Alternatives and similar repositories for python-tuf

Users that are interested in python-tuf are comparing it to the libraries listed below

• notaryproject / notary
  Notary is a project that allows anyone to have trust over arbitrary collections of data
  ☆3,284Updated last year
• grafeas / grafeas
  Artifact Metadata API
  ☆1,551Updated 2 weeks ago
• tern-tools / tern
  Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dock…
  ☆1,004Updated last year
• genuinetools / bane
  Custom & better AppArmor profile generator for Docker containers.
  ☆1,220Updated 5 years ago
• theupdateframework / specification
  The Update Framework specification
  ☆393Updated last year
• spiffe / spiffe
  The SPIFFE Project
  ☆1,652Updated this week
• in-toto / in-toto
  in-toto is a framework to protect supply chain integrity.
  ☆957Updated this week
• spiffe / spire
  The SPIFFE Runtime Environment
  ☆2,106Updated this week
• coreinfrastructure / best-practices-badge
  🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)
  ☆1,294Updated this week
• cloudflare / redoctober
  Go server for two-man rule style file encryption and decryption.
  ☆1,411Updated last year
• solo-io / unik
  The Unikernel & MicroVM Compilation and Deployment Platform
  ☆2,780Updated 2 years ago
• pinterest / knox
  Knox is a secret management service
  ☆1,252Updated 5 months ago
• google / keytransparency
  A transparent and secure way to look up public keys.
  ☆1,573Updated 4 years ago
• fossas / fossa-cli
  Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Langua…
  ☆1,435Updated this week
• anchore / anchore-engine
  A service that analyzes docker images and scans for vulnerabilities
  ☆1,590Updated 2 years ago
• grafeas / kritis
  Deploy-time Policy Enforcer for Kubernetes applications
  ☆707Updated 6 months ago
• appc / spec
  App Container Specification and Tooling (archived, see https://github.com/rkt/rkt/issues/4024)
  ☆1,257Updated 7 years ago
• sigstore / rekor
  Software Supply Chain Transparency Log
  ☆1,025Updated this week
• draios / sysdig-inspect
  Sysdig Inspect - A powerful opensource interface for container troubleshooting and security investigation
  ☆993Updated 5 months ago
• opencontainers / umoci
  umoci modifies Open Container images
  ☆856Updated this week
• square / keywhiz
  A system for distributing and managing secrets
  ☆2,621Updated 2 years ago
• google / lmctfy
  lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
  ☆3,414Updated 10 years ago
• lyft / confidant
  Confidant: your secret keeper. https://lyft.github.io/confidant
  ☆1,856Updated 8 months ago
• cnabio / cnab-spec
  Cloud Native Application Bundle Specification
  ☆971Updated 3 years ago
• Netflix / lemur
  Repository for the Lemur Certificate Manager
  ☆1,758Updated 2 weeks ago
• uber / pam-ussh
  uber's ssh certificate pam module
  ☆863Updated 2 years ago
• slsa-framework / slsa
  Supply-chain Levels for Software Artifacts
  ☆1,746Updated last week
• cyberark / summon
  CLI that provides on-demand secrets access for common DevOps tools
  ☆748Updated 2 weeks ago
• genuinetools / img
  Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
  ☆3,979Updated last year
• genuinetools / binctr
  Fully static, unprivileged, self-contained, containers as executable binaries.
  ☆2,518Updated 6 years ago