Alternatives and similar repositories for cosign

Users that are interested in cosign are comparing it to the libraries listed below

• google / go-containerregistry
  Go library and CLIs for working with container registries
  ☆3,487Updated last week
• anchore / syft
  CLI tool and library for generating a Software Bill of Materials from container images and filesystems
  ☆7,547Updated this week
• chainguard-dev / apko
  Build OCI images from APK packages directly without Dockerfile
  ☆1,413Updated this week
• stackrox / kube-linter
  KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adh…
  ☆3,262Updated this week
• anchore / grype
  A vulnerability scanner for container images and filesystems
  ☆10,534Updated this week
• open-policy-agent / gatekeeper
  🐊 Policy Controller for Kubernetes
  ☆3,990Updated this week
• falcosecurity / falco
  Cloud Native Runtime Security
  ☆8,215Updated this week
• opencost / opencost
  Cost monitoring for Kubernetes workloads and cloud costs
  ☆6,015Updated this week
• open-policy-agent / conftest
  Write tests against structured configuration data using the Open Policy Agent Rego query language
  ☆3,034Updated this week
• project-copacetic / copacetic
  🧵 CLI tool for directly patching container images!
  ☆1,411Updated this week
• spiffe / spire
  The SPIFFE Runtime Environment
  ☆2,034Updated this week
• hashicorp / boundary
  Boundary enables identity-based access management for dynamic infrastructure.
  ☆3,946Updated this week
• containers / skopeo
  Work with remote images registries - retrieving information, images, signing content
  ☆9,631Updated last week
• slsa-framework / slsa
  Supply-chain Levels for Software Artifacts
  ☆1,713Updated last week
• zegl / kube-score
  Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in …
  ☆2,956Updated this week
• oras-project / oras
  OCI registry client - managing content like artifacts, images, packages
  ☆1,878Updated this week
• containers / buildah
  A tool that facilitates building OCI images.
  ☆8,179Updated this week
• containerd / nerdctl
  contaiNERD CTL - Docker-compatible CLI for containerd, with support for Compose, Rootless, eStargz, OCIcrypt, IPFS, ...
  ☆9,275Updated this week
• derailed / popeye
  👀 A Kubernetes cluster resource sanitizer
  ☆5,992Updated last week
• cilium / tetragon
  eBPF-based Security Observability and Runtime Enforcement
  ☆4,127Updated this week
• crossplane / crossplane
  The Cloud Native Control Plane
  ☆10,795Updated this week
• aquasecurity / kube-bench
  Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
  ☆7,679Updated last week
• buildpacks / pack
  CLI for building apps using Cloud Native Buildpacks
  ☆2,788Updated last week
• notaryproject / notary
  Notary is a project that allows anyone to have trust over arbitrary collections of data
  ☆3,282Updated last year
• FairwindsOps / polaris
  Validation of best practices in your Kubernetes clusters
  ☆3,297Updated last week
• kubescape / kubescape
  Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security…
  ☆10,970Updated this week
• sigstore / rekor
  Software Supply Chain Transparency Log
  ☆995Updated last week
• open-policy-agent / opa
  Open Policy Agent (OPA) is an open source, general-purpose policy engine.
  ☆10,623Updated this week
• kyverno / kyverno
  Cloud Native Policy Management
  ☆6,690Updated this week
• cilium / hubble
  Hubble - Network, Service & Security Observability for Kubernetes using eBPF
  ☆3,915Updated last week