chainguard-dev / melange
build APKs from source code
☆467Updated this week
Alternatives and similar repositories for melange:
Users that are interested in melange are comparing it to the libraries listed below
- Build OCI images from APK packages directly without Dockerfile☆1,325Updated this week
- Main package repository for production Wolfi images☆932Updated this week
- Public Chainguard Images☆588Updated this week
- krata is a Xen control plane in Rust.☆289Updated last week
- A CLI tool to sign and verify artifacts☆398Updated this week
- Keyless Git signing using Sigstore☆988Updated this week
- ☆326Updated 2 weeks ago
- Inspect certificate authorities in container images☆233Updated 3 weeks ago
- KubeFire 🔥, creates and manages Kubernetes Clusters using Firecracker microVMs☆545Updated this week
- A collection of reusable Github Actions workflows.☆128Updated this week
- Sigstore OIDC PKI☆706Updated this week
- A security layer for Git repositories☆503Updated this week
- Record-and-replay Kubernetes simulator based on KWOK☆316Updated last week
- Add CA certificates into containers☆144Updated 2 weeks ago
- Lock, Stock, and Two Smoking MicroVMs. Create and manage the lifecycle of MicroVMs backed by containerd.☆804Updated this week
- Artifact Ratification Framework (CNCF Sandbox)☆259Updated this week
- diff for Docker and OCI container images☆401Updated last week
- Common go library shared across sigstore services and clients☆480Updated last week
- A vendor-neutral OCI-native container image (tgz, squashfs, erofs) builder (purely based on OCI Image Specification)☆249Updated 2 weeks ago
- ☆234Updated last week
- Supply Chain Security in Tekton Pipelines☆254Updated last week
- minT(oolkit): Mint awesome, secure and production ready containers just the way you need them! Don't change anything in your container im…☆243Updated last week
- A utility to generate SPDX-compliant Bill of Materials manifests☆381Updated this week
- Kubernetes tool for scanning clusters for network policies and identifying unprotected workloads.☆433Updated last month
- Store and access your secrets the Kubernetes native way with any external KMS.☆176Updated last year
- in-toto Attestation Framework☆266Updated 2 weeks ago
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆435Updated last week
- CLI for building OPA policies into OCI images☆229Updated last month
- zot - A scale-out production-ready vendor-neutral OCI-native container image/artifact registry (purely based on OCI Distribution Specific…☆1,199Updated last week
- The missing glue to put together large Kubernetes deployments, composed of multiple smaller parts (Helm/Kustomize/...) in a manageable a…☆726Updated this week