Software Supply Chain
Showing 7 of 7 projects
An open source trusted cloud native registry that stores, signs, and scans container images and Helm charts.
A CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems.
A CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems.
An open-source artifact metadata API for auditing and governing software supply chains.
A curated collection of offensive security research, techniques, and tools for attacking CI/CD pipelines and software supply chains.
An OCI-based package manager and development tool for Common Lisp, providing ASDF system distribution, code linting, and project scaffolding.
A Go implementation of the in-toto framework for protecting software supply chain integrity through cryptographic verification.
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.