sigstore / sigstore-java
java clients for sigstore
☆43Updated this week
Related projects ⓘ
Alternatives and complementary repositories for sigstore-java
- Reproducible Central: rebuild instructions for artifacts published to (Maven) Central Repository☆104Updated this week
- sigstore maven plugin☆18Updated 3 months ago
- GitHub Action for submitting Maven dependencies☆48Updated last month
- GitHub app for SBOM creation using cdxgen and upload to Dependency-Track☆15Updated this week
- Zanzibar style fine grained authorization☆17Updated last week
- Search Rekor for entries☆27Updated 4 months ago
- ☆111Updated 5 months ago
- OpenRewrite recipes for identifying and fixing static analysis issues.☆32Updated this week
- Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects☆160Updated last week
- Plugin for supporting SPDX in a Maven build.☆44Updated last week
- Community contributions for hooks and reference providers☆27Updated this week
- TUF repository for Sigstore trust root☆88Updated this week
- GitHub Action for JReleaser☆34Updated 6 months ago
- Gradle plugin that scans the dependencies of a Gradle project using Sonatype platforms: OSS Index and Nexus IQ Server.☆77Updated last week
- Extract license information from content.☆48Updated 2 weeks ago
- Incubating project for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services.☆61Updated this week
- A taxonomy of all official CycloneDX property namespaces and names☆14Updated 3 weeks ago
- Check SPDX SBOM for NTIA minimum elements☆53Updated last week
- Java/JVM implementation of the package url spec☆22Updated 5 months ago
- CycloneDX SBOM Model and Utils for Creating and Validating BOMs☆81Updated this week
- Services for storing and searching information about software content and vulnerabilities☆43Updated this week
- SPDX Command Line Tools using the Spdx-Java-Library☆62Updated last month
- Docker image and Github Action to run jbang scripts☆40Updated last month
- A Cloud Native Buildpack with an order definition suitable for Java applications☆121Updated this week
- Quarkus extension that enables embedding Microcks as a DevService managing mocks for dependencies and contract-testing your API endpoints☆16Updated this week
- Java library which implements the Java object model for SPDX and provides useful helper functions☆37Updated this week
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆30Updated 10 months ago
- Adoptium API 🚀☆34Updated this week
- A Quarkus-powered GitHub App to simplify issues and pull requests management in the Quarkus project.☆23Updated last week
- Develop your GitHub Apps in Java with Quarkus.☆65Updated this week