Alternatives and similar repositories for sigstore-python

Users that are interested in sigstore-python are comparing it to the libraries listed below

• pypa / gh-action-pip-audit
  A GitHub Action for pip-audit
  ☆74Updated last week
• sigstore / gh-action-sigstore-python
  A GitHub Action for sigstore-python
  ☆52Updated this week
• spdx / tools-python
  A Python library to parse, validate and create SPDX documents.
  ☆215Updated 2 months ago
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆267Updated this week
• CycloneDX / cyclonedx-python-lib
  Python implementation of OWASP CycloneDX
  ☆83Updated this week
• sethmlarson / pypi-data
  Data about packages and maintainers on PyPI
  ☆128Updated 2 months ago
• psf / sboms-for-python-packages
  Software Bill-of-Materials documents for Python packages
  ☆41Updated 4 months ago
• psf / advisory-database
  This is a repository of vulnerability advisories for projects in scope for the Python Software Foundation CVE Numbering Authority (CNA)
  ☆35Updated last week
• sonatype-nexus-community / jake
  Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.
  ☆120Updated 2 weeks ago
• ossf / sbom-everywhere
  Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption
  ☆93Updated last week
• anthonyharrison / sbom4python
  A tool to generate a SBOM (Software Bill of Materials) for an installed Python module
  ☆33Updated 3 months ago
• package-url / packageurl-python
  Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase…
  ☆74Updated 2 weeks ago
• bomctl / bomctl
  Format agnostic SBOM tooling
  ☆108Updated last week
• abravalheri / validate-pyproject
  Validation library for simple check on `pyproject.toml`
  ☆163Updated 2 weeks ago
• dlint-py / dlint
  Dlint is a tool for encouraging best coding practices and helping ensure Python code is secure.
  ☆166Updated 7 months ago
• repository-service-tuf / repository-service-tuf
  Umbrella Repository Service for TUF
  ☆51Updated last week
• gittuf / gittuf
  A security layer for Git repositories
  ☆534Updated last week
• sigstore / rekor-monitor
  Log monitor for Rekor to verify immutability and monitor entries
  ☆36Updated this week
• sarugaku / resolvelib
  Resolve abstract dependencies into concrete ones
  ☆154Updated last week
• github / annotated-logger
  A decorator to aid in annotating logs for easier reading and searching
  ☆87Updated this week
• secure-systems-lab / securesystemslib
  Cryptographic and general-purpose routines for Secure Systems Lab projects at NYU
  ☆49Updated last week
• aboutcode-org / license-expression
  Utility library to parse, normalize and compare License expressions for Python using a boolean logic engine. For expressions using SPDX …
  ☆67Updated 2 months ago
• openvex / spec
  OpenVEX Specification
  ☆151Updated 3 weeks ago
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆202Updated 3 weeks ago
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆176Updated 2 months ago
• pypa / advisory-database
  Advisory database for Python packages published on pypi.org
  ☆293Updated last week
• owenlamont / uv-secure
  Scan your uv.lock file for dependencies with known vulnerabilities
  ☆70Updated this week
• pypi / inspector
  🕵️ File browser for distributions on PyPI
  ☆105Updated last week
• pypa / abi3audit
  Scans Python packages for abi3 violations and inconsistencies
  ☆111Updated last week
• tox-dev / tox-uv
  Use https://github.com/astral-sh/uv with tox
  ☆240Updated this week