Alternatives and similar repositories for bom

Users that are interested in bom are comparing it to the libraries listed below

• buildsec / frsca
  ☆255Updated 2 weeks ago
• notaryproject / notation
  A CLI tool to sign and verify artifacts
  ☆463Updated last month
• sigstore / policy-controller
  Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supp…
  ☆154Updated this week
• sse-secure-systems / connaisseur
  An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster
  ☆466Updated this week
• tektoncd / chains
  Supply Chain Security in Tekton Pipelines
  ☆268Updated last week
• notaryproject / ratify
  Artifact Ratification Framework (CNCF Sandbox)
  ☆283Updated last week
• openvex / vexctl
  A tool to create, transform and attest VEX metadata
  ☆172Updated last week
• in-toto / witness
  Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…
  ☆514Updated last week
• kubernetes-sigs / security-profiles-operator
  The Kubernetes Security Profiles Operator
  ☆829Updated last week
• ckotzbauer / sbom-operator
  Catalogue all images of a Kubernetes cluster to multiple targets with Syft
  ☆220Updated this week
• in-toto / archivista
  Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…
  ☆106Updated last week
• sigstore / helm-charts
  Helm charts for sigstore project
  ☆87Updated last week
• notaryproject / specifications
  Cross tooling and interoperability specifications
  ☆175Updated 8 months ago
• in-toto / attestation
  in-toto Attestation Framework
  ☆323Updated this week
• rad-security / kbom
  KBOM - Kubernetes Bill of Materials
  ☆323Updated 6 months ago
• stacklok / sigstore-the-hard-way
  sigstore the hard way!
  ☆118Updated 6 months ago
• sigstore / k8s-manifest-sigstore
  kubectl plugin for signing Kubernetes manifest YAML files with sigstore
  ☆85Updated last week
• anchore / sbom-action
  GitHub Action for creating software bill of materials using Syft.
  ☆219Updated this week
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆306Updated 2 months ago
• aquasecurity / postee
  Notice: Postee is no longer under active development or maintenance.
  ☆206Updated 3 weeks ago
• falcosecurity / falco-talon
  Response Engine for managing threats in your Kubernetes
  ☆189Updated 2 months ago
• slsa-framework / slsa-github-generator
  Language-agnostic SLSA provenance generation for Github Actions
  ☆545Updated 3 months ago
• kubernetes-retired / wg-policy-prototypes
  A place for policy work group related proposals and prototypes.
  ☆65Updated 8 months ago
• opcr-io / policy
  CLI for building OPA policies into OCI images
  ☆250Updated 2 weeks ago
• chainloop-dev / chainloop
  SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
  ☆522Updated this week
• redhat-cop / rego-policies
  Rego policies collection
  ☆169Updated this week
• open-policy-agent / regal
  Regal is a linter and language server for Rego, bringing your policy development experience to the next level!
  ☆360Updated this week
• kubernetes / sig-security
  Process documentation, non-code deliverables, and miscellaneous artifacts of Kubernetes SIG Security
  ☆229Updated 2 weeks ago
• chainguard-dev / ssc-reading-list
  A reading list for software supply-chain security.
  ☆366Updated 3 years ago
• open-policy-agent / rego-style-guide
  Style guide for Rego
  ☆203Updated last month