wagoodman / go-bouncerLinks
Reports on the licenses used by a Go package and its dependencies.
☆10Updated last year
Alternatives and similar repositories for go-bouncer
Users that are interested in go-bouncer are comparing it to the libraries listed below
Sorting:
- native go library for installation and management of apk packages☆31Updated last year
- ☆20Updated 7 months ago
- Transparenty Immutable Container Image Tags☆20Updated 2 years ago
- Helper methods for Magefiles☆32Updated 2 years ago
- A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.☆142Updated this week
- 🔍 Rekor transparency log monitoring and alerting☆27Updated 2 years ago
- Go SDK for CDEvents☆17Updated last month
- ☆58Updated 3 years ago
- Dynamic GitHub Actions from Wolfi packages☆44Updated 7 months ago
- Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.☆70Updated last week
- Example goreleaser + github actions config with keyless signing, SBOM generation, and attestations☆58Updated last week
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆70Updated 3 weeks ago
- Package cueconfig provides an API designed to make it straightforward to use the CUE language as a configuration format for Go programs.☆21Updated 10 months ago
- A collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications.☆42Updated 3 weeks ago
- Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)☆100Updated 2 months ago
- Go module to generate and transform VEX documents☆52Updated 3 weeks ago
- Keyless Git signing with cosign!☆11Updated 3 years ago
- Example repository that demonstrates a supply chain security workflow using Syft, Grype, Cosign☆12Updated 4 years ago
- Go library for Sigstore signing and verification☆18Updated 2 years ago
- Terraform provider for Sigstore Cosign☆12Updated 3 weeks ago
- Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.☆45Updated 2 years ago
- sigstore installation walkthrough, local☆62Updated last month
- Sigstore user stories☆30Updated 2 years ago
- Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-u…☆67Updated last week
- Trivy plugin for OCI referrers☆23Updated last year
- Collection of Go packages to work with SPDX files☆157Updated this week
- ☆22Updated last month
- ☆36Updated last year
- A CLI used to work with the Wolfi OSS project☆67Updated 2 weeks ago
- Go modules related to OCI (Open Container Initiative) registries☆34Updated 3 weeks ago