ietf-wg-scitt / draft-ietf-scitt-architecture
An Architecture for Trustworthy Digital Supply Chain Transparency Services
☆12Updated this week
Alternatives and similar repositories for draft-ietf-scitt-architecture:
Users that are interested in draft-ietf-scitt-architecture are comparing it to the libraries listed below
- TUF repository for Sigstore trust root☆95Updated this week
- A TUF repository and signing tool☆30Updated this week
- A specification for signing methods and formats used by Secure Systems Lab projects.☆72Updated 6 months ago
- Log monitor for Rekor to verify immutability and monitor entries☆31Updated this week
- Source Code Transparency☆11Updated last year
- A specification including, problem statement, use cases, requirements, and architectural constituents for a Transparency Service in suppo…☆14Updated 2 years ago
- Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools☆18Updated last week
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆31Updated last year
- Go implementation of The Update Framework heavily influenced by python-tuf☆13Updated last year
- SCITT API Emulator☆10Updated 4 months ago
- Split-Trust Encryption Tool for ubiquitous data encryption.☆38Updated last week
- The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute …☆54Updated 3 years ago
- A rust implementation of in-toto☆31Updated 2 weeks ago
- Making transparency normal!☆24Updated last year
- Securing open-source package ecosystems by originating, validating, and augmenting build attestations.☆33Updated this week
- Protocol Buffer specifications☆27Updated this week
- Technical Advisory Council☆118Updated last week
- Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆21Updated last month
- Formal specification of attestation mechanisms in Confidential Computing☆18Updated 6 months ago
- ☆56Updated 2 years ago
- ☆22Updated last week
- Cryptography Bill of Materials☆65Updated last month
- Attestation verification services based on Veraison components☆27Updated this week
- ☆31Updated this week
- Attestation and Secret Delivery Components☆88Updated this week
- Supply Chain Query Tool☆13Updated 2 years ago
- vexctl is a tool to attest VEX impact statements☆44Updated last year
- ☆61Updated 8 months ago
- Trusted Certificate Service (TCS) is a K8s service to protect signing keys using Intel's SGX technology. K8s CSR and cert-manager CR APIs…☆30Updated last week
- go-sev-guest offers a library to wrap the /dev/sev-guest device in Linux, as well as a library for attestation verification of fundamenta…☆57Updated 3 weeks ago