Go module to generate and transform VEX documents
☆72Oct 5, 2026Updated last week
Alternatives and similar repositories for go-vex
Users that are interested in go-vex are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool to create, transform and attest VEX metadata☆217Updated this week
- OpenVEX Specification☆192Sep 9, 2026Updated last month
- Reports on the licenses used by a Go package and its dependencies.☆11Jul 24, 2024Updated 2 years ago
- A SBOM-centric security scanner.☆28Updated this week
- A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.☆152Sep 10, 2026Updated last month
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Interfaces and implementations for building Kubernetes releases.☆20Updated this week
- native go library for installation and management of apk packages☆31Jun 5, 2024Updated 2 years ago
- Detects when some calls can be replaced by methods from the testing package☆34Oct 1, 2026Updated last week
- ☆24Oct 1, 2026Updated 2 weeks ago
- Automating Compliance Tooling Project☆25Jan 28, 2022Updated 4 years ago
- Collection of Go packages to work with SPDX files☆171Oct 5, 2026Updated last week
- About standalone, Kubernetes-native Software Bill of Materials (SBOM) visualization and governance platform☆58Updated this week
- 🔴🟡🟢 The Amazing Multipurpose Policy Engine (and L)☆58Updated this week
- a CLI tool for generating logs and metrics from eBPF telemetry, producing flamegraphs and actionable observability outputs☆16Mar 28, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Dynamic GitHub Actions from Wolfi packages☆46May 5, 2026Updated 5 months ago
- Helm mixin for Porter☆13Jul 1, 2021Updated 5 years ago
- Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners☆14Oct 2, 2026Updated last week
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆74Oct 8, 2026Updated last week
- How small can a Java application container image be☆21Feb 17, 2023Updated 3 years ago
- Kubernetes tools in a "distroless" container☆13Oct 30, 2023Updated 2 years ago
- A utility to generate SPDX-compliant Bill of Materials manifests☆473Updated this week
- 🔍 Rekor transparency log monitoring and alerting☆26Oct 2, 2023Updated 3 years ago
- in-toto Attestation Framework☆382Oct 2, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- SLSA provenance using Nix and Github Actions☆19Sep 11, 2025Updated last year
- ☆167Updated this week
- A sweet little formatter for YAML☆34Updated this week
- A universal SBOM representation in protocol buffers☆334Updated this week
- Suppress vulnerabilities applying Kubernetes context to scans☆40Sep 22, 2026Updated 3 weeks ago
- A kubectl plugin to run kubectl macro that wraps a set of kubectl calls into one command to be run many times.☆11Jun 28, 2021Updated 5 years ago
- A proof-of-concept for how the SLSA Source Track could be implemented.☆19Updated this week
- A tool that takes two or more micro SBOMs and composes them into one distributable SBOM☆23Mar 23, 2023Updated 3 years ago
- Software Supply Chain Attribute Integrity (SCAI) Demos and CLI tools☆19Sep 2, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Keyless Git signing with cosign!☆11May 12, 2022Updated 4 years ago
- A collection of Dagger modules powered by Dagger.☆17Aug 3, 2025Updated last year
- An SBOM query language and associated utilities☆55Jan 22, 2024Updated 2 years ago
- Tool for collecting vulnerability data from various sources (used to build the grype database)☆133Updated this week
- Minimal container registry☆50Oct 7, 2026Updated last week
- Example repository that demonstrates a supply chain security workflow using Syft, Grype, Cosign☆12Sep 15, 2021Updated 5 years ago
- ☆20Aug 31, 2026Updated last month