Alternatives and similar repositories for signy

Users that are interested in signy are comparing it to the libraries listed below

• dlorenc / cosigned
  ☆35Updated 3 years ago
• sigstore / scaffolding
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
  ☆68Updated this week
• kubernetes-sigs / tejolote
  A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
  ☆66Updated last week
• philips-labs / dct-notary-admin
  To manage Docker Content Trust and Notary certificates
  ☆13Updated this week
• oras-project / artifacts-spec
  ☆64Updated last year
• chainguard-dev / tlogistry
  Transparenty Immutable Container Image Tags
  ☆20Updated 2 years ago
• tstromberg / sigstore-the-local-way
  sigstore installation walkthrough, local
  ☆63Updated last year
• deislabs / image-layer-provenance
  Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.
  ☆44Updated 2 years ago
• chainguard-images / actions
  GitHub actions for the chainguard-images
  ☆21Updated this week
• cnabio / cnab-to-oci
  Tool to convert CNAB bundle.json to OCI index
  ☆58Updated this week
• grafeas / voucher
  🎟 Voucher creates attestations for Binary Authorization
  ☆74Updated 2 months ago
• wlynch / smimecosign
  Keyless Git signing with cosign!
  ☆11Updated 3 years ago
• mattermost / builder
  Mattermost builder
  ☆11Updated 3 years ago
• nsmith5 / rekor-sidekick
  🔍 Rekor transparency log monitoring and alerting
  ☆27Updated 2 years ago
• chainguard-dev / policy-catalog
  ☆20Updated 4 months ago
• rode / rode-legacy
  cloud native software supply chain ☁️🔗
  ☆64Updated 4 years ago
• garethr / policykit
  A set of utilities and classes for working with Open Policy Agent based tools, including Gatekeeper and Conftest
  ☆39Updated last year
• MChorfa / awesome-cnab
  A curated list of awesome CNAB (Cloud Native Applications Bundles) | https://cnab.io/
  ☆16Updated 4 years ago
• stacklok / sigstore-the-hard-way
  sigstore the hard way!
  ☆116Updated 2 months ago
• ritazh / psp-gatekeeper-policies
  ☆32Updated 5 years ago
• nishakm / genv
  like python venv but for go
  ☆41Updated 3 years ago
• kusaridev / spector
  Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks
  ☆33Updated 6 months ago
• in-toto / in-toto-golang
  A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
  ☆142Updated 3 weeks ago
• mlieberman85 / supply-chain-examples
  ☆23Updated 4 years ago
• square / spiffe-aws-assume-role
  This tool allows using a SPIFFE JWT to authenticate to AWS APIs
  ☆34Updated 3 months ago
• slsa-framework / slsa-github-generator-go
  ☆57Updated 3 years ago
• sigstore / friends
  Sigstore user stories
  ☆30Updated 2 years ago
• transparencylog / tl
  verify https assets with a public transparency log
  ☆75Updated 4 years ago
• sigstore / sget
  ☆23Updated 2 years ago
• controlplaneio / kubesec-webhook
  Security risk analysis for Kubernetes resources
  ☆75Updated 9 months ago