🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

A compilation of resources in the software supply chain security domain, with emphasis on open source

PKI Meta-Linter

EJBCA® – Open-source public key infrastructure (PKI) and certificate authority (CA) software.

Erce – The Easy Rest Client for EJBCA

Bouncy Castle Kotlin API and DSL Distribution (Mirror)

Collection of key attestations from Google, Microsoft and Yubikey devices

PQC Capabilities Matrix (PQCCM)

SignServer – Open source, PKI-based signing software to sign code, documents, timestamps and more.

Plugin for HashiCorp Vault to allow certificate enrollment, signing and revocation via the Keyfactor CA.

Remote Key Attestation

Java Native Access

This repository provides an overview over the EU Digital Green Certificates (DGC) project.

Small tools, that are not part of the EJBCA product, for usage with EJBCA