digitalocean-labs / terraform-vault-github-oidc
Terraform module to configure Vault for GitHub OIDC authentication from Action runners.
☆27Updated 3 months ago
Related projects ⓘ
Alternatives and complementary repositories for terraform-vault-github-oidc
- CLI for searching Rego policies☆104Updated 2 years ago
- Trust Dexter to ensure that all your images are pinned by digest for better security☆29Updated last year
- Github Action to automatically update digests for container images.☆49Updated last month
- Github Action implementation of SLSA Provenance Generation☆47Updated last week
- The Environment Terraform Provider exposes Shell environment variables as Terraform Datasources.☆44Updated this week
- A GitHub App that acts like a Security Token Service (STS) for the Github API☆139Updated this week
- Dynamic GitHub Actions from Wolfi packages☆41Updated 6 months ago
- Sets up Open Policy Agent CLI in your GitHub Actions workflow.☆45Updated 7 months ago
- vexctl is a tool to attest VEX impact statements☆44Updated last year
- An SBOM query language and associated utilities☆54Updated 10 months ago
- ☆33Updated last year
- K8s Network Policy Migrator is a tool to migrate Calico or Cilium custom network policies to Kubernetes native network policy. The tool o…☆30Updated last year
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆61Updated last year
- ☆30Updated 3 weeks ago
- Scans SBOMs for vulnerabilities with Grype☆79Updated last week
- This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)☆62Updated 3 years ago
- This tool allows using a SPIFFE JWT to authenticate to AWS APIs☆35Updated 5 months ago
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆56Updated this week
- A CLI tool to manage context profiles for HashiCorp tools☆32Updated 10 months ago
- Pre-commit git hooks for Open Policy Agent (OPA) and Rego development☆66Updated 2 years ago
- sigstore the hard way!☆110Updated 6 months ago
- A private Terraform registry with modular store backends.☆91Updated this week
- Evaluate source control (GitHub) security posture☆249Updated last year
- Kubernetes audit logging, when you don't control the control plane☆65Updated this week
- Plugin for Helm to integrate the sigstore ecosystem☆60Updated this week
- A collection of reusable Github Actions workflows.☆119Updated this week
- Throw a tag at it and it comes back with a checksum.☆87Updated this week
- Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.☆58Updated this week