spdx / sbom-landscape
SPDX SBOM Landscape
☆16Updated last year
Alternatives and similar repositories for sbom-landscape:
Users that are interested in sbom-landscape are comparing it to the libraries listed below
- OCI-native Container Images to build your own☆11Updated 9 months ago
- ☆12Updated last year
- Helm Chart for deploying GUAC☆14Updated last month
- A Kubernetes-native Jenkins pipeline execution orchestrator.☆18Updated 11 months ago
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆60Updated this week
- Funding requests for project infrastructure, events, and consulting.☆17Updated last year
- GitOps workflow for managing app delivery on multiple clusters☆23Updated 5 years ago
- Various tools, images, etc. to support the Wolfi OSS project☆21Updated this week
- ☆19Updated last week
- Automation stack for the Concourse project's infrastructure.☆8Updated 3 months ago
- K8S Operator for Rekor☆20Updated last year
- ☆27Updated this week
- Utilities for interacting with Dockerfiles☆15Updated 3 years ago
- Automating Compliance Tooling Project☆20Updated 3 years ago
- Sigstore user stories☆29Updated last year
- ☆21Updated last year
- A High-Availability distribution of Knative.☆20Updated 11 months ago
- A modern, cloud native SCAP scanner.☆20Updated 3 years ago
- Interactions with the CDF Staff and Board☆30Updated last week
- Set of validating webhooks, based on k8s admission controllers, for OSD clusters☆18Updated 2 weeks ago
- Go implementation for CNAB content trust verification using TUF, Notary, and in-toto☆31Updated last year
- A tool that takes two or more micro SBOMs and composes them into one distributable SBOM☆23Updated last year
- torcx is a boot-time addon manager for immutable systems☆15Updated last year
- An example repository implementing an external LocalCA issuer type☆9Updated 3 years ago
- 🏆 CNCF Community Awards☆21Updated last week
- UI for zot registry☆13Updated last month
- Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.☆43Updated last year
- ytt (https://github.com/k14s/ytt) library that includes reusable K8s components (app, ...)☆22Updated 2 years ago
- A console to observe and manage Skupper installations☆9Updated last year