Alternatives and similar repositories for sbom-landscape

Users that are interested in sbom-landscape are comparing it to the libraries listed below

• kubernetes-sigs / tejolote
  A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.
  ☆65Updated this week
• deislabs / image-layer-provenance
  Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.
  ☆43Updated last year
• kubewarden / verify-image-signatures
  A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod
  ☆13Updated last week
• edgebitio / edgebit-agent
  Linux agent used to submit realtime SBOMs and dependency usage information to EdgeBit
  ☆14Updated 8 months ago
• kubernetes-sigs / depstat
  depstat is a dependency analyzer for Go modules enabled projects. It runs as part of the Kubernetes CI pipeline to help evaluate dependen…
  ☆36Updated 11 months ago
• cncf / awards
  🏆 CNCF Community Awards
  ☆25Updated last month
• kusaridev / spector
  Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks
  ☆33Updated 5 months ago
• anchore / kubernetes-admission-controller
  Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore
  ☆65Updated last week
• didil / autobucket-operator
  Cloud Storage Kubernetes Operator with Go and Operator SDK
  ☆12Updated 4 years ago
• hermetoproject / hermeto
  Hermeto is a CLI tool that prefetches your project dependencies to aid in making your container build process hermetic.
  ☆22Updated this week
• philips-labs / spiffe-vault
  Integrates Spiffe and Vault to have secretless authentication
  ☆92Updated this week
• slsa-framework / slsa-github-generator-go
  ☆57Updated 3 years ago
• oras-project / artifacts-spec
  ☆64Updated last year
• philips-software / SPDXMerge
  SPDX Merge tool
  ☆47Updated 5 months ago
• ossf / security-assessments
  ☆15Updated last month
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆45Updated 2 years ago
• act-project / TAC
  Automating Compliance Tooling Project
  ☆22Updated 3 years ago
• kapicorp / tesoro
  Kapitan Admission Controller Webhook for secrets mgmt
  ☆37Updated 9 months ago
• square / spiffe-aws-assume-role
  This tool allows using a SPIFFE JWT to authenticate to AWS APIs
  ☆34Updated 2 months ago
• philips-labs / dct-notary-admin
  To manage Docker Content Trust and Notary certificates
  ☆13Updated last week
• wolfi-dev / wolfictl
  A CLI used to work with the Wolfi OSS project
  ☆67Updated this week
• sigstore / sget
  ☆23Updated 2 years ago
• cyralinc / brewOPA
  A data access control framework for Open Policy Agent
  ☆37Updated last year
• observatorium / operator
  Operator deploying the Observatorium project
  ☆14Updated last year
• bmcustodio / kubectl-topology
  A 'kubectl' plugin that provides insight into the topology of a Kubernetes cluster.
  ☆35Updated 2 years ago
• alcideio / kaudit
  Alcide Kubernetes Audit Log Analyzer - Alcide kAudit
  ☆36Updated 4 years ago
• tokenetes / tokenetes
  Transaction Tokens Service
  ☆45Updated 2 months ago
• cncf / clomonitor
  CLOMonitor is a tool that periodically checks open source projects repositories to verify they meet certain project health best practices
  ☆139Updated this week
• sigstore / friends
  Sigstore user stories
  ☆30Updated 2 years ago
• rode / rode-legacy
  cloud native software supply chain ☁️🔗
  ☆63Updated 4 years ago