ietf-wg-scitt / draft-ietf-scitt-architecture
An Architecture for Trustworthy Digital Supply Chain Transparency Services
☆11Updated this week
Alternatives and similar repositories for draft-ietf-scitt-architecture:
Users that are interested in draft-ietf-scitt-architecture are comparing it to the libraries listed below
- Source Code Transparency☆11Updated last year
- TUF repository for Sigstore trust root☆92Updated this week
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆31Updated last year
- A specification including, problem statement, use cases, requirements, and architectural constituents for a Transparency Service in suppo…☆14Updated last year
- A TUF repository and signing tool☆26Updated this week
- Securing open-source package ecosystems by originating, validating, and augmenting build attestations.☆33Updated this week
- Making transparency normal!☆24Updated last year
- A specification for signing methods and formats used by Secure Systems Lab projects.☆70Updated 4 months ago
- Log monitor for Rekor to verify immutability and monitor entries☆30Updated this week
- Attestation verification services based on Veraison components☆27Updated last week
- Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools☆18Updated this week
- The Great Multi-Factor Authentication (MFA) Distribution Project of the Open Source Security Foundation (OpenSSF). We work to distribute …☆54Updated 3 years ago
- Search Rekor for entries☆30Updated this week
- A draft standard for communicating a cryptographic record of build inputs for software artifacts.☆23Updated 3 months ago
- Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆21Updated 2 months ago
- SCITT API Emulator☆10Updated last month
- Technical Advisory Council☆113Updated this week
- OpenVEX Specification☆139Updated 6 months ago
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆32Updated last year
- A CLI tool for creating secure by design/default source repos.☆25Updated 5 months ago