mattmoor / zero-friction-actionsLinks
An example repo demonstrating keyless signing with Github Actions
☆11Updated 3 years ago
Alternatives and similar repositories for zero-friction-actions
Users that are interested in zero-friction-actions are comparing it to the libraries listed below
Sorting:
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆70Updated last week
- Sigstore user stories☆30Updated 2 years ago
- ☆20Updated 6 months ago
- Trust Dexter to ensure that all your images are pinned by digest for better security☆31Updated 2 years ago
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆24Updated last week
- Transparenty Immutable Container Image Tags☆20Updated 2 years ago
- This tool allows using a SPIFFE JWT to authenticate to AWS APIs☆35Updated 3 weeks ago
- Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.☆45Updated 2 years ago
- Comparison of Chainguard Images to others☆20Updated this week
- To manage Docker Content Trust and Notary certificates☆13Updated 3 weeks ago
- ☆12Updated 2 years ago
- ☆12Updated 5 years ago
- Automated Terraform cloud and enterprise drift detection☆37Updated last year
- A library for representing OCI image layers in an abstract filesystem☆27Updated 5 years ago
- Scans SBOMs for vulnerabilities with Grype☆85Updated last week
- Open Source declarative disk configuration system for Kubernetes☆40Updated 2 years ago
- Generate K8s RBAC policies based on e2e test runs☆28Updated 4 years ago
- OpenCP shim is a simple HTTP server that implements the Kubernetes API server interface. It is a shim that allows you to use the Kubernet…☆14Updated 2 years ago
- The home for CloudNative.tv the definitive interactive media experience for learning and growing in cloud native☆37Updated 4 years ago
- Integrates Spiffe and Vault to have secretless authentication☆96Updated 2 weeks ago
- Proof of concept that uses cosign and GitHub's in built OIDC for actions to sign container images, providing a proof that what is in the …☆14Updated 2 years ago
- A simple tool for converting Rego (OPA) rule into command.☆31Updated 3 years ago
- Grafana multi tenant operator☆27Updated last week
- Kubernetes operator that uses the CSI Volume Snapshot API to manage backups of your Persistent Volumes☆14Updated 6 years ago
- A Go program to display certificate chains simply and quickly with an easy to remember syntax☆28Updated last year
- Demos and resources of the Istio + Gatekeeper talks at IstioCon 2022 and GitOpsCon 2022☆14Updated 2 years ago
- ☆35Updated 4 years ago
- A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources☆17Updated this week
- A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.☆28Updated last week
- Terraform provider to perform OCI image operations☆15Updated 3 weeks ago