Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.
☆45Oct 30, 2023Updated 2 years ago
Alternatives and similar repositories for image-layer-provenance
Users that are interested in image-layer-provenance are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆31Updated this week
- Supply Chain Query Tool☆13May 25, 2022Updated 3 years ago
- Example repository that demonstrates a supply chain security workflow using Syft, Grype, Cosign☆12Sep 15, 2021Updated 4 years ago
- Github Action implementation of SLSA Provenance Generation☆50Apr 7, 2026Updated last week
- Meeting materials☆20Updated this week
- Deploy open-source AI quickly and easily - Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- fatt tries to find any purl in your project by looking at predefined fields in the supported packages. These fields describe using a purl…☆11Updated this week
- Kubernetes in Docker on Travis-CI☆44Jul 5, 2019Updated 6 years ago
- ☆29Aug 9, 2024Updated last year
- ☆14Jan 11, 2023Updated 3 years ago
- Go implementation of witness☆48Updated this week
- Secure Software Supply Chain Demonstration with Nix☆19May 13, 2025Updated 11 months ago
- A trivial wrapper around spf13/cobra to simplify some basic patterns☆21Oct 23, 2023Updated 2 years ago
- Supply Chain Integrity Model☆107Jun 12, 2023Updated 2 years ago
- Search Rekor for entries☆41Mar 23, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Action to automatically open a new PR to the https://github.com/withfig/autocomplete repo☆13Sep 4, 2024Updated last year
- A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.☆146Apr 6, 2026Updated last week
- ☆11Apr 25, 2019Updated 6 years ago
- A specification for signing methods and formats used by Secure Systems Lab projects.☆96Nov 10, 2025Updated 5 months ago
- Comparison of Chainguard Images to others☆21Updated this week
- OCI transport plugin for apt-get (i.e., apt-get over ghcr.io)☆114Updated this week
- nginx image demo☆19Sep 11, 2023Updated 2 years ago
- Demos and resources of the Istio + Gatekeeper talks at IstioCon 2022 and GitOpsCon 2022☆14Sep 4, 2023Updated 2 years ago
- For engineers and security teams driving fast and secure software supply chains☆86Feb 6, 2023Updated 3 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Submit SBOMs to GitHub's dependency submission API☆18Dec 4, 2025Updated 4 months ago
- ☆15Apr 6, 2026Updated last week
- ☆23Oct 26, 2021Updated 4 years ago
- BuildKit Syft scanner☆47Updated this week
- A webhook to use CIVO DNS as a DNS issuer for cert-manager.☆21Mar 8, 2024Updated 2 years ago
- Tool to convert CNAB bundle.json to OCI index☆57Mar 21, 2026Updated 3 weeks ago
- Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations☆60Apr 6, 2026Updated last week
- Utility for bulk image, license, package, and vulnerability discovery in containerize workloads on GCP. Includes CLI and Service with cus…☆13Feb 15, 2024Updated 2 years ago
- Generate a score for your sbom to understand if it will actually be useful.☆240Aug 13, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A Java implementation of in-toto runlib☆11Jul 23, 2024Updated last year
- How small can a Java application container image be☆21Feb 17, 2023Updated 3 years ago
- Simple example for using an in-cluster BuildKit instance for container builds☆19Mar 22, 2019Updated 7 years ago
- ☆58Apr 7, 2026Updated last week
- Mango (man page generator) integration for Kong☆23Updated this week
- ☆11Dec 27, 2023Updated 2 years ago
- GitHub actions for the chainguard-images☆21Updated this week