Alternatives and similar repositories for go-ima

Users that are interested in go-ima are comparing it to the libraries listed below

• testifysec / solarsploit
  Red team tool that emulates the SolarWinds CI compromise attack vector.
  ☆24Updated last year
• testifysec / witness-examples
  Witness Examples
  ☆11Updated last year
• rancher / wrangler-cli
  A trivial wrapper around spf13/cobra to simplify some basic patterns
  ☆22Updated last year
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆44Updated 2 years ago
• puerco / bomshell
  An query language and interactive tooling to work with SBOM data.
  ☆14Updated 9 months ago
• tap8stry / orion
  Go beyond package manager discovery for SBOM
  ☆18Updated 3 years ago
• appvia / cosign-keyless-admission-webhook
  Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect
  ☆23Updated last week
• sigstore / friends
  Sigstore user stories
  ☆30Updated last year
• kubeshield / bpf-opa-demo
  ☆33Updated 5 months ago
• openpubkey / verify-docker-cli-plugin
  A docker CLI plugin for verifying signed attestations on images
  ☆13Updated last year
• cilium / certgen
  A convenience tool to generate and store certificates for Hubble Relay mTLS
  ☆27Updated 2 weeks ago
• xebia / falco-eks-audit-bridge
  Enable Falco to read audit logs from EKS
  ☆11Updated 4 years ago
• gowebpki / jcs
  A golang JSON canonicalization scheme library based on RFC 8785
  ☆23Updated last year
• jmhodges / kustomize-age
  A kustomize plugin for using age encrypted files in Secrets
  ☆17Updated 3 months ago
• capnspacehook / gorepro
  Easily reproduce Go binaries
  ☆33Updated last year
• goreleaser / example-supply-chain
  Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations
  ☆58Updated last week
• hasheddan / veneer
  A library for representing OCI image layers in an abstract filesystem
  ☆27Updated 5 years ago
• raesene / teisteanas
  ☆21Updated 2 months ago
• mhausenblas / the-container-security-book
  The Container Security Book—a free book for practitioners
  ☆83Updated 5 years ago
• siderolabs / kres
  Tool to automate build instructions generation
  ☆33Updated last week
• deislabs / image-layer-provenance
  Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.
  ☆43Updated last year
• kelseyhightower / buildinfo-example
  ☆17Updated 3 years ago
• tks98 / snoopy
  Inspect SSL/TLS traffic using eBPF
  ☆19Updated 9 months ago
• nonstandardlogic / kubevscan
  Kubernetes security scanner based on the open-source container vulnerability scanner Trivy.
  ☆23Updated 4 years ago
• xfernando / go2seccomp
  Generate seccomp profiles from go binaries
  ☆135Updated 7 years ago
• google / containerdbg
  ☆74Updated 2 months ago
• fntlnz / falco-inject
  Inject Falco and pdig into a running kubernetes pod
  ☆13Updated 5 years ago
• philips-labs / spiffe-vault
  Integrates Spiffe and Vault to have secretless authentication
  ☆90Updated last week
• zawachte / etcd-k8s-extract
  etcd-k8s-extract takes in an etcd data directory or db file used in kubernetes, extracts the kubernetes resources and then writes the res…
  ☆37Updated 6 months ago
• philips-labs / dct-notary-admin
  To manage Docker Content Trust and Notary certificates
  ☆13Updated last month