Alternatives and similar repositories for tally:

Users that are interested in tally are comparing it to the libraries listed below

• FairwindsOps / bif
  Fairwinds Base Image Finder CLI
  ☆34Updated 2 weeks ago
• ChaosInTheCRD / Dexter
  Trust Dexter to ensure that all your images are pinned by digest for better security
  ☆29Updated last year
• ckotzbauer / vulnerability-operator
  Scans SBOMs for vulnerabilities with Grype
  ☆79Updated this week
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆44Updated last year
• snyk-labs / helm-snyk
  Check images in your charts for vulnerabilities
  ☆42Updated last year
• imjasonh / rbac-audit
  Generate K8s RBAC policies based on e2e test runs
  ☆28Updated 3 years ago
• rode / rode-legacy
  cloud native software supply chain ☁️🔗
  ☆63Updated 3 years ago
• sigstore / k8s-manifest-sigstore
  kubectl plugin for signing Kubernetes manifest YAML files with sigstore
  ☆79Updated last month
• tstromberg / sigstore-the-local-way
  sigstore installation walkthrough, local
  ☆57Updated 8 months ago
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated last year
• openvex / vexctl
  A tool to create, transform and attest VEX metadata
  ☆126Updated this week
• IBM / sbom-utility
  This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility
  ☆61Updated last year
• appvia / cosign-keyless-admission-webhook
  Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect
  ☆23Updated last week
• anderseknert / pre-commit-opa
  Pre-commit git hooks for Open Policy Agent (OPA) and Rego development
  ☆66Updated 2 years ago
• SBOMit / specification
  ☆60Updated 6 months ago
• kubernetes-sigs / tejolote
  A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
  ☆60Updated this week
• DependencyTrack / client-go
  Go client library for OWASP Dependency-Track
  ☆24Updated last month
• shaneboulden / kacti
  ☆19Updated 4 months ago
• policy-hub / policy-hub-cli
  CLI for searching Rego policies
  ☆104Updated 2 years ago
• sighupio / container-signature-enforcer
  ☆27Updated 2 years ago
• luhring / example-container-image-supply-chain-security
  Example repository that demonstrates a supply chain security workflow using Syft, Grype, Cosign
  ☆11Updated 3 years ago
• sighupio / fury-kubernetes-opa
  Kubernetes Fury Distribution OPA Core Module: Policy enforcement for your Kubernetes Cluster
  ☆38Updated last week
• sysdiglabs / opa-image-scanner
  Kubernetes Admission Controller for Image Scanning using OPA
  ☆50Updated last year
• alcideio / kaudit
  Alcide Kubernetes Audit Log Analyzer - Alcide kAudit
  ☆36Updated 3 years ago
• square / spiffe-aws-assume-role
  This tool allows using a SPIFFE JWT to authenticate to AWS APIs
  ☆34Updated 7 months ago
• stacklok / sigstore-the-hard-way
  sigstore the hard way!
  ☆110Updated 8 months ago
• box / kube-exec-controller
  An admission controller service and kubectl plugin to handle container drift in K8s clusters
  ☆124Updated 3 years ago
• ritazh / psp-gatekeeper-policies
  ☆32Updated 5 years ago
• in-toto / archivista
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…
  ☆79Updated this week
• knative-extensions / security-guard
  Runtime security plug to protect user containers
  ☆65Updated this week