Alternatives and similar repositories for self-attestation:

Users that are interested in self-attestation are comparing it to the libraries listed below

• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆44Updated last year
• tacosframework / TACOS-spec
  TACOS framework structural details
  ☆20Updated last year
• omnibor / site
  Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.
  ☆21Updated 2 weeks ago
• somethingnew2-0 / SimpleCSPM
  GCP CSPM using Google Sheets
  ☆34Updated 8 months ago
• cloud-native-security-controls / controls-catalog
  ☆16Updated 9 months ago
• GoogleCloudPlatform / assured-workloads-terraform
  ☆14Updated 6 months ago
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated last year
• ComplianceAsCode / oscal
  OSCAL SSP content for technologies shipped by Red Hat
  ☆15Updated last year
• VexStore / fatbom
  fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…
  ☆32Updated 2 years ago
• mlieberman85 / scq
  Supply Chain Query Tool
  ☆13Updated 2 years ago
• carta / krang
  Knowledge Report Alert & Normalization Generator
  ☆27Updated 10 months ago
• rad-security / fingerprints
  A repository to store Rad Fingerprinting data.
  ☆23Updated 6 months ago
• chainguard-dev / github-audit-alerter
  Slack alert bot for matching Github Audit Events
  ☆10Updated 3 months ago
• darkbitio / tools
  Darkbit Cloud Security Tools
  ☆25Updated 4 years ago
• OpenSecuritySummit / project-ASVS-User-Stories
  ☆18Updated 3 years ago
• IBM / sbom-utility
  This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility
  ☆61Updated last year
• docker-archive / oscalkit
  NIST OSCAL SDK and CLI
  ☆37Updated 4 years ago
• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆61Updated 7 months ago
• chainguard-dev / justtrustme
  ☆53Updated this week
• DataDog / workload-security-evaluator
  Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Security Management.
  ☆30Updated 3 months ago
• chainguard-dev / bom-shelter
  A place to systematically store software bill of materials (SBOM) documents.
  ☆44Updated last year
• raesene / teisteanas
  ☆20Updated 9 months ago
• GoComply / oscalkit
  NIST OSCAL SDK and CLI
  ☆18Updated 7 months ago
• Agh42 / oscal4neo4j
  Scripts to import OSCAL example content into the Neo4J graph database
  ☆27Updated 2 years ago
• google / localtoast
  ☆111Updated last month
• chainguard-dev / maxcve
  ☆18Updated 10 months ago
• ramimac / breach-list-database
  A meta-database collecting resources that compile lists of breaches
  ☆18Updated 3 months ago
• ossf / ossf-landscape
  ☆27Updated this week
• chainguard-dev / osqtool
  Automated testing, generation & manipulation of #osquery packs
  ☆72Updated 4 months ago
• controlplaneio / threat-modelling-zero-trust-talk
  ☆11Updated last year