Repository for CoSAI Workstream 1, Software Supply Chain Security for AI Systems
☆52Apr 27, 2026Updated last month
Alternatives and similar repositories for ws1-supply-chain
Users that are interested in ws1-supply-chain are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Repository for CoSAI Workstream 4, Secure Design Patterns for Agentic Systems☆108May 20, 2026Updated last week
- Repository for the work of the CoSAI Technical Steering Committee (TSC)☆23May 21, 2026Updated last week
- This repository is for administrative documents for the CoSAI OASIS Open Project☆85May 19, 2026Updated last week
- This repository is dedicated to providing comprehensive mappings of the OWASP Top 10 vulnerabilities for Large Language Models (LLMs) to …☆41Feb 15, 2024Updated 2 years ago
- A command-line interface tool for creating, managing, and verifying Content Provenance and Authenticity (C2PA) manifests for machine lear…☆22May 22, 2026Updated last week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆17Mar 10, 2025Updated last year
- Perform code analysis to detect potentially dangerous vulnerabilities☆15Apr 16, 2024Updated 2 years ago
- CDS Threat Modeling Tool MVP☆15Updated this week
- Python client for RiskIQ API services☆17Sep 7, 2018Updated 7 years ago
- A comprehensive database of Model Context Protocol vulnerabilities, security research, and exploits☆38Feb 16, 2026Updated 3 months ago
- Rust implementation of SafePOSIX☆13May 13, 2025Updated last year
- Supply chain security for ML☆234Updated this week
- Writeups of challenges and CTFs I participated in☆88Aug 25, 2025Updated 9 months ago
- A document repository for the CWE AI Working Group, a forum for CWE™ and CVE® community stakeholders to identify and address gaps in the …☆13Jun 29, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools☆19May 19, 2026Updated last week
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆111May 23, 2026Updated last week
- Enriching the NVD CVSS scores to include Temporal & Threat Metrics☆224Updated this week
- Pickle decompiler plugin for Radare2☆18Aug 6, 2023Updated 2 years ago
- 🔴🟡🟢 The Amazing Multipurpose Policy Engine (and L)☆47May 20, 2026Updated last week
- ATT&CK Sync is a Center for Threat-Informed Defense project that aims to improve the ability for organizations to consume MITRE ATT&CK® v…☆25May 19, 2026Updated last week
- ☆26Mar 17, 2026Updated 2 months ago
- Common framework for designing a detection and response framework for the most common MFT solutions☆16Aug 4, 2023Updated 2 years ago
- in-toto Enhancements☆20Feb 17, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Repo containing documentation and explanation for CSET's harm taxonomy of incidents from AIID.☆20Jun 21, 2024Updated last year
- Point of Concept: To help to automate the collection of evidence for SOC 2 Audits and etc.☆11May 13, 2024Updated 2 years ago
- Spark Structured Streaming data pipeline that processes movie ratings data in real-time.☆14Apr 15, 2026Updated last month
- OWASP Web Security Testing Guide RAG system with ChromaDB, MCP for Claude Code☆20Dec 11, 2025Updated 5 months ago
- A python package to make it easier to interact with WhyLabs APIs☆15Dec 16, 2024Updated last year
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆34Apr 22, 2025Updated last year
- This repo contains the codes for the experiments of the paper "AutoPenBench: Benchmarking Generative Agents for Penetration Testing".☆16Oct 28, 2025Updated 7 months ago
- ☆25Mar 20, 2025Updated last year
- ☆12Jun 7, 2025Updated 11 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- SAFE-MCP is a comprehensive security framework for documenting and mitigating threats in the AI Agent ecosystem.☆343May 22, 2026Updated last week
- OASIS TC Open Repository: A GitHub repository for management of non-normative information about the work of the CSAF Technical Committee,…☆21Apr 27, 2026Updated last month
- A new signature format for Nix - for verifiable provenance data and SBOMs.☆54May 19, 2026Updated last week
- OASIS TC Open Repository: CSAF Parser tool for parsing and checking the syntax of the Common Vulnerability Reporting Framework (CVRF) con…☆25Apr 21, 2026Updated last month
- This repository contains notebooks showing how to perform mixed precision training in tf.keras 2.0☆12Dec 15, 2019Updated 6 years ago
- A basic Python program to check Cybersecurity & Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) Catalog☆24Jun 13, 2023Updated 2 years ago
- Sagemaker Studio Docker UI Extension☆11Apr 17, 2024Updated 2 years ago