Specification for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.
☆27Nov 17, 2025Updated 9 months ago
Alternatives and similar repositories for spec
Users that are interested in spec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆21Jan 27, 2025Updated last year
- ☆23Mar 13, 2023Updated 3 years ago
- A tool that takes two or more micro SBOMs and composes them into one distributable SBOM☆23Mar 23, 2023Updated 3 years ago
- Keyless Git signing with cosign!☆11May 12, 2022Updated 4 years ago
- ☆58Jun 1, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This repository stores meetings minutes for the SPDX project☆43Updated this week
- Add CA certificates into containers☆174Aug 25, 2026Updated last week
- K8S Operator for Rekor☆20Feb 23, 2023Updated 3 years ago
- Terraform provider for Sigstore Cosign☆12Updated this week
- The public handbook for the Login.gov program.☆18Updated this week
- Generate a score for your sbom to understand if it will actually be useful.☆242Aug 13, 2024Updated 2 years ago
- SLSA implementation of Community Specification governance☆28Aug 11, 2026Updated 3 weeks ago
- Cross platform GitHub Action to upload multiple assets to a release using Golang☆12Feb 6, 2026Updated 6 months ago
- ☆16Jul 12, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- ☆13Feb 11, 2026Updated 6 months ago
- Privateer plugin for scanning the security hygiene of a GitHub repository.☆31Updated this week
- ☆25Updated this week
- `tflint` ruleset with very pedantic view on spacing and sorting☆11Jul 10, 2025Updated last year
- OASIS TC Open Repository: CSAF Parser tool for parsing and checking the syntax of the Common Vulnerability Reporting Framework (CVRF) con…☆25Apr 21, 2026Updated 4 months ago
- AI Software Bill of Materials for EU AI Act☆12Jan 18, 2024Updated 2 years ago
- Terraform State remote backend on Cloudflare Workers☆23Aug 18, 2026Updated 2 weeks ago
- GitHub Apps in Golang, inspired by Probot☆17Aug 29, 2023Updated 3 years ago
- 🍛 TypeScript Options-object Currying☆13Dec 9, 2019Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Simple bash script that will optimize JPG and PNG images in a directory using jpegoptim, optipng, advpng, and pngcrush.☆11Sep 27, 2013Updated 12 years ago
- Sbommage is an interactive terminal frontend for viewing Software Bill of Materials (SBOM) files in various formats.☆39Nov 10, 2025Updated 9 months ago
- 🌎 a small server that returns the location of a given IP address☆16Feb 10, 2014Updated 12 years ago
- Terraform modules published by the Login.gov team☆21Aug 25, 2026Updated last week
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers…☆148Updated this week
- Collating an overview of the open source software supply chain landscape -- and synthesizing that survey in a hopefully-useful way.☆35Apr 4, 2023Updated 3 years ago
- Generate Software Bill of Materials (SBOM) from virtual machine disk images, without booting the VM.☆20Aug 6, 2026Updated 3 weeks ago
- OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reductio…☆544Updated this week
- An http proxy for reproducibility.☆19Jan 10, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- How small can a Java application container image be☆21Feb 17, 2023Updated 3 years ago
- A GitHub Action to update the changelog and bump the version of your project for Dependabot pull requests.☆18Jul 20, 2026Updated last month
- A Map that acts like an object literal to better reflect Python dictionaries in JS.☆17May 14, 2024Updated 2 years ago
- Creates triples for various entailment regimes of a vocabulary for enabling SPARQL 1.1 Entailment☆19Jan 8, 2024Updated 2 years ago
- Trust Dexter to ensure that all your images are pinned by digest for better security☆31Nov 8, 2023Updated 2 years ago
- A framework for understanding the capabilities of automated detection methods at identifying classes of application security vulnerabilit…☆33Jun 16, 2026Updated 2 months ago
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆121Feb 28, 2026Updated 6 months ago