Alternatives and similar repositories for cosign

Users that are interested in cosign are comparing it to the libraries listed below

• google / go-containerregistry
  Go library and CLIs for working with container registries
  ☆3,556Updated last week
• anchore / syft
  CLI tool and library for generating a Software Bill of Materials from container images and filesystems
  ☆7,834Updated this week
• chainguard-dev / apko
  Build OCI images from APK packages directly without Dockerfile
  ☆1,445Updated last week
• falcosecurity / falco
  Cloud Native Runtime Security
  ☆8,338Updated this week
• stackrox / kube-linter
  KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adh…
  ☆3,312Updated this week
• anchore / grype
  A vulnerability scanner for container images and filesystems
  ☆10,861Updated last week
• spiffe / spire
  The SPIFFE Runtime Environment
  ☆2,093Updated last week
• zegl / kube-score
  Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in …
  ☆2,979Updated 3 weeks ago
• open-policy-agent / gatekeeper
  🐊 Policy Controller for Kubernetes
  ☆4,037Updated this week
• open-policy-agent / conftest
  Write tests against structured configuration data using the Open Policy Agent Rego query language
  ☆3,061Updated last week
• external-secrets / external-secrets
  External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as K…
  ☆5,974Updated last week
• bitnami-labs / sealed-secrets
  A Kubernetes controller and tool for one-way encrypted Secrets
  ☆8,645Updated 2 weeks ago
• cilium / hubble
  Hubble - Network, Service & Security Observability for Kubernetes using eBPF
  ☆3,968Updated this week
• oras-project / oras
  OCI registry client - managing content like artifacts, images, packages
  ☆1,964Updated last week
• slsa-framework / slsa
  Supply-chain Levels for Software Artifacts
  ☆1,742Updated last week
• derailed / popeye
  👀 A Kubernetes cluster resource sanitizer
  ☆6,121Updated last week
• kyverno / kyverno
  Cloud Native Policy Management
  ☆7,015Updated last week
• hashicorp / boundary
  Boundary enables identity-based access management for dynamic infrastructure.
  ☆3,954Updated this week
• fluxcd / flux2
  Open and extensible continuous delivery solution for Kubernetes. Powered by GitOps Toolkit.
  ☆7,520Updated last week
• opencost / opencost
  Cost monitoring for Kubernetes workloads and cloud costs
  ☆6,120Updated last week
• smallstep / cli
  🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
  ☆4,032Updated this week
• aquasecurity / kube-bench
  Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
  ☆7,778Updated this week
• yannh / kubeconform
  A FAST Kubernetes manifests validator, with support for Custom Resources!
  ☆2,794Updated 2 weeks ago
• project-copacetic / copacetic
  🧵 CLI tool for directly patching container images!
  ☆1,464Updated this week
• tellerops / teller
  Cloud native secrets management for developers - never leave your command line for secrets.
  ☆3,143Updated last year
• cilium / tetragon
  eBPF-based Security Observability and Runtime Enforcement
  ☆4,223Updated last week
• buildpacks / pack
  CLI for building apps using Cloud Native Buildpacks
  ☆2,827Updated this week
• spiffe / spiffe
  The SPIFFE Project
  ☆1,646Updated last week
• FairwindsOps / polaris
  Validation of best practices in your Kubernetes clusters
  ☆3,321Updated this week
• k3d-io / k3d
  Little helper to run CNCF's k3s in Docker
  ☆6,083Updated this week