Framework to secure the integrity of software supply chains
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Notary is a project that allows anyone to have trust over arbitrary collections of data
Chart signing and verification with GnuPG for Helm.
Open artifact metadata API to audit and govern your software supply chain