Catalogue all images of a Kubernetes cluster to multiple targets with Syft
☆233Aug 11, 2026Updated this week
Alternatives and similar repositories for sbom-operator
Users that are interested in sbom-operator are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scans SBOMs for vulnerabilities with Grype☆88Updated this week
- Go client library for OWASP Dependency-Track☆36May 10, 2026Updated 3 months ago
- Manages client side git hooks resulting in the ability to create git action pipelines.☆78Jul 5, 2024Updated 2 years ago
- BadRobot - Operator Security Audit Tool☆229Jun 9, 2026Updated 2 months ago
- fatt tries to find any purl in your project by looking at predefined fields in the supported packages. These fields describe using a purl…☆11Updated this week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Generate a score for your sbom to understand if it will actually be useful.☆242Aug 13, 2024Updated 2 years ago
- Automatically removes Cloud managed services and Kubernetes resources based on tags with TTL☆228May 19, 2026Updated 2 months ago
- Kubernetes Operator to sync secrets between different secret backends and Kubernetes☆168Jul 21, 2026Updated 3 weeks ago
- A utility to generate SPDX-compliant Bill of Materials manifests☆461Updated this week
- sigstore the hard way!☆120May 29, 2026Updated 2 months ago
- print x509 certificate info☆241Mar 6, 2026Updated 5 months ago
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Apr 17, 2023Updated 3 years ago
- An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster☆477Updated this week
- Example repository that demonstrates a supply chain security workflow using Syft, Grype, Cosign☆12Sep 15, 2021Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.☆45Oct 30, 2023Updated 2 years ago
- Kubernetes RBAC static analysis & visualisation tool☆744Updated this week
- Integrates Spiffe and Vault to have secretless authentication☆101Aug 5, 2026Updated last week
- Github Action implementation of SLSA Provenance Generation☆50Updated this week
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆545Updated this week
- Vulnerability Scanner Suite based on grype and syft from anchore☆54May 5, 2022Updated 4 years ago
- An SBOM query language and associated utilities☆55Jan 22, 2024Updated 2 years ago
- statexec is a versatile command execution tool written in Go that gathers system metrics during the execution of a specified command.☆47Jan 21, 2024Updated 2 years ago
- All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.☆1,207Jun 16, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Template repository for testing CLI features of applications written in Go☆10Nov 14, 2021Updated 4 years ago
- Kubernetes Application Archive☆152May 4, 2022Updated 4 years ago
- vexctl is a tool to attest VEX impact statements☆45Mar 27, 2023Updated 3 years ago
- SPDX Merge tool☆51May 18, 2026Updated 2 months ago
- Submit SBOMs to GitHub's dependency submission API☆19Dec 4, 2025Updated 8 months ago
- OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure☆1,462May 25, 2026Updated 2 months ago
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,527Updated this week
- Keyless Git signing using Sigstore☆1,116Updated this week
- A command line utility that provides a secure method to get your secrets from your existing password manager.☆61Dec 18, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Support CI generation of SBOMs via golang tooling.☆427Jan 13, 2025Updated last year
- ☆97Dec 15, 2023Updated 2 years ago
- A tool to create, transform and attest VEX metadata☆206Updated this week
- All our dashboards for Grafana☆26Aug 6, 2026Updated last week
- Superseded by https://github.com/aquasecurity/trivy-operator☆1,379Jun 10, 2026Updated 2 months ago
- k8spacket - collects TCP traffic and TLS connection metadata in the Kubernetes cluster using eBPF and visualizes in Grafana☆1,097Aug 5, 2026Updated last week
- Monitoring and Observability Tool for the PolicyReport CRD with an optional UI.☆380Updated this week