Sigstore OIDC PKI

build APKs from source code

Educational Resources for Software Supply Chain Security

A collection of reusable Github Actions workflows.

Build OCI images from APK packages directly without Dockerfile

oci and apk explorer

Package browser provides helpers to open files, readers, and urls in a browser window.

A universal SBOM representation in protocol buffers

Main package repository for production Wolfi images

in-toto Enhancements

Context aware slog

Open Source Identity and Access Management For Modern Applications and Services

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Strimzi web site project

A GitHub App that acts like a Security Token Service (STS) for the Github API

An experimental module for publishing images with tf-apko

HTTP Round Tripper for GitHub Apps - Authenticate as an Installation Workflow

A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.

Bazel rules for apko

GitHub Action to install chainctl in your workflow

in-toto Attestation Framework