Alternatives and similar repositories for python-tuf

Users that are interested in python-tuf are comparing it to the libraries listed below

• notaryproject / notary
  Notary is a project that allows anyone to have trust over arbitrary collections of data
  ☆3,281Updated last year
• grafeas / grafeas
  Artifact Metadata API
  ☆1,556Updated last week
• genuinetools / bane
  Custom & better AppArmor profile generator for Docker containers.
  ☆1,223Updated 5 years ago
• in-toto / in-toto
  in-toto is a framework to protect supply chain integrity.
  ☆960Updated last week
• spiffe / spiffe
  The SPIFFE Project
  ☆1,667Updated this week
• theupdateframework / specification
  The Update Framework specification
  ☆394Updated last year
• tern-tools / tern
  Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dock…
  ☆1,008Updated last year
• spiffe / spire
  The SPIFFE Runtime Environment
  ☆2,134Updated this week
• solo-io / unik
  The Unikernel & MicroVM Compilation and Deployment Platform
  ☆2,783Updated 2 years ago
• pinterest / knox
  Knox is a secret management service
  ☆1,253Updated 6 months ago
• cloudflare / redoctober
  Go server for two-man rule style file encryption and decryption.
  ☆1,412Updated last year
• coreinfrastructure / best-practices-badge
  🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)
  ☆1,298Updated last week
• anchore / anchore-engine
  A service that analyzes docker images and scans for vulnerabilities
  ☆1,590Updated 2 years ago
• gravitational / gravity
  Kubernetes application deployments for restricted, regulated, or remote environments
  ☆1,080Updated 2 years ago
• square / keywhiz
  A system for distributing and managing secrets
  ☆2,623Updated 2 years ago
• Netflix / lemur
  Repository for the Lemur Certificate Manager
  ☆1,759Updated last week
• sigstore / rekor
  Software Supply Chain Transparency Log
  ☆1,037Updated last week
• slsa-framework / slsa
  Supply-chain Levels for Software Artifacts
  ☆1,766Updated last week
• appc / spec
  App Container Specification and Tooling (archived, see https://github.com/rkt/rkt/issues/4024)
  ☆1,257Updated 7 years ago
• parallaxsecond / parsec
  Platform AbstRaction for SECurity service
  ☆500Updated 6 months ago
• opencontainers / umoci
  umoci modifies Open Container images
  ☆858Updated last week
• genuinetools / binctr
  Fully static, unprivileged, self-contained, containers as executable binaries.
  ☆2,519Updated 6 years ago
• lyft / confidant
  Confidant: your secret keeper. https://lyft.github.io/confidant
  ☆1,856Updated 9 months ago
• genuinetools / amicontained
  Container introspection tool. Find out what container runtime is being used as well as features available.
  ☆1,057Updated 4 years ago
• google / lmctfy
  lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
  ☆3,414Updated 10 years ago
• fossas / fossa-cli
  Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Langua…
  ☆1,440Updated this week
• grafeas / kritis
  Deploy-time Policy Enforcer for Kubernetes applications
  ☆706Updated last week
• cnabio / cnab-spec
  Cloud Native Application Bundle Specification
  ☆971Updated 3 years ago
• cyberark / summon
  CLI that provides on-demand secrets access for common DevOps tools
  ☆753Updated last week
• draios / sysdig-inspect
  Sysdig Inspect - A powerful opensource interface for container troubleshooting and security investigation
  ☆995Updated 6 months ago