Alternatives and similar repositories for go-securesystemslib

Users that are interested in go-securesystemslib are comparing it to the libraries listed below

• sigstore / sget-rs
  sget is a keyless safe script retrieval and execution tool
  ☆18Updated 3 years ago
• cyphar / filepath-securejoin
  Proposed filepath.SecureJoin implementation
  ☆102Updated this week
• veraison / go-cose
  go library for CBOR Object Signing and Encryption (COSE)
  ☆55Updated 4 months ago
• sigstore / sget
  ☆23Updated 2 years ago
• package-url / packageurl-go
  Go implementation of the package url spec
  ☆63Updated 5 months ago
• salrashid123 / signer
  golang crypto.Signer for Trusted Platform Module (TPM) and Google Cloud KMS
  ☆37Updated 2 weeks ago
• carolynvs / magex
  Helper methods for Magefiles
  ☆33Updated 2 years ago
• distribution / reference
  Go module implementing general types to represent any way of referencing images within distribution
  ☆39Updated 3 months ago
• in-toto / go-witness
  Go implementation of witness
  ☆37Updated this week
• anchore / stereoscope
  go library for processing container images and simulating a squash filesystem
  ☆98Updated last week
• goreleaser / example-supply-chain
  Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations
  ☆58Updated 2 weeks ago
• chainguard-dev / go-apk
  native go library for installation and management of apk packages
  ☆29Updated last year
• sigstore / root-signing
  TUF repository for Sigstore trust root
  ☆107Updated this week
• googleapis / enterprise-certificate-proxy
  Repository for the Enterprise Certificate Proxy project.
  ☆26Updated 4 months ago
• slsa-framework / slsa-github-generator-go
  ☆57Updated 3 years ago
• sigstore / friends
  Sigstore user stories
  ☆30Updated last year
• transparencylog / tl
  verify https assets with a public transparency log
  ☆75Updated 3 years ago
• sigstore / protobuf-specs
  Sigstore's Protocol Buffer specifications
  ☆33Updated this week
• in-toto / in-toto-golang
  A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
  ☆141Updated this week
• openvex / go-vex
  Go module to generate and transform VEX documents
  ☆46Updated last week
• transparency-dev / merkle
  ☆34Updated this week
• smallstep / crypto
  Crypto is a collection of packages used by Smallstep products
  ☆89Updated last week
• testifysec / witness-examples
  Witness Examples
  ☆11Updated last year
• kusaridev / spector
  Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks
  ☆32Updated 3 months ago
• wolfi-dev / wolfictl
  A CLI used to work with the Wolfi OSS project
  ☆64Updated this week
• sigstore / scaffolding
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
  ☆66Updated this week
• theupdateframework / tuf-on-ci
  A TUF repository and signing tool
  ☆38Updated last week
• jeremyhahn / go-trusted-platform
  Platform software for Trusted Computing - TPM 2.0, Certificate Authority, and Web Services required to perform Local and Remote Attestati…
  ☆13Updated 4 months ago
• kubernetes-sigs / tejolote
  A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
  ☆64Updated last week
• spdx / tools-golang
  Collection of Go packages to work with SPDX files
  ☆149Updated last week