in-toto is a framework to secure the software supply chain.
☆74Sep 3, 2026Updated last month
Alternatives and similar repositories for community
Users that are interested in community are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Specification and other related documents.☆55Jul 24, 2026Updated 3 months ago
- Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.☆22Oct 9, 2026Updated 2 weeks ago
- A specification for signing methods and formats used by Secure Systems Lab projects.☆113Oct 9, 2026Updated 2 weeks ago
- in-toto is a framework to protect supply chain integrity.☆1,052Aug 27, 2026Updated last month
- Securing Alice's, Bob's and Carl's software supply chain using in-toto☆108Feb 11, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Docs to ingest in GUAC☆11Oct 10, 2026Updated last week
- Sailfish is a HPC Framework that works natively on Kubernetes. This project is an implementation of the Sailfish Framework in RH OpenShif…☆18Oct 16, 2026Updated last week
- ☆87Oct 13, 2026Updated last week
- A Java implementation of in-toto runlib☆11Jul 23, 2024Updated 2 years ago
- Supply Chain Query Tool☆13May 25, 2022Updated 4 years ago
- in-toto Enhancements☆21Feb 17, 2025Updated last year
- Format agnostic SBOM tooling☆156Nov 20, 2025Updated 11 months ago
- Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts☆19Sep 11, 2026Updated last month
- in-toto Attestation Framework☆386Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A rust implementation of in-toto☆35Jul 28, 2026Updated 2 months ago
- Supply-chain Levels for Software Artifacts☆1,948Oct 13, 2026Updated last week
- Free DSSE Attestation Online Decoder Tool☆15Jul 26, 2026Updated 2 months ago
- sigstore maven plugin☆19Jul 22, 2024Updated 2 years ago
- KBOM - Kubernetes Bill of Materials☆331May 25, 2026Updated 4 months ago
- FARO - Document Sensitivity Detector☆10Sep 30, 2022Updated 4 years ago
- Takes a software bill of materials and outputs provenance, and activity data from trustypkg.dev☆10May 19, 2025Updated last year
- Go library for Sigstore signing and verification☆95Oct 16, 2026Updated last week
- Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.☆89Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cryptographic and general-purpose routines for Secure Systems Lab projects at NYU☆54Oct 14, 2026Updated last week
- Example multi-region application with data residency. Suitable for global and regulated businesses.☆12Dec 1, 2023Updated 2 years ago
- Validated Patterns documentation☆20Oct 15, 2026Updated last week
- Python library for reading/writing compliance as code☆13Nov 29, 2023Updated 2 years ago
- ☆34Oct 6, 2026Updated 2 weeks ago
- Language-agnostic SLSA provenance generation for Github Actions☆604Aug 7, 2026Updated 2 months ago
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,561Updated this week
- Exploit Prediction Scoring System (EPSS)☆31Jun 1, 2022Updated 4 years ago
- FARO - Document Sensitivity Detector☆12Feb 8, 2021Updated 5 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- IaC framework for k8s clusters☆18Jun 19, 2025Updated last year
- Software Supply Chain Transparency Log☆1,225Updated this week
- a CentOS-based CoreOS-style bootc image☆10Jun 13, 2025Updated last year
- Bluefin built with Fedora Hummingbird technology☆19Updated this week
- Examples for the Python bindings for TrustyAI's explainability library☆13Oct 7, 2024Updated 2 years ago
- ☆55Updated this week
- Unofficial OpenShift 4 Toolbox☆10Jan 26, 2024Updated 2 years ago