Alternatives and similar repositories for viss

Users that are interested in viss are comparing it to the libraries listed below

• SBOMit / specification
  ☆62Updated 11 months ago
• in-toto / community
  in-toto is a framework to secure the software supply chain.
  ☆70Updated 5 months ago
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated last year
• jetstack / tally
  ☆14Updated last year
• IBM / sbom-utility
  This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility
  ☆60Updated 2 years ago
• CycloneDX / sbom-combiner
  Lockheed Martin developed utility to combine multiple CycloneDX SBOMs
  ☆12Updated 2 years ago
• CycloneDX / cyclonedx-bom-repo-server
  A BOM repository server for distributing CycloneDX BOMs
  ☆77Updated last year
• hexa-org / policy-orchestrator
  Hexa Policy Orchestrator enables you to manage all of your access policies consistently across software providers.
  ☆102Updated last month
• DependencyTrack / gh-upload-sbom
  Publishes BOMs to Dependency-Track from GitHub Actions
  ☆54Updated 8 months ago
• omnibor / site
  Website for OmniBOR, reproducible identifiers & fine-grained build dependency tracking for software artifacts.
  ☆21Updated 5 months ago
• ossf / tac
  Technical Advisory Council
  ☆126Updated last week
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆44Updated 2 years ago
• openvex / spec
  OpenVEX Specification
  ☆152Updated 3 weeks ago
• CycloneDX / license-scanner
  Utility that provides an API and CLI to identify licenses and legal terms
  ☆50Updated 3 weeks ago
• snyk / parlay
  Enrich SBOMs with data from third party services
  ☆176Updated 2 months ago
• appvia / cosign-keyless-admission-webhook
  Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect
  ☆23Updated 3 weeks ago
• slsa-framework / github-actions-demo
  Proof-of-concept SLSA provenance generator for GitHub Actions
  ☆100Updated 2 years ago
• tacosframework / TACOS-spec
  TACOS framework structural details
  ☆20Updated last month
• snyk-tech-services / snyk2spdx
  ☆14Updated 2 years ago
• CycloneDX / sbom-utility
  Utility that provides an API platform for validating, querying and managing BOM data
  ☆114Updated 3 weeks ago
• praetorian-inc / snowcat
  a tool to audit the istio service mesh
  ☆173Updated 3 years ago
• hexa-org / policy
  Repository for development of IDQL Policy Language
  ☆14Updated 7 months ago
• knative-extensions / security-guard
  Runtime security plug to protect user containers
  ☆65Updated last week
• octo-sts / action
  ☆42Updated 7 months ago
• rallyhealth / conftest-policy-packs
  Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.
  ☆58Updated last year
• lirlia / prel
  prel(iminary) is an application that temporarily assigns Google Cloud IAM Roles and includes an approval process.
  ☆45Updated this week
• snyk-labs / helm-snyk
  Check images in your charts for vulnerabilities
  ☆41Updated this week
• anchore / vunnel
  Tool for collecting vulnerability data from various sources (used to build the grype database)
  ☆99Updated this week
• darkbitio / tools
  Darkbit Cloud Security Tools
  ☆25Updated 4 years ago
• ossf / ossf-landscape
  ☆29Updated last week