Alternatives and similar repositories for sigstore-python:

Users that are interested in sigstore-python are comparing it to the libraries listed below

• sigstore / gh-action-sigstore-python
  A GitHub Action for sigstore-python
  ☆48Updated 2 weeks ago
• pypa / gh-action-pip-audit
  A GitHub Action for pip-audit
  ☆72Updated 3 weeks ago
• sethmlarson / pypi-data
  Data about packages and maintainers on PyPI
  ☆125Updated 2 months ago
• ossf / sbom-everywhere
  Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption
  ☆77Updated last week
• slsa-framework / slsa-verifier
  Verify provenance from SLSA compliant builders
  ☆241Updated this week
• psf / advisory-database
  This is a repository of vulnerability advisories for projects in scope for the Python Software Foundation CVE Numbering Authority (CNA)
  ☆30Updated last month
• spdx / tools-python
  A Python library to parse, validate and create SPDX documents.
  ☆198Updated 4 months ago
• package-url / packageurl-python
  Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase…
  ☆72Updated 2 months ago
• CycloneDX / cyclonedx-python-lib
  Python implementation of OWASP CycloneDX
  ☆73Updated this week
• bomctl / bomctl
  Format agnostic SBOM tooling
  ☆96Updated this week
• repository-service-tuf / repository-service-tuf
  Umbrella Repository Service for TUF
  ☆45Updated this week
• anthonyharrison / sbom4python
  A tool to generate a SBOM (Software Bill of Materials) for an installed Python module
  ☆28Updated this week
• abravalheri / validate-pyproject
  Validation library for simple check on `pyproject.toml`
  ☆144Updated this week
• gittuf / gittuf
  A security layer for Git repositories
  ☆480Updated this week
• pypa / advisory-database
  Advisory database for Python packages published on pypi.org
  ☆271Updated this week
• sonatype-nexus-community / jake
  Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.
  ☆116Updated 2 months ago
• tox-dev / pyproject-fmt
  ☆175Updated this week
• psf / sboms-for-python-packages
  Software Bill-of-Materials documents for Python packages
  ☆29Updated last month
• scanoss / purl2cpe
  PURL to CPE Relationship mapping project.
  ☆82Updated this week
• dlint-py / dlint
  Dlint is a tool for encouraging best coding practices and helping ensure Python code is secure.
  ☆162Updated 2 months ago
• sarugaku / resolvelib
  Resolve abstract dependencies into concrete ones
  ☆145Updated last month
• sigstore / rekor-monitor
  Log monitor for Rekor to verify immutability and monitor entries
  ☆30Updated this week
• sethmlarson / truststore
  Verify certificates using OS trust stores
  ☆173Updated 2 weeks ago
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆190Updated this week
• kushaldas / johnnycanencrypt
  Python module for OpenPGP written in Rust.
  ☆52Updated 2 weeks ago
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆152Updated this week
• pytest-dev / pytest-github-actions-annotate-failures
  Pytest plugin to annotate failed tests with a workflow command for GitHub Actions
  ☆149Updated last week
• python-jsonschema / check-jsonschema
  A CLI and set of pre-commit hooks for jsonschema validation with built-in support for GitHub Workflows, Renovate, Azure Pipelines, and mo…
  ☆232Updated this week
• sigstore / root-signing
  TUF repository for Sigstore trust root
  ☆95Updated this week
• pypi / inspector
  🕵️ File browser for distributions on PyPI
  ☆99Updated this week