Publish a signed build provenance from your GitHub Actions workflow
☆62May 21, 2024Updated last year
Alternatives and similar repositories for generate-build-provenance
Users that are interested in generate-build-provenance are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Submit SBOMs to GitHub's dependency submission API☆18Dec 4, 2025Updated 4 months ago
- Supply Chain Query Tool☆13May 25, 2022Updated 3 years ago
- A rust implementation of in-toto☆36Feb 27, 2026Updated last month
- Monorepo for Identity Box☆20Aug 11, 2024Updated last year
- Action for generating build provenance attestations for workflow artifacts☆924Mar 4, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An SBOM query language and associated utilities☆56Jan 22, 2024Updated 2 years ago
- GitHub actions for the chainguard-images☆21Updated this week
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆33Apr 22, 2025Updated 11 months ago
- A java api and command line tool for scanning, reporting and fixing a git repository's InnerSource Readiness based on a supplied specific…☆20Sep 8, 2023Updated 2 years ago
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆108Apr 4, 2026Updated last week
- Enrich SBOMs with data from third party services☆224Updated this week
- A GitHub Action for sigstore-python☆65Updated this week
- Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools☆19Apr 3, 2026Updated last week
- Libs and tools used to build all *-version tools for GitHub Actions☆31Mar 2, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- AWS ECR scanning slack notifications☆13Jul 19, 2023Updated 2 years ago
- playing music using the MRI gradient system☆15Oct 4, 2020Updated 5 years ago
- Official GitHub Action for OpenSSF Scorecard.☆370Updated this week
- Go implementation for CNAB content trust verification using TUF, Notary, and in-toto☆31Jul 5, 2023Updated 2 years ago
- AMD Generic Encapsulated Software Architecture Platform Security Processor Configuration Block manipulation library☆16Dec 18, 2025Updated 3 months ago
- A universal SBOM representation in protocol buffers☆322Apr 6, 2026Updated last week
- The Basil pipeline for concurrent information flow analysis in AArch64 binaries.☆18Updated this week
- A framework for linking the DOM and DOM based events with scripting languages compiled to WASM. Part of the PyScript project.☆12Oct 1, 2024Updated last year
- Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆21Jan 27, 2025Updated last year
- Deploy open-source AI quickly and easily - Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A tool for generating OIDC identities☆14Apr 2, 2026Updated last week
- Platform for making incremental changes to code in VCSes☆13Updated this week
- Rez CLI/GUI tool for installing packages from developer package repositories.☆12Nov 25, 2021Updated 4 years ago
- GitHub action to produce a SBOM report from a given Black Duck project☆12Feb 5, 2026Updated 2 months ago
- An example action, demonstrating how CLI authors may develop actions that allow setup their of CLIs on GitHub's hosted runners, using Jav…☆16Feb 26, 2025Updated last year
- Verify provenance from SLSA compliant builders☆319Mar 9, 2026Updated last month
- Recreated gerbers for the Supermicro X11SSH-F motherboard.☆16Aug 2, 2023Updated 2 years ago
- A CLI tool for creating secure by design/default source repos.☆28Jul 29, 2024Updated last year
- Sigstore OIDC PKI☆824Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- OtterDog is a tool to manage GitHub organizations at scale using a configuration as code approach. It is actively used by the Eclipse Fou…☆47Updated this week
- W3C Decentralized Characteristics Rubric v1.0☆15Mar 11, 2026Updated last month
- Bazel toolchain that is backed by cosmopolitan☆16Feb 5, 2024Updated 2 years ago
- Cosign Github Action☆195Mar 30, 2026Updated 2 weeks ago
- GitHub Action to set up (download and install) Docker CE☆75Updated this week
- CPR resuscitates packages in new locations☆15Aug 26, 2025Updated 7 months ago
- A specification for signing methods and formats used by Secure Systems Lab projects.☆96Nov 10, 2025Updated 5 months ago