testifysec / go-ima
go-ima is a tool that checks if a file has been tampered with. It is useful in ensuring integrity in CI systems
☆13Updated last year
Alternatives and similar repositories for go-ima:
Users that are interested in go-ima are comparing it to the libraries listed below
- Red team tool that emulates the SolarWinds CI compromise attack vector.☆22Updated 11 months ago
- An query language and interactive tooling to work with SBOM data.☆14Updated 4 months ago
- A trivial wrapper around spf13/cobra to simplify some basic patterns☆22Updated last year
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆23Updated this week
- vexctl is a tool to attest VEX impact statements☆44Updated last year
- TACOS framework structural details☆20Updated last year
- Kubernetes security scanner based on the open-source container vulnerability scanner Trivy.☆23Updated 4 years ago
- A library for representing OCI image layers in an abstract filesystem☆27Updated 4 years ago
- ☆24Updated last year
- A kustomize plugin for using age encrypted files in Secrets☆15Updated 2 months ago
- Kubernetes tools in a "distroless" container☆13Updated last year
- A curated list of awesome CNAB (Cloud Native Applications Bundles) | https://cnab.io/☆15Updated 4 years ago
- ☆19Updated 5 months ago
- replace a k8s deployment by a proxy to a pod in another cluster☆10Updated 3 years ago
- ☆21Updated last year
- ☆20Updated 6 months ago
- Go implementation of witness☆30Updated this week
- A lightweight CLI tool that finds system calls being called inside golang applications.☆31Updated 3 years ago
- ☆20Updated 9 months ago
- Sigstore user stories☆29Updated last year
- ☆33Updated 2 weeks ago
- Home of code related to security of network systems.☆23Updated 3 weeks ago
- Tool to automate build instructions generation☆30Updated last week
- Go beyond package manager discovery for SBOM☆19Updated 2 years ago
- This tool allows using a SPIFFE JWT to authenticate to AWS APIs☆34Updated 8 months ago
- Inject Falco and pdig into a running kubernetes pod☆13Updated 4 years ago
- A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources☆15Updated this week
- The Container Security Book—a free book for practitioners☆82Updated 4 years ago
- A golang JSON canonicalization scheme library based on RFC 8785☆21Updated last year