sigstore / gitsign
Keyless Git signing using Sigstore
☆966Updated this week
Alternatives and similar repositories for gitsign:
Users that are interested in gitsign are comparing it to the libraries listed below
- Software Supply Chain Transparency Log☆917Updated this week
- Build OCI images from APK packages directly without Dockerfile☆1,249Updated last week
- Sigstore OIDC PKI☆670Updated this week
- A security layer for Git repositories☆473Updated this week
- Common go library shared across sigstore services and clients☆458Updated this week
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆423Updated this week
- Main package repository for production Wolfi images☆857Updated this week
- build APKs from source code☆446Updated this week
- An anonymous & ephemeral Docker image registry☆548Updated 3 months ago
- Reference implementation of OpenPubkey☆665Updated 2 weeks ago
- Public Chainguard Images☆565Updated this week
- A tool for securing CI/CD workflows with version pinning.☆777Updated last month
- A CLI tool to sign and verify artifacts☆369Updated this week
- Verify provenance from SLSA compliant builders☆239Updated 2 weeks ago
- Language-agnostic SLSA provenance generation for Github Actions☆438Updated 2 weeks ago
- A Declarative Dependency Management tool☆607Updated this week
- diff for Docker and OCI container images☆339Updated this week
- in-toto Attestation Framework☆256Updated this week
- Chainloop is an Open Source evidence store for your Software Supply Chain attestations, SBOMs, VEX, SARIF, CSAF files, QA reports, and mo…☆379Updated this week
- Inspect certificate authorities in container images☆229Updated 8 months ago
- A utility to generate SPDX-compliant Bill of Materials manifests☆361Updated this week
- An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster☆443Updated this week
- Supply-chain Levels for Software Artifacts☆1,580Updated this week
- Supply Chain Security in Tekton Pipelines☆249Updated this week
- GitHub Action for creating software bill of materials using Syft.☆175Updated 3 weeks ago
- zot - A scale-out production-ready vendor-neutral OCI-native container image/artifact registry (purely based on OCI Distribution Specific…☆1,021Updated this week
- Automated changelog tool for preparing releases with lots of customization options☆714Updated this week
- Harden-Runner secures CI/CD workflows by controlling network access and monitoring activities on GitHub-hosted and self-hosted runners☆647Updated this week
- 🧵 CLI tool for directly patching container images!☆1,110Updated this week
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,314Updated this week