Alternatives and similar repositories for go-securesystemslib

Users that are interested in go-securesystemslib are comparing it to the libraries listed below

• cyphar / filepath-securejoin
  Proposed filepath.SecureJoin implementation
  ☆107Updated 3 weeks ago
• in-toto / in-toto-golang
  A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.
  ☆142Updated this week
• in-toto / go-witness
  Go implementation of witness
  ☆42Updated this week
• veraison / go-cose
  go library for CBOR Object Signing and Encryption (COSE)
  ☆60Updated 2 months ago
• transparency-dev / tessera
  Go library for building tile-based transparency logs (tlogs)
  ☆141Updated last week
• googleapis / enterprise-certificate-proxy
  Repository for the Enterprise Certificate Proxy project.
  ☆28Updated this week
• sigstore / sget-rs
  sget is a keyless safe script retrieval and execution tool
  ☆18Updated 3 years ago
• salrashid123 / signer
  golang crypto.Signer for Trusted Platform Module (TPM)
  ☆36Updated 4 months ago
• package-url / packageurl-go
  Go implementation of the package url spec
  ☆67Updated last month
• distribution / reference
  Go module implementing general types to represent any way of referencing images within distribution
  ☆44Updated 9 months ago
• AkihiroSuda / gomodjail
  [Experimental] jail for Go modules
  ☆104Updated 2 weeks ago
• theupdateframework / tuf-on-ci
  A TUF repository and signing tool
  ☆42Updated last week
• parallaxsecond / parsec-client-go
  Parsec Go client
  ☆12Updated 3 years ago
• goreleaser / example-supply-chain
  Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations
  ☆58Updated 2 weeks ago
• trailofbits / go-mutexasserts
  A small library that allows to check if Go mutexes are locked
  ☆27Updated 7 months ago
• philips-labs / spiffe-vault
  Integrates Spiffe and Vault to have secretless authentication
  ☆97Updated last week
• openpubkey / verify-docker-cli-plugin
  A docker CLI plugin for verifying signed attestations on images
  ☆13Updated 2 years ago
• FiloSottile / intermediates
  Package filippo.io/intermediates embeds a bundle of known unexpired, unrevoked intermediate certificates chaining to roots in the Mozilla…
  ☆59Updated last week
• sigstore / sget
  ☆23Updated 2 years ago
• slsa-framework / slsa-github-generator-go
  ☆58Updated 3 years ago
• pjbgf-archives / gosystract
  A lightweight CLI tool that finds system calls being called inside golang applications.
  ☆31Updated 4 years ago
• anchore / stereoscope
  go library for processing container images and simulating a squash filesystem
  ☆101Updated last week
• kubernetes-sigs / tejolote
  A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
  ☆70Updated 3 weeks ago
• openvex / go-vex
  Go module to generate and transform VEX documents
  ☆52Updated 3 weeks ago
• spdx / tools-golang
  Collection of Go packages to work with SPDX files
  ☆157Updated this week
• testifysec / witness-examples
  Witness Examples
  ☆11Updated last year
• sigstore / friends
  Sigstore user stories
  ☆30Updated 2 years ago
• hashicorp / go-secure-stdlib
  ☆71Updated last month
• sigstore / root-signing
  TUF repository for Sigstore trust root
  ☆117Updated this week
• sigstore / protobuf-specs
  Sigstore's Protocol Buffer specifications
  ☆34Updated this week