ietf-wg-scitt / draft-ietf-scitt-architecture
An Architecture for Trustworthy Digital Supply Chain Transparency Services
☆11Updated this week
Related projects ⓘ
Alternatives and complementary repositories for draft-ietf-scitt-architecture
- Source Code Transparency☆11Updated last year
- The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute …☆53Updated 2 years ago
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆30Updated 11 months ago
- TUF repository for Sigstore trust root☆90Updated this week
- A specification for signing methods and formats used by Secure Systems Lab projects.☆68Updated 2 months ago
- Securing open-source package ecosystems by originating, validating, and augmenting build attestations.☆32Updated this week
- Attestation verification services based on Veraison components☆26Updated last week
- Split-Trust Encryption Tool for ubiquitous data encryption.☆38Updated 3 weeks ago
- Protocol Buffer specifications☆23Updated this week
- Key Broker Server for SEV(-ES)☆13Updated 3 months ago
- Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools☆18Updated this week
- SCITT API Emulator☆10Updated this week
- Making transparency normal!☆24Updated 11 months ago
- ☆61Updated 4 months ago
- A TUF repository and signing tool☆22Updated last week
- A CLI tool for creating secure by design/default source repos.☆24Updated 3 months ago
- A specification including, problem statement, use cases, requirements, and architectural constituents for a Transparency Service in suppo…☆14Updated last year
- Libraries and binaries for running witnesses for verifiable logs☆22Updated this week
- Entity Attestation Token IETF Draft Standard☆18Updated last month
- Go implementation of witness☆26Updated last week
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆32Updated last year
- Cryptography Bill of Materials☆58Updated 2 months ago
- Log monitor for Rekor to verify immutability and monitor entries☆26Updated this week
- Formal specification of attestation mechanisms in Confidential Computing☆14Updated 2 months ago
- Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆21Updated 2 weeks ago
- ☆17Updated last week
- Technical Advisory Council☆109Updated last week
- Sigstore user stories☆29Updated last year
- ☆24Updated last year
- Attestation and Secret Delivery Components☆67Updated this week