Alternatives and similar repositories for python-tuf

Users that are interested in python-tuf are comparing it to the libraries listed below

• notaryproject / notary
  Notary is a project that allows anyone to have trust over arbitrary collections of data
  ☆3,282Updated last year
• grafeas / grafeas
  Artifact Metadata API
  ☆1,558Updated 2 weeks ago
• theupdateframework / specification
  The Update Framework specification
  ☆396Updated last year
• spiffe / spiffe
  The SPIFFE Project
  ☆1,679Updated last week
• in-toto / in-toto
  in-toto is a framework to protect supply chain integrity.
  ☆965Updated this week
• genuinetools / bane
  Custom & better AppArmor profile generator for Docker containers.
  ☆1,224Updated 5 years ago
• tern-tools / tern
  Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dock…
  ☆1,009Updated last year
• spiffe / spire
  The SPIFFE Runtime Environment
  ☆2,157Updated last week
• fossas / fossa-cli
  Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Langua…
  ☆1,450Updated last week
• sigstore / rekor
  Software Supply Chain Transparency Log
  ☆1,048Updated last week
• pinterest / knox
  Knox is a secret management service
  ☆1,254Updated 7 months ago
• solo-io / unik
  The Unikernel & MicroVM Compilation and Deployment Platform
  ☆2,786Updated 2 years ago
• cloudflare / redoctober
  Go server for two-man rule style file encryption and decryption.
  ☆1,413Updated last year
• Netflix / lemur
  Repository for the Lemur Certificate Manager
  ☆1,762Updated last week
• coreinfrastructure / best-practices-badge
  🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)
  ☆1,304Updated last week
• opencontainers / umoci
  umoci modifies Open Container images
  ☆871Updated this week
• grafeas / kritis
  Deploy-time Policy Enforcer for Kubernetes applications
  ☆707Updated 3 weeks ago
• parallaxsecond / parsec
  Platform AbstRaction for SECurity service
  ☆500Updated 7 months ago
• lyft / confidant
  Confidant: your secret keeper. https://lyft.github.io/confidant
  ☆1,856Updated 10 months ago
• cnabio / cnab-spec
  Cloud Native Application Bundle Specification
  ☆971Updated 3 years ago
• anchore / anchore-engine
  A service that analyzes docker images and scans for vulnerabilities
  ☆1,593Updated 2 years ago
• appc / spec
  App Container Specification and Tooling (archived, see https://github.com/rkt/rkt/issues/4024)
  ☆1,257Updated 7 years ago
• sigstore / fulcio
  Sigstore OIDC PKI
  ☆778Updated last week
• genuinetools / img
  Standalone, daemon-less, unprivileged Dockerfile and OCI compatible container image builder.
  ☆3,981Updated last year
• square / keywhiz
  A system for distributing and managing secrets
  ☆2,624Updated 2 years ago
• buildkite / agent
  The Buildkite Agent is an open-source toolkit written in Go for securely running build jobs on any device or network
  ☆906Updated last week
• cyberark / summon
  CLI that provides on-demand secrets access for common DevOps tools
  ☆753Updated 2 weeks ago
• slsa-framework / slsa
  Supply-chain Levels for Software Artifacts
  ☆1,783Updated last week
• genuinetools / amicontained
  Container introspection tool. Find out what container runtime is being used as well as features available.
  ☆1,063Updated 5 years ago
• genuinetools / contained.af
  A stupid game for learning about containers, capabilities, and syscalls.
  ☆906Updated 2 years ago