Alternatives and similar repositories for go-witness

Users that are interested in go-witness are comparing it to the libraries listed below

• in-toto / archivista

  View on GitHub
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…
  ☆106Updated this week
• testifysec / witness-examples

  View on GitHub
  Witness Examples
  ☆12Feb 27, 2024Updated last year
• in-toto / friends

  View on GitHub
  Friends of in-toto! A place to record integrations and adoptions of the in-toto specification.
  ☆20Feb 9, 2026Updated last week
• in-toto / in-toto-golang

  View on GitHub
  A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
  ☆144Jan 23, 2026Updated 3 weeks ago
• in-toto / witness

  View on GitHub
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…
  ☆514Updated this week
• kusaridev / spector

  View on GitHub
  Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks
  ☆33Apr 22, 2025Updated 9 months ago
• in-toto / scai-demos

  View on GitHub
  Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools
  ☆19Feb 6, 2026Updated last week
• testifysec / witness-run-action

  View on GitHub
  ☆11Nov 10, 2025Updated 3 months ago
• sigstore / root-signing

  View on GitHub
  TUF repository for Sigstore trust root
  ☆118Updated this week
• Lind-Project / lind_project

  View on GitHub
  Lind: Secure Lightweight Adaptive Isolation
  ☆32Jul 3, 2025Updated 7 months ago
• repository-service-tuf / repository-service-tuf

  View on GitHub
  Umbrella Repository Service for TUF
  ☆59Feb 11, 2026Updated last week
• mlieberman85 / supply-chain-examples

  View on GitHub
  ☆23Oct 26, 2021Updated 4 years ago
• carabiner-dev / ampel

  View on GitHub
  🔴🟡🟢 The Amazing Multipurpose Policy Engine (and L)
  ☆39Updated this week
• in-toto / ITE

  View on GitHub
  in-toto Enhancements
  ☆19Feb 17, 2025Updated last year
• in-toto / in-toto-java

  View on GitHub
  A Java implementation of in-toto runlib
  ☆11Jul 23, 2024Updated last year
• kusaridev / skootrs

  View on GitHub
  A CLI tool for creating secure by design/default source repos.
  ☆28Jul 29, 2024Updated last year
• maxgio92 / krawler

  View on GitHub
  A crawler for kernel releases distributed by the major Linux distributions.
  ☆13Oct 18, 2024Updated last year
• Lind-Project / safeposix-rust

  View on GitHub
  Rust implementation of SafePOSIX
  ☆13May 13, 2025Updated 9 months ago
• ossf / security-assessments

  View on GitHub
  ☆16Aug 28, 2025Updated 5 months ago
• mlieberman85 / scq

  View on GitHub
  Supply Chain Query Tool
  ☆13May 25, 2022Updated 3 years ago
• stacklok / sigstore-the-hard-way

  View on GitHub
  sigstore the hard way!
  ☆118Aug 6, 2025Updated 6 months ago
• gittuf / gittuf

  View on GitHub
  A security layer for Git repositories
  ☆572Feb 10, 2026Updated last week
• nsmith5 / rekor-sidekick

  View on GitHub
  🔍 Rekor transparency log monitoring and alerting
  ☆27Oct 2, 2023Updated 2 years ago
• philips-labs / helm-charts

  View on GitHub
  Overview of philips-labs helm charts
  ☆17Jan 27, 2026Updated 3 weeks ago
• rdimitrov / go-tuf-metadata

  View on GitHub
  Go implementation of The Update Framework heavily influenced by python-tuf
  ☆14Mar 7, 2024Updated last year
• ossf / wg-orbit

  View on GitHub
  ORBIT: Open Resources for Baselines, Interoperability, and Tooling
  ☆21Jan 3, 2026Updated last month
• mozilla-releng / winsign

  View on GitHub
  Tools for signing Windows files
  ☆15Updated this week
• SBOMit / specification

  View on GitHub
  ☆75Dec 10, 2025Updated 2 months ago
• openvex / vexctl

  View on GitHub
  A tool to create, transform and attest VEX metadata
  ☆173Updated this week
• bomctl / bomctl

  View on GitHub
  Format agnostic SBOM tooling
  ☆131Nov 20, 2025Updated 2 months ago
• rohankarn35 / htmlcapture

  View on GitHub
  htmlcapture – A Go package to capture high-quality screenshots from URLs, HTML files, or raw HTML strings. Supports dynamic HTML, CSS sel…
  ☆20Feb 8, 2025Updated last year
• GluuFederation / oxEleven

  View on GitHub
  REST PKCS11 gateway to leverage an HSM.
  ☆16Oct 14, 2024Updated last year
• raesene / Cloud-Native-Security-Talks

  View on GitHub
  ☆22Jul 24, 2025Updated 6 months ago
• hemnstill / StandaloneTools

  View on GitHub
  Standalone tools for Windows and Linux
  ☆20Jan 26, 2026Updated 3 weeks ago
• bifrosta / age-concurrent

  View on GitHub
  ☆23Feb 8, 2025Updated last year
• ossf / toolbelt

  View on GitHub
  ☆26Jun 10, 2025Updated 8 months ago
• sigstore / rekor-operator

  View on GitHub
  K8S Operator for Rekor
  ☆20Feb 23, 2023Updated 2 years ago
• propan / expvardash

  View on GitHub
  a monitoring system for Go applications using expvar (/debug/vars)
  ☆24Sep 29, 2019Updated 6 years ago
• in-toto / in-toto

  View on GitHub
  in-toto is a framework to protect supply chain integrity.
  ☆973Feb 11, 2026Updated last week