github-early-access / generate-build-provenanceLinks
Publish a signed build provenance from your GitHub Actions workflow
☆63Updated last year
Alternatives and similar repositories for generate-build-provenance
Users that are interested in generate-build-provenance are comparing it to the libraries listed below
Sorting:
- Action for generating attestations for workflow artifacts☆61Updated this week
- An Action for printing OIDC claims in GitHub Actions.☆117Updated 3 months ago
- Code-signing for npm packages☆175Updated this week
- Find stale repositories in a GitHub organization.☆191Updated last week
- A GitHub App that allows you to contribute upstream using private mirrors of public projects☆175Updated last week
- GitHub Action to expose GitHub runtime to the workflow☆83Updated this week
- Runs Dependabot Updates via GitHub Actions.☆112Updated last week
- Official GitHub Action for OpenSSF Scorecard.☆343Updated last week
- About GitHub Actions runner images provided by 3rd parties☆206Updated 2 weeks ago
- GitHub Action to enable automated security updates and open a issue/PR in repos in an org that have dependency files but no dependabot.ya…☆217Updated last week
- ☆55Updated last month
- Cosign Github Action☆174Updated this week
- GitHub Action to use Docker Buildx Bake as a high-level build command☆277Updated this week
- Runner Container Hooks for GitHub Actions☆122Updated this week
- Go library for Sigstore signing and verification☆80Updated last week
- Orchestrate GitHub Actions Security☆302Updated last week
- Sigstore documentation☆114Updated last week
- A GitHub Action used for publishing an Action to ghcr.io as an OCI container.☆112Updated 4 months ago
- GitHub token permissions Monitor and Advisor actions☆347Updated last month
- Verify provenance from SLSA compliant builders☆300Updated last month
- A tool for testing and debugging Dependabot update jobs.☆371Updated last week
- Find license compliance and security issues in your applications with FOSSA and GitHub Actions.☆63Updated last week
- GitHub Action that given an organization or repository, produces information about the contributors over the specified time period.☆134Updated last week
- A TypeScript library for creating dependency snapshots.☆56Updated last month
- GitHub Action to combine multiple PRs into a single one☆139Updated 9 months ago
- Language-agnostic SLSA provenance generation for Github Actions☆531Updated 2 months ago
- GitHub Action for creating software bill of materials using Syft.☆213Updated 2 weeks ago
- Calculates dependencies for a Go build-target and submits the list to the Dependency Submission API☆74Updated last month
- A GitHub (gh) CLI extension to manage the GitHub Actions caches being used in a GitHub repository.☆323Updated last year
- BuildKit Syft scanner☆39Updated last week