The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously improve the S2C2F guide which outlines and defines how to securely consume Open Source Software (OSS) dependencies into the developer’s workflow.
☆245May 26, 2025Updated last year
Alternatives and similar repositories for s2c2f
Users that are interested in s2c2f are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆614Updated this week
- Open Source Software Secure Supply Chain Framework☆238Oct 28, 2022Updated 4 years ago
- ☆261Updated this week
- Supply-chain Levels for Software Artifacts☆1,951Oct 22, 2026Updated last week
- in-toto Attestation Framework☆389Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- OpenVEX Specification☆198Sep 9, 2026Updated last month
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,572Updated this week
- A place to systematically store software bill of materials (SBOM) documents.☆51Jun 1, 2023Updated 3 years ago
- Machine-readable specification for the attestation of security-relevant data.☆82Oct 21, 2026Updated last week
- Format agnostic SBOM tooling☆156Nov 20, 2025Updated 11 months ago
- ☆169Updated this week
- Umbrella Repository Service for TUF☆69Oct 23, 2026Updated last week
- Generate a score for your sbom to understand if it will actually be useful.☆242Aug 13, 2024Updated 2 years ago
- Verify provenance from SLSA compliant builders☆350Aug 7, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.☆93Oct 22, 2026Updated last week
- Our objective is to enable open source maintainers, contributors and end-users to understand and make decisions on the provenance of the …☆209Sep 12, 2026Updated last month
- in-toto is a framework to protect supply chain integrity.☆1,052Aug 27, 2026Updated 2 months ago
- Software Supply Chain Security Platform☆425Updated this week
- ☆87Updated this week
- Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD …☆210Oct 23, 2026Updated last week
- A standard API specification for exchanging supply chain artifacts and intelligence☆121Oct 21, 2026Updated last week
- Website and API for OpenSSF Scorecard☆33Updated this week
- ☆101Sep 27, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A utility to generate SPDX-compliant Bill of Materials manifests☆475Updated this week
- ☆25Nov 8, 2024Updated last year
- build-observer is a tool to observe the build process of a project and create a log of all files that are read, written or executed durin…☆13Mar 31, 2025Updated last year
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆50Jul 25, 2026Updated 3 months ago
- 🔴🟡🟢 The Amazing Multipurpose Policy Engine (and L)☆61Oct 22, 2026Updated last week
- Enrich SBOMs with data from third party services☆241Sep 21, 2026Updated last month
- AI skill for securing software dependencies☆17May 28, 2026Updated 5 months ago
- Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for so…☆119Updated this week
- OpenSSF Working Group on Securing Software Repositories☆134Apr 6, 2026Updated 6 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Open Source Maturity Model☆17Apr 30, 2024Updated 2 years ago
- OpenSSF Scorecard - Security health metrics for Open Source☆5,796Updated this week
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆34Apr 22, 2025Updated last year
- Language-agnostic SLSA provenance generation for Github Actions☆607Aug 7, 2026Updated 2 months ago
- sbomasm: The Complete SBOM Management Toolkit☆133Updated this week
- Reference GitHub Workflows for SBOM generation from the CISA SBOM Generation Reference Implementation Tiger Team☆34Feb 2, 2026Updated 8 months ago
- Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and C…☆608Updated this week