Linux virtual machines, with a focus on running containers

Kubernetes-native Job Queueing

Kubernetes Operator for OpenTelemetry Collector

Ingress NGINX Controller for Kubernetes

OpenTelemetry Go API and SDK

Radius is a cloud-native, portable application platform that makes app development easier for teams building cloud-native apps.

a simple container runtime that aspires to become `runc` for unikernels

A new and improved management framework for extending Kubernetes with Operators

CVE cache of the official CVE List in CVE JSON 5 format

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

OCI registry client - managing content like artifacts, images, packages

Signature Transparency Log designed for ease of use, low cost, and minimal maintenance

A security layer for Git repositories

Common go library shared across sigstore services and clients

A CLI tool to sign and verify artifacts

KJob: Tool for CLI-loving ML researchers

Log monitor for Rekor to verify immutability and monitor entries

Go library for Sigstore signing and verification

Software Supply Chain Transparency Log

Sigstore OIDC PKI

Verify provenance from SLSA compliant builders

eBPF based always-on profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!

Artifact Ratification Framework (CNCF Sandbox)

Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supply-chain metadata from cosign

Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)