Alternatives and similar repositories for python-tuf

Users that are interested in python-tuf are comparing it to the libraries listed below

• notaryproject / notary
  Notary is a project that allows anyone to have trust over arbitrary collections of data
  ☆3,284Updated last year
• tern-tools / tern
  Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dock…
  ☆1,010Updated last year
• grafeas / grafeas
  Artifact Metadata API
  ☆1,562Updated last month
• in-toto / in-toto
  in-toto is a framework to protect supply chain integrity.
  ☆966Updated last week
• theupdateframework / specification
  The Update Framework specification
  ☆397Updated last year
• genuinetools / bane
  Custom & better AppArmor profile generator for Docker containers.
  ☆1,226Updated 5 years ago
• spiffe / spiffe
  The SPIFFE Project
  ☆1,685Updated this week
• fossas / fossa-cli
  Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Langua…
  ☆1,456Updated this week
• spiffe / spire
  The SPIFFE Runtime Environment
  ☆2,176Updated this week
• pinterest / knox
  Knox is a secret management service
  ☆1,254Updated this week
• Netflix / lemur
  Repository for the Lemur Certificate Manager
  ☆1,762Updated 3 weeks ago
• draios / sysdig-inspect
  Sysdig Inspect - A powerful opensource interface for container troubleshooting and security investigation
  ☆998Updated 8 months ago
• sigstore / rekor
  Software Supply Chain Transparency Log
  ☆1,061Updated last week
• coreinfrastructure / best-practices-badge
  🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)
  ☆1,309Updated this week
• square / certstrap
  Tools to bootstrap CAs, certificate requests, and signed certificates.
  ☆2,429Updated last month
• anchore / anchore-engine
  A service that analyzes docker images and scans for vulnerabilities
  ☆1,594Updated 2 years ago
• cyberark / summon
  CLI that provides on-demand secrets access for common DevOps tools
  ☆752Updated last month
• solo-io / unik
  The Unikernel & MicroVM Compilation and Deployment Platform
  ☆2,792Updated 2 years ago
• genuinetools / amicontained
  Container introspection tool. Find out what container runtime is being used as well as features available.
  ☆1,067Updated 5 years ago
• cloudflare / redoctober
  Go server for two-man rule style file encryption and decryption.
  ☆1,414Updated last year
• slsa-framework / slsa
  Supply-chain Levels for Software Artifacts
  ☆1,783Updated 2 weeks ago
• square / keywhiz
  A system for distributing and managing secrets
  ☆2,623Updated 2 years ago
• opencontainers / umoci
  umoci modifies Open Container images
  ☆873Updated this week
• grafeas / kritis
  Deploy-time Policy Enforcer for Kubernetes applications
  ☆707Updated last month
• genuinetools / img
  Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
  ☆3,979Updated last year
• slackhq / go-audit
  go-audit is an alternative to the auditd daemon that ships with many distros
  ☆1,653Updated 3 weeks ago
• genuinetools / contained.af
  A stupid game for learning about containers, capabilities, and syscalls.
  ☆904Updated 2 years ago
• google / lmctfy
  lmctfy is the open source version of Google’s container stack, which provides Linux application containers.
  ☆3,413Updated 10 years ago
• gravitational / gravity
  Kubernetes application deployments for restricted, regulated, or remote environments
  ☆1,080Updated 2 years ago
• docker-archive / deploykit
  A toolkit for creating and managing declarative, self-healing infrastructure.
  ☆2,261Updated 7 years ago