A proof-of-concept SLSA provenance generator for Jenkins
☆25Jul 29, 2024Updated 2 years ago
Alternatives and similar repositories for slsa-jenkins-generator
Users that are interested in slsa-jenkins-generator are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- fatt tries to find any purl in your project by looking at predefined fields in the supported packages. These fields describe using a purl…☆11Updated this week
- SLSA Proposals☆13Jan 29, 2024Updated 2 years ago
- SLSA Azure DevOps Pipelines Extension☆30Apr 7, 2026Updated 6 months ago
- ☆15Jun 24, 2026Updated 4 months ago
- Give kudos and share some kind words with anyone in your workspace☆16Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆14Dec 12, 2022Updated 3 years ago
- vexctl is a tool to attest VEX impact statements☆45Mar 27, 2023Updated 3 years ago
- Reports on the licenses used by a Go package and its dependencies.☆11Jul 24, 2024Updated 2 years ago
- Google Container Analysis data import utility, supports OSS vulnerability scanner reports, SLSA provenance and sigstore attestations.☆12Dec 5, 2025Updated 10 months ago
- A specification for signing methods and formats used by Secure Systems Lab projects.☆114Oct 9, 2026Updated 3 weeks ago
- SLSA implementation of Community Specification governance☆29Aug 11, 2026Updated 2 months ago
- Docs to ingest in GUAC☆11Oct 25, 2026Updated last week
- Github Action implementation of SLSA Provenance Generation☆50Oct 19, 2026Updated last week
- A docker CLI plugin for verifying signed attestations on images☆13Oct 27, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- in-toto Enhancements☆22Feb 17, 2025Updated last year
- Demos and resources of the Istio + Gatekeeper talks at IstioCon 2022 and GitOpsCon 2022☆15Sep 4, 2023Updated 3 years ago
- sigstore installation walkthrough, local☆63Dec 8, 2025Updated 10 months ago
- Proof-of-concept SLSA provenance generator for GitHub Actions☆100Nov 1, 2022Updated 4 years ago
- ☆13Apr 15, 2024Updated 2 years ago
- For the Linux Foundation Events website events.linuxfoundation.org☆25Updated this week
- Lambda function for verifying signed images in ECS☆39Mar 9, 2024Updated 2 years ago
- ☆11Nov 11, 2022Updated 3 years ago
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆34Apr 22, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆26Aug 31, 2023Updated 3 years ago
- Repository for on-going work as part of the SBOM for AI Tiger Team effort.☆42Jul 28, 2025Updated last year
- Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts☆19Sep 11, 2026Updated last month
- ☆26Oct 8, 2021Updated 5 years ago
- How small can a Java application container image be☆21Feb 17, 2023Updated 3 years ago
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆615Updated this week
- A Trivy plugin that scans the images of a kubernetes resource☆25May 13, 2024Updated 2 years ago
- Helm charts for verifying artifact attestations in Kubernetes☆25Updated this week
- OCI Working Group: Reference Types☆24Aug 25, 2022Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Preview, post, and manage announcements sent to one or more channels☆47Updated this week
- The model for the information captured in SPDX version 3 standard.☆106Updated this week
- ☆22Jul 1, 2026Updated 4 months ago
- OCI registry client - managing content like artifacts, images, packages☆13Dec 4, 2024Updated last year
- ☆261Updated this week
- The S2C2F Project is a group working within the OpenSSF's Supply Chain Integrity Working Group formed to further develop and continuously…☆245May 26, 2025Updated last year
- Protocol Buffer specifications☆37Updated this week