google / oss-rebuild

Related projects ⓘ

Alternatives and complementary repositories for oss-rebuild

• omnibor / site
  Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.
  ☆21Updated last week
• mlieberman85 / scq
  Supply Chain Query Tool
  ☆13Updated 2 years ago
• chainguard-dev / bom-shelter
  A place to systematically store software bill of materials (SBOM) documents.
  ☆44Updated last year
• tacosframework / TACOS-spec
  TACOS framework structural details
  ☆20Updated 11 months ago
• in-toto / supply-chain-compromises
  ☆22Updated 2 years ago
• openvex / spec
  OpenVEX Specification
  ☆131Updated 4 months ago
• google / osv-scalibr
  ☆95Updated this week
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆44Updated last year
• bomctl / bomctl
  Format agnostic SBOM tooling
  ☆81Updated this week
• google / ctrdac
  ☆9Updated 7 months ago
• philips-software / SPDXMerge
  SPDX Merge tool
  ☆39Updated 2 months ago
• secure-systems-lab / dsse
  A specification for signing methods and formats used by Secure Systems Lab projects.
  ☆68Updated 2 months ago
• google / containerdbg
  ☆74Updated 3 months ago
• chainguard-dev / self-attestation
  Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.
  ☆21Updated last year
• ossf / ossf-landscape
  ☆26Updated this week
• puerco / bomshell
  An query language and interactive tooling to work with SBOM data.
  ☆14Updated last month
• ossf / tac
  Technical Advisory Council
  ☆109Updated this week
• kusaridev / spector
  Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks
  ☆30Updated 10 months ago
• spdx / spdx-3-model
  The model for the information captured in SPDX version 3 standard.
  ☆71Updated this week
• openvex / go-vex
  Go module to generate and transform VEX documents
  ☆34Updated 3 weeks ago
• ossf / toolbelt
  ☆18Updated 5 months ago
• slsa-framework / slsa-github-generator-go
  ☆56Updated 2 years ago
• anchore / yardstick
  Compare vulnerability scanners results (to make them better!)
  ☆15Updated this week
• kusaridev / skootrs
  A CLI tool for creating secure by design/default source repos.
  ☆24Updated 3 months ago
• mitre / hipcheck
  Automatically assess and score software repositories for supply chain risk.
  ☆79Updated this week
• in-toto / specification
  Specification and other related documents.
  ☆40Updated 6 months ago
• crashappsec / github-analyzer
  A tool to check the security settings of Github Organizations.
  ☆69Updated last year
• theupdateframework / tuf-on-ci
  A TUF repository and signing tool
  ☆22Updated this week
• SBOMit / specification
  ☆61Updated 4 months ago
• CERTCC / VINCE
  VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…
  ☆59Updated 3 weeks ago