github / go-spdxLinks
Golang implementation of a checker for determining if an SPDX ID satisfies an SPDX Expression.
☆37Updated last week
Alternatives and similar repositories for go-spdx
Users that are interested in go-spdx are comparing it to the libraries listed below
Sorting:
- mkctr: cross platform container builder for go☆94Updated 3 months ago
- [Experimental] jail for Go modules☆95Updated 2 weeks ago
- native go library for installation and management of apk packages☆30Updated last year
- Manage a directory of binaries without a package manager☆40Updated last week
- Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations☆58Updated last week
- Go library for Sigstore signing and verification☆81Updated 2 weeks ago
- Generate spreadsheets based on GitHub contributions☆88Updated 3 weeks ago
- Package filippo.io/intermediates embeds a bundle of known unexpired, unrevoked intermediate certificates chaining to roots in the Mozilla…☆60Updated this week
- Collection of Go packages to work with SPDX files☆152Updated 2 weeks ago
- Action for generating attestations for workflow artifacts☆61Updated last week
- A package used to easily build command pipelines in your Go applications☆53Updated last month
- ☆36Updated last year
- ☆39Updated 2 months ago
- A generated Go SDK from GitHub's OpenAPI specification. Built on Kiota.☆83Updated 7 months ago
- Go implementation of the package url spec☆63Updated 7 months ago
- A CLI used to work with the Wolfi OSS project☆67Updated last week
- TUF repository for Sigstore trust root☆109Updated this week
- ☆57Updated 3 years ago
- Sigstore's Protocol Buffer specifications☆33Updated this week
- Automate copyright headers and license files at scale☆103Updated last month
- A sweet little formatter for YAML☆33Updated last week
- Context aware slog☆31Updated last month
- Sigstore user stories☆30Updated 2 years ago
- Schema and decoder to be used as building blocks for an HCL2-based language server.☆96Updated 3 weeks ago
- Go modules related to OCI (Open Container Initiative) registries☆29Updated 2 months ago
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆66Updated last week
- go library for CBOR Object Signing and Encryption (COSE)☆55Updated 3 weeks ago
- Helm charts for verifying artifact attestations in Kubernetes☆18Updated 3 weeks ago
- A 'go generate' script to generate Go files from .proto interfaces☆23Updated last month
- Repository for the Enterprise Certificate Proxy project.☆27Updated 2 weeks ago