Alternatives and similar repositories for sbom-landscape

Users that are interested in sbom-landscape are comparing it to the libraries listed below

• kubernetes-sigs / tejolote
  A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
  ☆65Updated this week
• kubernetes-sigs / depstat
  depstat is a dependency analyzer for Go modules enabled projects. It runs as part of the Kubernetes CI pipeline to help evaluate dependen…
  ☆36Updated 9 months ago
• deislabs / image-layer-provenance
  Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.
  ☆43Updated last year
• anchore / kubernetes-admission-controller
  Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore
  ☆65Updated this week
• kubernetes-sigs / release-utils
  ☆20Updated this week
• kusaridev / spector
  Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks
  ☆32Updated 4 months ago
• philips-software / SPDXMerge
  SPDX Merge tool
  ☆47Updated 4 months ago
• SAP / stewardci-core
  A Kubernetes-native Jenkins pipeline execution orchestrator.
  ☆18Updated 5 months ago
• edgebitio / edgebit-agent
  Linux agent used to submit realtime SBOMs and dependency usage information to EdgeBit
  ☆14Updated 7 months ago
• philips-labs / spiffe-vault
  Integrates Spiffe and Vault to have secretless authentication
  ☆92Updated this week
• openvex / go-vex
  Go module to generate and transform VEX documents
  ☆46Updated last week
• chainguard-dev / policy-catalog
  ☆20Updated 2 months ago
• philips-labs / dct-notary-admin
  To manage Docker Content Trust and Notary certificates
  ☆13Updated last week
• oras-project / artifacts-spec
  ☆64Updated last year
• sigstore / friends
  Sigstore user stories
  ☆30Updated 2 years ago
• cncf / awards
  🏆 CNCF Community Awards
  ☆24Updated 3 months ago
• in-toto / attestation-verifier
  Prototype in-toto attestation verifier based on ITE-10 and ITE-11 layouts
  ☆16Updated this week
• cncf / clomonitor
  CLOMonitor is a tool that periodically checks open source projects repositories to verify they meet certain project health best practices
  ☆136Updated last week
• che-incubator / kubernetes-image-puller-operator
  ☆21Updated last month
• wolfi-dev / wolfictl
  A CLI used to work with the Wolfi OSS project
  ☆66Updated this week
• estesp / buildkit-cluster-example
  Simple example for using an in-cluster BuildKit instance for container builds
  ☆19Updated 6 years ago
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆45Updated 2 years ago
• didil / autobucket-operator
  Cloud Storage Kubernetes Operator with Go and Operator SDK
  ☆12Updated 4 years ago
• sigstore / protobuf-specs
  Sigstore's Protocol Buffer specifications
  ☆33Updated this week
• puerco / bomshell
  An query language and interactive tooling to work with SBOM data.
  ☆14Updated 10 months ago
• bmcustodio / kubectl-topology
  A 'kubectl' plugin that provides insight into the topology of a Kubernetes cluster.
  ☆35Updated 2 years ago
• submariner-io / shipyard
  Framework and scripts to create multiple Kubernetes clusters with kind (K8s in Docker) for local E2E testing and development.
  ☆56Updated this week
• project-zot / zui
  UI for zot registry
  ☆13Updated last month
• sigstore / scaffolding
  Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.
  ☆68Updated last week
• slsa-framework / slsa-github-generator-go
  ☆57Updated 3 years ago