Sigstore

0 stars0 forks0 contributors

Overview

sigstore is a set of free to use and open source tools, including fulcio, cosign and rekor, handling digital signing, verification and checks for provenance needed to make it safer to distribute and use open source software

Related Projects

Community-curated · Updated weekly · 100% open source

Found a gem we're missing?

Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.

Submit a project Star on GitHub

Last commit

Created

Links & Resources

Website

Included in

DevSecOps1.7k

Syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Stars9,073

Forks869

Last commit1 day ago

Harden Runner GitHub Action

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

Stars1,189

Forks107

Last commit14 days ago

Overlay

Overlay is a browser extension helping developers evaluate open source packages before picking them

Stars229

Forks22

Last commit11 months ago

Preflight

preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.

Stars157

Forks44

Last commit3 years ago