Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.
☆45Oct 30, 2023Updated 2 years ago
Alternatives and similar repositories for image-layer-provenance
Users that are interested in image-layer-provenance are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆32Updated this week
- Supply Chain Query Tool☆13May 25, 2022Updated 4 years ago
- Example repository that demonstrates a supply chain security workflow using Syft, Grype, Cosign☆12Sep 15, 2021Updated 4 years ago
- Multi-cluster Pod Disruption Budget Tool☆30Dec 16, 2025Updated 7 months ago
- Go implementation of witness☆52Updated this week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Github Action implementation of SLSA Provenance Generation☆50Updated this week
- fatt tries to find any purl in your project by looking at predefined fields in the supported packages. These fields describe using a purl…☆11Updated this week
- Kubernetes in Docker on Travis-CI☆44Jul 5, 2019Updated 7 years ago
- ☆29Aug 9, 2024Updated 2 years ago
- ☆14Jan 11, 2023Updated 3 years ago
- Supply Chain Integrity Model☆108Jun 12, 2023Updated 3 years ago
- A trivial wrapper around spf13/cobra to simplify some basic patterns☆21Oct 23, 2023Updated 2 years ago
- A Kubernetes admission controller driven by open-feature☆14Apr 3, 2023Updated 3 years ago
- ☆58Jun 1, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Search Rekor for entries☆47Mar 23, 2026Updated 4 months ago
- Action to automatically open a new PR to the https://github.com/withfig/autocomplete repo☆13Sep 4, 2024Updated last year
- A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.☆151Jul 10, 2026Updated last month
- ☆11Apr 25, 2019Updated 7 years ago
- OCI transport plugin for apt-get (i.e., apt-get over ghcr.io)☆119Jul 20, 2026Updated 3 weeks ago
- Meeting materials☆25Jul 17, 2026Updated 3 weeks ago
- A specification for signing methods and formats used by Secure Systems Lab projects.☆111Jul 23, 2026Updated 3 weeks ago
- ☆15Oct 3, 2022Updated 3 years ago
- Sigstore A2A Agent Signing☆23Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Comparison of Chainguard Images to others☆21Updated this week
- A docker CLI plugin for verifying signed attestations on images☆13Oct 27, 2023Updated 2 years ago
- For engineers and security teams driving fast and secure software supply chains☆88Feb 6, 2023Updated 3 years ago
- nginx image demo☆19Sep 11, 2023Updated 2 years ago
- Demos and resources of the Istio + Gatekeeper talks at IstioCon 2022 and GitOpsCon 2022☆15Sep 4, 2023Updated 2 years ago
- ☆15Jul 24, 2026Updated 2 weeks ago
- BuildKit Syft scanner☆49Updated this week
- Submit SBOMs to GitHub's dependency submission API☆19Dec 4, 2025Updated 8 months ago
- A webhook to use CIVO DNS as a DNS issuer for cert-manager.☆21Mar 8, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Proof-of-concept SLSA provenance generator for GitHub Actions☆100Nov 1, 2022Updated 3 years ago
- Design documents and interoperability tests for Interoperable RA-TLS projects☆15Jul 17, 2026Updated 3 weeks ago
- Tool to convert CNAB bundle.json to OCI index☆58Aug 2, 2026Updated last week
- Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations☆61Aug 1, 2026Updated last week
- Secure Software Supply Chain Demonstration with Nix☆19May 13, 2025Updated last year
- ☆23Oct 26, 2021Updated 4 years ago
- Generate a score for your sbom to understand if it will actually be useful.☆242Aug 13, 2024Updated 2 years ago