Alternatives and similar repositories for sbom-landscape

Users that are interested in sbom-landscape are comparing it to the libraries listed below

• kubernetes-sigs / tejolote
  A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
  ☆64Updated this week
• anchore / kubernetes-admission-controller
  Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore
  ☆65Updated last week
• cncf / awards
  🏆 CNCF Community Awards
  ☆24Updated 2 months ago
• deislabs / image-layer-provenance
  Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.
  ☆43Updated last year
• kubewarden / verify-image-signatures
  A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod
  ☆13Updated this week
• edgebitio / edgebit-agent
  Linux agent used to submit realtime SBOMs and dependency usage information to EdgeBit
  ☆14Updated 6 months ago
• bmcustodio / kubectl-topology
  A 'kubectl' plugin that provides insight into the topology of a Kubernetes cluster.
  ☆35Updated 2 years ago
• sigstore / friends
  Sigstore user stories
  ☆30Updated last year
• philips-labs / spiffe-vault
  Integrates Spiffe and Vault to have secretless authentication
  ☆90Updated last week
• kubernetes-sigs / depstat
  depstat is a dependency analyzer for Go modules enabled projects. It runs as part of the Kubernetes CI pipeline to help evaluate dependen…
  ☆36Updated 9 months ago
• didil / autobucket-operator
  Cloud Storage Kubernetes Operator with Go and Operator SDK
  ☆12Updated 4 years ago
• observatorium / operator
  Operator deploying the Observatorium project
  ☆14Updated last year
• philips-software / SPDXMerge
  SPDX Merge tool
  ☆46Updated 3 months ago
• kapicorp / tesoro
  Kapitan Admission Controller Webhook for secrets mgmt
  ☆37Updated 7 months ago
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆45Updated 2 years ago
• stakater / slack-operator
  Kubernetes operator for Slack
  ☆20Updated 3 weeks ago
• kubernetes-sigs / apisnoop
  ⭕️Snooping on the Kubernetes OpenAPI communications
  ☆95Updated this week
• ondat / discoblocks
  Open Source declarative disk configuration system for Kubernetes
  ☆40Updated 2 years ago
• hermetoproject / hermeto
  Hermeto is a CLI tool that prefetches your project dependencies to aid in making your container build process hermetic.
  ☆19Updated this week
• guacsec / helm-charts
  Helm Chart for deploying GUAC
  ☆18Updated 2 months ago
• philips-labs / dct-notary-admin
  To manage Docker Content Trust and Notary certificates
  ☆13Updated last week
• submariner-io / shipyard
  Framework and scripts to create multiple Kubernetes clusters with kind (K8s in Docker) for local E2E testing and development.
  ☆55Updated this week
• kusaridev / spector
  Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks
  ☆32Updated 3 months ago
• chimera-kube / chimera-admission
  A Kubernetes dynamic admission controller that uses WebAssembly policies to validate incoming requests
  ☆25Updated 4 years ago
• vdemeester / buildkit-tekton
  Buildkit frontend to run Tekton objects locally as well as a tkn plugins
  ☆29Updated 9 months ago
• rode / rode-legacy
  cloud native software supply chain ☁️🔗
  ☆63Updated 4 years ago
• in-toto / attestation-verifier
  Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts
  ☆16Updated this week
• kubernetes-sigs / release-utils
  ☆20Updated this week
• project-zot / zui
  UI for zot registry
  ☆13Updated last month
• cloud-native-nordics / workshopctl
  A tool to run workshops with
  ☆42Updated 2 years ago