github / artifact-attestations-helm-chartsLinks
Helm charts for verifying artifact attestations in Kubernetes
☆12Updated 3 weeks ago
Alternatives and similar repositories for artifact-attestations-helm-charts
Users that are interested in artifact-attestations-helm-charts are comparing it to the libraries listed below
Sorting:
- Sigstore's Protocol Buffer specifications☆32Updated this week
- An SBOM query language and associated utilities☆54Updated last year
- Slack alert bot for matching Github Audit Events☆10Updated 6 months ago
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆31Updated last month
- ☆24Updated last year
- Terraform provider for Sigstore Cosign☆10Updated this week
- SLSA level 3 action☆11Updated last year
- Website and API for OpenSSF Scorecard☆25Updated 3 weeks ago
- vexctl is a tool to attest VEX impact statements☆44Updated 2 years ago
- ☆74Updated 2 weeks ago
- Darkfiles finds orphaned files in container images and makes them to bad deeds☆42Updated 2 years ago
- Log monitor for Rekor to verify immutability and monitor entries☆34Updated last week
- Simple tool that allows you to detect imposter commits in GitHub Actions workflows.☆23Updated 5 months ago
- Go module to generate and transform VEX documents☆41Updated 2 weeks ago
- Static analysis for CloudFormation templates to identify common misconfiguration☆57Updated 3 years ago
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆62Updated last week
- A CLI used to work with the Wolfi OSS project☆62Updated this week
- ☆56Updated 3 years ago
- Sigstore user stories☆30Updated last year
- fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…☆32Updated 2 years ago
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆35Updated 2 weeks ago
- ☆42Updated 7 months ago
- Purpose-built security agent for hosted runners☆36Updated 2 weeks ago
- A specification for signing methods and formats used by Secure Systems Lab projects.☆78Updated 8 months ago
- A TUF repository and signing tool☆35Updated this week
- Github Action implementation of SLSA Provenance Generation☆48Updated last week
- ☆23Updated 2 years ago
- Search Rekor for entries☆34Updated 2 months ago
- fatt tries to find any purl in your project by looking at predefined fields in the supported packages. These fields describe using a purl…☆10Updated 2 weeks ago
- Proof-of-concept SLSA provenance generator for GitHub Actions☆99Updated 2 years ago