slsa-framework / governance
SLSA implementation of Community Specification governance
☆16Updated last week
Related projects ⓘ
Alternatives and complementary repositories for governance
- SLSA Proposals☆9Updated 9 months ago
- A proof-of-concept SLSA provenance generator for Jenkins☆19Updated 3 months ago
- Website and API for OpenSSF Scorecard☆22Updated this week
- SLSA Azure DevOps Pipelines Extension☆26Updated 3 months ago
- Example of using Actions OIDC token to proxy into a private network☆91Updated last week
- Supply Chain Integrity Model☆104Updated last year
- Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.☆21Updated 2 weeks ago
- Prevent leaks with gitleaks, and use tests to validate☆32Updated 2 months ago
- GitHub Secret Scanning Auto Remediator (GSSAR)☆44Updated last year
- Manage a uniform team of security managers for every organization in your enterprise☆17Updated 3 months ago
- This repository contains a sample script which can be used to enable security vulnerability alerts in all of the repositories in a given …☆79Updated last month
- Repository for the generation of OSCAL data types☆18Updated this week
- Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.☆21Updated last year
- Utility for bulk image, license, package, and vulnerability discovery in containerize workloads on GCP. Includes CLI and Service with cus…☆13Updated 9 months ago
- Sysdig Terraform provider. Allow to handle Sysdig Secure policies as code.☆49Updated this week
- An SBOM query language and associated utilities☆54Updated 10 months ago
- TUF repository for Sigstore trust root☆90Updated this week
- CDF Community Ambassador Program: charter, guidelines, application, and meeting details☆17Updated 7 months ago
- ☆61Updated 4 months ago
- Generate SBOMs with gh CLI☆167Updated 2 months ago
- ☆18Updated 5 months ago
- ☆26Updated this week
- ☆14Updated last year
- Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts☆32Updated 4 months ago
- Resources for preparing to, and implementing SAML with GitHub Enterprise.☆35Updated 3 years ago
- General sigstore community repo☆38Updated this week
- Technical Advisory Council☆109Updated last week
- 🥑 Inspect and understand an organization's software supply chain that enables stakeholders to make actionable decisions about software s…☆17Updated 7 months ago
- Proof-of-concept SLSA provenance generator for GitHub Actions☆99Updated 2 years ago
- GCP PCI-DSS 3.2.1 InSpec Profile☆18Updated 3 years ago