Alternatives and similar repositories for python-tuf

Users that are interested in python-tuf are comparing it to the libraries listed below

• notaryproject / notary
  Notary is a project that allows anyone to have trust over arbitrary collections of data
  ☆3,285Updated last year
• grafeas / grafeas
  Artifact Metadata API
  ☆1,563Updated last week
• tern-tools / tern
  Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dock…
  ☆1,013Updated last year
• in-toto / in-toto
  in-toto is a framework to protect supply chain integrity.
  ☆970Updated last week
• genuinetools / bane
  Custom & better AppArmor profile generator for Docker containers.
  ☆1,227Updated 5 years ago
• theupdateframework / specification
  The Update Framework specification
  ☆398Updated 2 weeks ago
• spiffe / spiffe
  The SPIFFE Project
  ☆1,701Updated last week
• spiffe / spire
  The SPIFFE Runtime Environment
  ☆2,199Updated this week
• sigstore / rekor
  Software Supply Chain Transparency Log
  ☆1,068Updated last week
• fossas / fossa-cli
  Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Langua…
  ☆1,465Updated this week
• solo-io / unik
  The Unikernel & MicroVM Compilation and Deployment Platform
  ☆2,796Updated 2 years ago
• pinterest / knox
  Knox is a secret management service
  ☆1,256Updated 3 weeks ago
• opencontainers / umoci
  umoci modifies Open Container images
  ☆878Updated 3 weeks ago
• appc / spec
  App Container Specification and Tooling (archived, see https://github.com/rkt/rkt/issues/4024)
  ☆1,256Updated 8 years ago
• coreinfrastructure / best-practices-badge
  🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)
  ☆1,316Updated this week
• anchore / anchore-engine
  A service that analyzes docker images and scans for vulnerabilities
  ☆1,593Updated 3 years ago
• genuinetools / binctr
  Fully static, unprivileged, self-contained, containers as executable binaries.
  ☆2,520Updated 6 years ago
• cloudflare / redoctober
  Go server for two-man rule style file encryption and decryption.
  ☆1,415Updated last year
• genuinetools / img
  Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
  ☆3,983Updated last year
• square / certstrap
  Tools to bootstrap CAs, certificate requests, and signed certificates.
  ☆2,432Updated 2 weeks ago
• genuinetools / contained.af
  A stupid game for learning about containers, capabilities, and syscalls.
  ☆904Updated 2 years ago
• square / keywhiz
  A system for distributing and managing secrets
  ☆2,625Updated 2 years ago
• ehazlett / stellar
  Simplified Container System
  ☆1,136Updated 3 years ago
• grafeas / kritis
  Deploy-time Policy Enforcer for Kubernetes applications
  ☆707Updated 2 months ago
• draios / sysdig-inspect
  Sysdig Inspect - A powerful opensource interface for container troubleshooting and security investigation
  ☆998Updated 8 months ago
• slsa-framework / slsa
  Supply-chain Levels for Software Artifacts
  ☆1,803Updated this week
• docker-archive / deploykit
  A toolkit for creating and managing declarative, self-healing infrastructure.
  ☆2,262Updated 7 years ago
• moby / datakit
  Connect processes into powerful data pipelines with a simple git-like filesystem interface
  ☆1,107Updated 2 years ago
• google / lmctfy
  lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
  ☆3,412Updated 10 years ago
• sigstore / fulcio
  Sigstore OIDC PKI
  ☆796Updated this week