Alternatives and similar repositories for go-securesystemslib

Users that are interested in go-securesystemslib are comparing it to the libraries listed below

• distribution / reference
  Go module implementing general types to represent any way of referencing images within distribution
  ☆44Updated 10 months ago
• cyphar / filepath-securejoin
  Proposed filepath.SecureJoin implementation
  ☆108Updated 2 months ago
• chainguard-dev / go-apk
  native go library for installation and management of apk packages
  ☆32Updated last year
• in-toto / in-toto-golang
  A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
  ☆144Updated 2 weeks ago
• AkihiroSuda / gomodjail
  [Experimental] jail for Go modules
  ☆132Updated 3 weeks ago
• veraison / go-cose
  go library for CBOR Object Signing and Encryption (COSE)
  ☆62Updated 3 months ago
• package-url / packageurl-go
  Go implementation of the package url spec
  ☆67Updated 2 months ago
• sigstore / sget-rs
  sget is a keyless safe script retrieval and execution tool
  ☆18Updated 4 years ago
• sigstore / friends
  Sigstore user stories
  ☆30Updated 2 years ago
• sigstore / protobuf-specs
  Sigstore's Protocol Buffer specifications
  ☆34Updated this week
• theupdateframework / tuf-on-ci
  A TUF repository and signing tool
  ☆43Updated last week
• googleapis / enterprise-certificate-proxy
  Repository for the Enterprise Certificate Proxy project.
  ☆29Updated last week
• in-toto / go-witness
  Go implementation of witness
  ☆44Updated this week
• openvex / go-vex
  Go module to generate and transform VEX documents
  ☆52Updated last week
• anchore / stereoscope
  go library for processing container images and simulating a squash filesystem
  ☆103Updated this week
• philips-labs / spiffe-vault
  Integrates Spiffe and Vault to have secretless authentication
  ☆97Updated 3 weeks ago
• salrashid123 / signer
  golang crypto.Signer for Trusted Platform Module (TPM)
  ☆36Updated 5 months ago
• transparencylog / tl
  verify https assets with a public transparency log
  ☆75Updated 4 years ago
• goreleaser / example-supply-chain
  Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations
  ☆58Updated last week
• trailofbits / go-mutexasserts
  A small library that allows to check if Go mutexes are locked
  ☆27Updated 8 months ago
• kubernetes-sigs / tejolote
  A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
  ☆72Updated last week
• sigstore / sget
  ☆23Updated 2 years ago
• containers / psgo
  A ps(1) AIX-format compatible golang library
  ☆66Updated last month
• spiffe / spire-plugin-sdk
  SPIRE Plugin service definitions and scaffolding
  ☆20Updated 3 weeks ago
• wagoodman / go-bouncer
  Reports on the licenses used by a Go package and its dependencies.
  ☆10Updated last year
• spdx / tools-golang
  Collection of Go packages to work with SPDX files
  ☆157Updated 3 weeks ago
• kusaridev / spector
  Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks
  ☆33Updated 9 months ago
• joelanford / go-apidiff
  Check API compatibility between different revisions of a Go project
  ☆43Updated last week
• sigstore / root-signing
  TUF repository for Sigstore trust root
  ☆117Updated this week
• parallaxsecond / parsec-client-go
  Parsec Go client
  ☆12Updated 3 years ago