docker / buildkit-syft-scanner
BuildKit Syft scanner
☆30Updated 3 months ago
Alternatives and similar repositories for buildkit-syft-scanner:
Users that are interested in buildkit-syft-scanner are comparing it to the libraries listed below
- Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.☆43Updated last year
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆62Updated last week
- Helm charts for sigstore project☆72Updated last week
- Log monitor for Rekor to verify immutability and monitor entries☆31Updated last week
- A CLI used to work with the Wolfi OSS project☆60Updated this week
- ☆22Updated 3 months ago
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆31Updated 2 weeks ago
- Build and deploy Go applications with Terraform☆27Updated this week
- Overview of philips-labs helm charts☆16Updated last week
- Go library for Sigstore signing and verification☆64Updated this week
- Manage a directory of binaries without a package manager☆29Updated this week
- GitHub Action to set up containerd☆18Updated last month
- A sweet little formatter for YAML☆23Updated this week
- Sigstore's Protocol Buffer specifications☆29Updated this week
- ☆29Updated this week
- GitHub Action to check Docker system status in your workflow☆11Updated last month
- A collection of reusable Github Actions workflows.☆130Updated last week
- Template repository for new images☆25Updated last year
- Demo app duplicated in 5 languages (Go/JavaScript/Python/Ruby/Rust) showing how to go from source code to container image using melange+a…☆34Updated last year
- buildx bake demo @ Docker Community All-Hands #2☆13Updated 2 years ago
- GitHub Action to mirror a DockerHub repo to another registry☆30Updated 2 months ago
- Transparenty Immutable Container Image Tags☆20Updated last year
- Trivy plugin for OCI referrers☆23Updated 11 months ago
- ☆63Updated last week
- Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.☆62Updated this week
- Powering the OpenTofu Registry Search (beta)☆17Updated this week
- Image builder image definition library☆28Updated this week
- To manage Docker Content Trust and Notary certificates☆12Updated last week
- An SBOM query language and associated utilities☆54Updated last year
- Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations☆56Updated last week