sigstore / fulcio
Sigstore OIDC PKI
☆651Updated this week
Related projects ⓘ
Alternatives and complementary repositories for fulcio
- Software Supply Chain Transparency Log☆895Updated this week
- Common go library shared across sigstore services and clients☆446Updated this week
- A CLI tool to sign and verify artifacts☆348Updated this week
- Keyless Git signing using Sigstore☆943Updated this week
- Verify provenance from SLSA compliant builders☆229Updated last week
- in-toto Attestation Framework☆239Updated this week
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆413Updated this week
- Language-agnostic SLSA provenance generation for Github Actions☆430Updated this week
- Supply Chain Security in Tekton Pipelines☆247Updated this week
- in-toto is a framework to protect supply chain integrity.☆876Updated this week
- A utility to generate SPDX-compliant Bill of Materials manifests☆337Updated last week
- Cross tooling and interoperability specifications☆159Updated this week
- An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster☆442Updated this week
- Build OCI images from APK packages directly without Dockerfile☆1,199Updated this week
- ☆227Updated last week
- build APKs from source code☆425Updated this week
- TUF repository for Sigstore trust root☆88Updated this week
- Inspect certificate authorities in container images☆228Updated 5 months ago
- Reference implementation of OpenPubkey☆651Updated 2 months ago
- Platform AbstRaction for SECurity service☆471Updated 2 months ago
- A reading list for software supply-chain security.☆361Updated last year
- A security layer for Git repositories☆462Updated this week
- GitHub Action for creating software bill of materials using Syft.☆165Updated this week
- A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.☆130Updated this week
- Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supp…☆123Updated this week
- Cosign Github Action☆126Updated last week
- A universal SBOM representation in protocol buffers☆260Updated this week
- Main package repository for production Wolfi images☆821Updated this week
- Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure usin…☆950Updated this week
- Store and access your secrets the Kubernetes native way with any external KMS.☆178Updated last year