security layer for Git repositories
  ☆497Updated this week
• in-toto / witness
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…
  ☆428Updated this week
• canonical / chisel
  ☆308Updated last month
• ratify-project / ratify
  Artifact Ratification Framework (CNCF Sandbox)
  ☆253Updated this week
• chainguard-dev / actions
  A collection of reusable Github Actions workflows.
  ☆127Updated 3 weeks ago
• kubernetes-sigs / bom
  A utility to generate SPDX-compliant Bill of Materials manifests
  ☆373Updated last week
• sigstore / rekor
  Software Supply Chain Transparency Log
  ☆942Updated this week
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆249Updated 2 weeks ago
• jetstack / paranoia
  Inspect certificate authorities in container images
  ☆230Updated 10 months ago
• wolfi-dev / wolfictl
  A CLI used to work with the Wolfi OSS project
  ☆61Updated this week
• replicatedhq / ttl.sh
  An anonymous & ephemeral Docker image registry
  ☆578Updated 5 months ago
• tektoncd / chains
  Supply Chain Security in Tekton Pipelines
  ☆253Updated this week
• notaryproject / specifications
  Cross tooling and interoperability specifications
  ☆164Updated last month
• openpubkey / openpubkey
  Reference implementation of OpenPubkey
  ☆673Updated this week
• in-toto / attestation
  in-toto Attestation Framework
  ☆262Updated this week
• opcr-io / policy
  CLI for building OPA policies into OCI images
  ☆227Updated last month
• chainguard-dev / incert
  Add CA certificates into containers
  ☆144Updated 2 weeks ago
• chainguard-dev / ssc-reading-list
  A reading list for software supply-chain security.
  ☆361Updated 2 years ago
• mintoolkit / mint
  minT(oolkit): Mint awesome, secure and production ready containers just the way you need them! Don't change anything in your container im…
  ☆224Updated this week
• StyraInc / regal
  Regal is a linter and language server for Rego, bringing your policy development experience to the next level!
  ☆287Updated this week
• slsa-framework / slsa-github-generator
  Language-agnostic SLSA provenance generation for Github Actions
  ☆450Updated 2 weeks ago
• anchore / sbom-action
  GitHub Action for creating software bill of materials using Syft.
  ☆176Updated last week